last executing test programs: 8.130429464s ago: executing program 3 (id=1277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$kcm(0xa, 0x1, 0x106) r2 = socket$vsock_stream(0x28, 0x1, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d00000004"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000002480)=@abs={0x0, 0x0, 0x4e22}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="010000000300000004000000ff07"], 0x48) syz_fuse_handle_req(0xffffffffffffffff, &(0x7f00000003c0)="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", 0xfffffffffffffd8a, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000300), 0xce4, r8}, 0x38) bpf$MAP_UPDATE_BATCH(0x1b, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000600), 0x0, 0x401, r8, 0x0, 0x100000000000000}, 0x38) (fail_nth: 16) r9 = socket(0x10, 0x3, 0x2) connect$netlink(r9, &(0x7f00000014c0)=@proc={0x10, 0x0, 0x0, 0x200000}, 0xc) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000019080), r0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r10, 0x0, 0x20}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r2, 0x28, 0x1, &(0x7f0000000540)=0xd7d2, 0x8) sendmsg$kcm(r1, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @local}, 0x80, 0x0}, 0x20040011) r11 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x20, r11, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) r12 = syz_open_procfs(0x0, &(0x7f0000000040)='oom_score\x00') pread64(r12, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) 6.829546613s ago: executing program 3 (id=1279): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x80800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5b", 0x30}], 0x1}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r2, &(0x7f00000001c0)="8f69b66e", 0x1f, 0x4000084, 0x0, 0x0) 6.330304423s ago: executing program 3 (id=1280): syz_usb_connect(0x5, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010002020d9640f901df0040090904231a00ff026a07"], 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) (async) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) syz_usb_connect(0x3, 0x88e, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x50, 0x17, 0xe6, 0x20, 0x257a, 0x160d, 0x52a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87c, 0x3, 0xd1, 0x5, 0x0, 0xf, [{{0x9, 0x4, 0xbf, 0x2, 0x4, 0xa7, 0x6, 0x22, 0x8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'GE'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xffffff05, 0x38, 0x5, 0x1}, {0x6, 0x24, 0x1a, 0x2, 0xd}, [@obex={0x5, 0x24, 0x15, 0x6}]}], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x7, 0x30, 0x3}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x0, 0x81, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}, @generic={0x84, 0x23, "34670783fbbdf6806f9dd6b248659967ccd1e1678feb7532af47e22099e805e3ee1603ab38274b25e1868955b3f9aa371a9b5021f688082ad4709ff31730f21025a70bebcc67be9b58e170334759faf1281bc2d12539998379df8ea973524df7dc2b3001ea81d49d8edf93a2f4cb816d43f0f3fc2c03212923b2f823becf0c62849a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x7, 0x65, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x10, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1}, @generic={0x59, 0x4aaacbfb16edffb, "ae4fa581f8801f85540396e04cfd5a1622d1b8887e446bf6988ed8f2d13ef989bd36fb825182833a0e28fc367d8532f2bcc52ace668d936e2d4df88645d164d41e97d1cbc65214759f3f3b86d0bd0aaba0afc494468e92"}]}}]}}, {{0x9, 0x4, 0xed, 0x6, 0x3, 0x80, 0x51, 0x73, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '~'}, {0x5, 0x24, 0x0, 0x1a9}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x1, 0x2, 0xc}}, @generic={0xa9, 0x7, "83dd2f33fa2c80ed70a6e26cea59af185dba7d176f35c589b6a16003ffc4e8046632ab93d05008f0a043b61115abf321c6dbb44c249115f4d5e07db280988b59fe8bf2b4ca510eb413319ceba08a5e0c67aceba335ebff935f2d8a1e64827345390835e622310dfc2b91da89ad4806abb0acd1195b7432719edc55e0e7386ef73330579a0876225c1c145d099967a0550121f714a7eb9e7d175833c41ec4a8edd073aa1a117b86"}], [{{0x9, 0x5, 0x2, 0x2, 0x400, 0x6, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}, @generic={0x7f, 0x6, "8a945fea37d9e41722c08bb36893abc3a9c796345763a6b7a1c57b1943c1540eb870af9869f2b950a945f8b955e010a1374b70c4cc111e2e512a8335aac1e145d6831b4bbf3e04c568e4d6f360e29712944a58bed92c82f47db909e98c6a7fd15f8568f9ebfef10bb536a565b382b4731fa64b1af99dee7feee0cd7238"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x4, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfffd}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x4, 0xbe, 0x6}}]}}, {{0x9, 0x4, 0xec, 0x1, 0x10, 0x5f, 0xc7, 0x24, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x7f, 0x4, 0x7f, [@generic={0xb2, 0x4, "5826f04aab76930f217b1a2a1c7b333730923cbbff848366475bd35873f40fdf9973420fed77bca7fa264cc8261328d08508520f88710e4d94fd41136c87898a1b70980c2ef5204c2707087b706dc1e3c298b816f6edd305c6b857c0c8cfddc99326ccfa024dd816432f39ee92b066b88422c91bf7b8015699f30b6b9b38fcfedb2366a4efcb644dea393b439ed6cd227a1b61bbe3debb3214195889f57a0e1a0a764dd142764fc6390cdaa0e8e4f103"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0xa, 0x1, 0x5}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0xb, 0x80, 0x5, [@generic={0xa7, 0x3, "885fda0da1b55b9525421789ce5d2db9a3194360a74bcf494d67bfd39da9881c6f2c3e7347de1b30bad257b748840b03c028e69e29f114faac1ac92e67100f55be1b4590b253e6585655c9a5a893c2ef9cd00a5fb7fa4796b99ca8364f69f80d62ddef15d5dc12a1a40b85425d9a25a38f99ade6ff8a1fd9348ead1181ddda6390513867077dff3b0cdd4bc6b9c6498b755d5588a644d3ddbb84006c9b985afe0855bd041e"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x3, 0x4, 0x6, [@generic={0x88, 0x23, "f14b551bbe20ab343e38e48db640b0889080d78835b2342bdc98167c497f50c99b8e9a26f434550718cca44e2845aa7dba323b30e723363b409e089e0d7dcb6a4f3e10b4ba8f1ca993d41cc09f69bfa9cabd9b800126ff562b0b04fc65fc4c9014e60703b896d8c3226b466b792e8e34f9cfe68def63976a20de639fa1668a70eefdc01e614d"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x3, 0xb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x6, 0x8, 0x80, [@generic={0x8c, 0xd, "5df8fde7dfa416dcdf0bb0a54d94a2a1d66e7516a0c7b7051448f950caeb4a0ef02ee7a4c3d49ccbda6bfb8cf0cb124a805e6433235d90856feaa94dabb4b22b17d07635e368daa655785be424736fee77c9b36638f665e00bac7a49cc3b0e8ddefc93dbbf589e927bc030810169f4fed724248f0be817e3ac40989daaf7f5e2579c15d525cbc246bccb"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0xe, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x7, 0x39, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x616}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x0, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xbc, 0x9}, @generic={0xf3, 0x1, "ad967cb3e7f4b68caf04b35d8bec7cda58a91fcd3cad6411ed9d89dbcda44df4760068190d0ecda676dbd297cc3ba15dcc924c366f0772fd3da17525fedb273cb762da78c77fbdce6df6cc87b88584f4b6ec88719fdb836b74a5a6f6d351be3908402f9bb86413fbbfb3a48ffdfec73c0bd5f796b35ccba32a208f80a28c667c4ad63da368085a9e3ee69394a5af23d085fa92fe3710c63d2f06e109247b4a79e8cd04e61f563b5fe4348e0ce43f01453fff5f0729e17f3e87cf4a391ea6ae147b74ea682a16389b1ed7eec4426b81e5173c1f0006bb6339a4095f95d4cb87939692a38786cf3a0800dd0d0a9cc4380903"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x6, 0xfe, 0x40, [@generic={0x40, 0x23, "3aafd9e2c484d05496a9f8d2adb8c666d38f042132684c171a223eacb36f19b6f74900804ca0b94b726c900f39cfcabf795a369e5c05a2f2041cc2137fc5"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x7f, 0xc, 0x2}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x6b, 0x0, 0x7, [@generic={0x80, 0xf, "7849160899f9cd9c1504db3275dccb731f541c2b99bcc87d1adcf5a9fd86e8884b3a3608581d17cd56e5f18098fdb221d7619523e4205fea69f5d14753bd10942942959d005567c127e0e87b4d3b92efe3514e09dfb399a3359b664181129fae782ef803233f8e169ae82afbd09efad11a3acaf6e0eaa7c57feb902aa6c6"}]}}, {{0x9, 0x5, 0x16, 0x0, 0x400, 0x2, 0x9, 0x4}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x7, 0x81, 0x3, [@generic={0xcf, 0x4, "cdfbe7661d8839fbfbe08d9f9b9876fa747ce8d163573af7d0a45b943328cb2286a09c122ee57d5aef079c65897c8e4ac95a2aed394db5e41455b85bdff82cef4cb4654c982f2095a08a471d6eac3cfaa085a9e640e38f517e5290cbf164a314b74ede93fac2226d0e86b6221d2444b5ebfb830beddb98561cdf0961bae9164b5a7dc5018225a387acc567b3cc0eebbbc66a3267282832a6058b92acdb7b79844b592d13573012042ee41c1d686b28a069db0d5d62870f077e905bdae78a02fa7f7910a10a142fff9155dafa5f"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x3, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x8}]}}, {{0x9, 0x5, 0x1, 0x10, 0x77ad81dfd5751ba7, 0x8, 0x2, 0x1, [@generic={0x5, 0x11, "3a34b6"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x3}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0xc, 0x9, 0x0, 0x4}, 0x30, &(0x7f0000000180)={0x5, 0xf, 0x30, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x1, 0xfa, 0x1, 0x9}, @ssp_cap={0x35, 0x10, 0xa, 0xff, 0x5, 0x6, 0xf, 0x800, [0x3f00, 0xffffcf, 0xf, 0x156e13b56c97ee9c, 0xff00f0]}]}, 0x8, [{0x34, &(0x7f0000000d40)=@string={0x34, 0x3, "2ace61107e0ea5e1ab29ea617ea80932153e66e0db076caa29ef23561d95f3793172373f5dfec4f979b09ab5218a7229047b"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x405}}, {0x13, &(0x7f0000000e00)=ANY=[@ANYBLOB="1343ee358fe9fa4aab4285b338a365073499420c"]}, {0x4a, &(0x7f0000000b80)=ANY=[@ANYBLOB="4a032dba3640830a00207125fbed2a5f234fd0b4a3261bdfb0a97051dd9ef60316ac1005e0a7f116581231527889b530feb72471aa1da582812bbddae495ed7b3947fb12a44e7eb80000"]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}, {0xc9, &(0x7f0000000c80)=ANY=[@ANYBLOB="dd3385c6c9984cc6ef859780"]}, {0x4, &(0x7f0000000d80)=@string={0x0, 0x3, "6d1f4f24b120272bbc5176006597be1b189fdfd907944a590fc8a8da24d1aa0d201650e6c8464c2aa35b2765b6b2d4551d66abe4f92934e1c46776954f90d2ae22699606c8d601335ddd4f9055bb705da4d87bc08e7f2cc694fca6db3efcdb99de5be48f7f12d947aec29dab7308f7"}}]}) (async) syz_usb_connect(0x3, 0x88e, &(0x7f0000000200)={{0x12, 0x1, 0x110, 0x50, 0x17, 0xe6, 0x20, 0x257a, 0x160d, 0x52a3, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x87c, 0x3, 0xd1, 0x5, 0x0, 0xf, [{{0x9, 0x4, 0xbf, 0x2, 0x4, 0xa7, 0x6, 0x22, 0x8, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, 'GE'}, {0x5, 0x24, 0x0, 0x8}, {0xd, 0x24, 0xf, 0x1, 0xffffff05, 0x38, 0x5, 0x1}, {0x6, 0x24, 0x1a, 0x2, 0xd}, [@obex={0x5, 0x24, 0x15, 0x6}]}], [{{0x9, 0x5, 0xc, 0x10, 0x8, 0x7, 0x30, 0x3}}, {{0x9, 0x5, 0x9, 0x10, 0x3ff, 0x0, 0x81, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x9, 0x1}, @generic={0x84, 0x23, "34670783fbbdf6806f9dd6b248659967ccd1e1678feb7532af47e22099e805e3ee1603ab38274b25e1868955b3f9aa371a9b5021f688082ad4709ff31730f21025a70bebcc67be9b58e170334759faf1281bc2d12539998379df8ea973524df7dc2b3001ea81d49d8edf93a2f4cb816d43f0f3fc2c03212923b2f823becf0c62849a"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x20, 0x7, 0x65, 0xc, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x400}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x8}]}}, {{0x9, 0x5, 0x1, 0x3, 0x8, 0x10, 0x5, 0x5, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x9, 0x1}, @generic={0x59, 0x4aaacbfb16edffb, "ae4fa581f8801f85540396e04cfd5a1622d1b8887e446bf6988ed8f2d13ef989bd36fb825182833a0e28fc367d8532f2bcc52ace668d936e2d4df88645d164d41e97d1cbc65214759f3f3b86d0bd0aaba0afc494468e92"}]}}]}}, {{0x9, 0x4, 0xed, 0x6, 0x3, 0x80, 0x51, 0x73, 0x9, [@cdc_ecm={{0x6, 0x24, 0x6, 0x0, 0x0, '~'}, {0x5, 0x24, 0x0, 0x1a9}, {0xd, 0x24, 0xf, 0x1, 0xb, 0x1, 0x2, 0xc}}, @generic={0xa9, 0x7, "83dd2f33fa2c80ed70a6e26cea59af185dba7d176f35c589b6a16003ffc4e8046632ab93d05008f0a043b61115abf321c6dbb44c249115f4d5e07db280988b59fe8bf2b4ca510eb413319ceba08a5e0c67aceba335ebff935f2d8a1e64827345390835e622310dfc2b91da89ad4806abb0acd1195b7432719edc55e0e7386ef73330579a0876225c1c145d099967a0550121f714a7eb9e7d175833c41ec4a8edd073aa1a117b86"}], [{{0x9, 0x5, 0x2, 0x2, 0x400, 0x6, 0x4, 0x2, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x2}, @generic={0x7f, 0x6, "8a945fea37d9e41722c08bb36893abc3a9c796345763a6b7a1c57b1943c1540eb870af9869f2b950a945f8b955e010a1374b70c4cc111e2e512a8335aac1e145d6831b4bbf3e04c568e4d6f360e29712944a58bed92c82f47db909e98c6a7fd15f8568f9ebfef10bb536a565b382b4731fa64b1af99dee7feee0cd7238"}]}}, {{0x9, 0x5, 0x7, 0x0, 0x40, 0x4, 0x0, 0x9, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x0, 0xfffd}]}}, {{0x9, 0x5, 0xe, 0x3, 0x3ff, 0x4, 0xbe, 0x6}}]}}, {{0x9, 0x4, 0xec, 0x1, 0x10, 0x5f, 0xc7, 0x24, 0x0, [], [{{0x9, 0x5, 0x1, 0x0, 0x40, 0x7f, 0x4, 0x7f, [@generic={0xb2, 0x4, "5826f04aab76930f217b1a2a1c7b333730923cbbff848366475bd35873f40fdf9973420fed77bca7fa264cc8261328d08508520f88710e4d94fd41136c87898a1b70980c2ef5204c2707087b706dc1e3c298b816f6edd305c6b857c0c8cfddc99326ccfa024dd816432f39ee92b066b88422c91bf7b8015699f30b6b9b38fcfedb2366a4efcb644dea393b439ed6cd227a1b61bbe3debb3214195889f57a0e1a0a764dd142764fc6390cdaa0e8e4f103"}]}}, {{0x9, 0x5, 0xf, 0xc, 0x10, 0xa, 0x1, 0x5}}, {{0x9, 0x5, 0x9, 0x1, 0x200, 0xb, 0x80, 0x5, [@generic={0xa7, 0x3, "885fda0da1b55b9525421789ce5d2db9a3194360a74bcf494d67bfd39da9881c6f2c3e7347de1b30bad257b748840b03c028e69e29f114faac1ac92e67100f55be1b4590b253e6585655c9a5a893c2ef9cd00a5fb7fa4796b99ca8364f69f80d62ddef15d5dc12a1a40b85425d9a25a38f99ade6ff8a1fd9348ead1181ddda6390513867077dff3b0cdd4bc6b9c6498b755d5588a644d3ddbb84006c9b985afe0855bd041e"}]}}, {{0x9, 0x5, 0x8, 0x8, 0x3ff, 0x3, 0x4, 0x6, [@generic={0x88, 0x23, "f14b551bbe20ab343e38e48db640b0889080d78835b2342bdc98167c497f50c99b8e9a26f434550718cca44e2845aa7dba323b30e723363b409e089e0d7dcb6a4f3e10b4ba8f1ca993d41cc09f69bfa9cabd9b800126ff562b0b04fc65fc4c9014e60703b896d8c3226b466b792e8e34f9cfe68def63976a20de639fa1668a70eefdc01e614d"}]}}, {{0x9, 0x5, 0x8, 0x1, 0x8, 0x3, 0xb, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0x40, 0x3}]}}, {{0x9, 0x5, 0x0, 0x10, 0x40, 0x6, 0x8, 0x80, [@generic={0x8c, 0xd, "5df8fde7dfa416dcdf0bb0a54d94a2a1d66e7516a0c7b7051448f950caeb4a0ef02ee7a4c3d49ccbda6bfb8cf0cb124a805e6433235d90856feaa94dabb4b22b17d07635e368daa655785be424736fee77c9b36638f665e00bac7a49cc3b0e8ddefc93dbbf589e927bc030810169f4fed724248f0be817e3ac40989daaf7f5e2579c15d525cbc246bccb"}]}}, {{0x9, 0x5, 0xe, 0x1, 0x3ff, 0xe, 0x0, 0x8, [@uac_iso={0x7, 0x25, 0x1, 0x82, 0x5}]}}, {{0x9, 0x5, 0x0, 0x10, 0x20, 0x7, 0x39, 0x6, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x3, 0x616}]}}, {{0x9, 0x5, 0xe, 0x0, 0x10, 0x0, 0x9, 0x1, [@uac_iso={0x7, 0x25, 0x1, 0x2, 0xbc, 0x9}, @generic={0xf3, 0x1, "ad967cb3e7f4b68caf04b35d8bec7cda58a91fcd3cad6411ed9d89dbcda44df4760068190d0ecda676dbd297cc3ba15dcc924c366f0772fd3da17525fedb273cb762da78c77fbdce6df6cc87b88584f4b6ec88719fdb836b74a5a6f6d351be3908402f9bb86413fbbfb3a48ffdfec73c0bd5f796b35ccba32a208f80a28c667c4ad63da368085a9e3ee69394a5af23d085fa92fe3710c63d2f06e109247b4a79e8cd04e61f563b5fe4348e0ce43f01453fff5f0729e17f3e87cf4a391ea6ae147b74ea682a16389b1ed7eec4426b81e5173c1f0006bb6339a4095f95d4cb87939692a38786cf3a0800dd0d0a9cc4380903"}]}}, {{0x9, 0x5, 0x1, 0x1, 0x10, 0x6, 0xfe, 0x40, [@generic={0x40, 0x23, "3aafd9e2c484d05496a9f8d2adb8c666d38f042132684c171a223eacb36f19b6f74900804ca0b94b726c900f39cfcabf795a369e5c05a2f2041cc2137fc5"}]}}, {{0x9, 0x5, 0xb, 0x8, 0x8, 0x7f, 0xc, 0x2}}, {{0x9, 0x5, 0xa, 0x0, 0x10, 0x6b, 0x0, 0x7, [@generic={0x80, 0xf, "7849160899f9cd9c1504db3275dccb731f541c2b99bcc87d1adcf5a9fd86e8884b3a3608581d17cd56e5f18098fdb221d7619523e4205fea69f5d14753bd10942942959d005567c127e0e87b4d3b92efe3514e09dfb399a3359b664181129fae782ef803233f8e169ae82afbd09efad11a3acaf6e0eaa7c57feb902aa6c6"}]}}, {{0x9, 0x5, 0x16, 0x0, 0x400, 0x2, 0x9, 0x4}}, {{0x9, 0x5, 0xa, 0xc, 0x10, 0x7, 0x81, 0x3, [@generic={0xcf, 0x4, "cdfbe7661d8839fbfbe08d9f9b9876fa747ce8d163573af7d0a45b943328cb2286a09c122ee57d5aef079c65897c8e4ac95a2aed394db5e41455b85bdff82cef4cb4654c982f2095a08a471d6eac3cfaa085a9e640e38f517e5290cbf164a314b74ede93fac2226d0e86b6221d2444b5ebfb830beddb98561cdf0961bae9164b5a7dc5018225a387acc567b3cc0eebbbc66a3267282832a6058b92acdb7b79844b592d13573012042ee41c1d686b28a069db0d5d62870f077e905bdae78a02fa7f7910a10a142fff9155dafa5f"}]}}, {{0x9, 0x5, 0xe, 0x0, 0x3ff, 0x3, 0x8, 0x0, [@uac_iso={0x7, 0x25, 0x1, 0x0, 0x80, 0x8}]}}, {{0x9, 0x5, 0x1, 0x10, 0x77ad81dfd5751ba7, 0x8, 0x2, 0x1, [@generic={0x5, 0x11, "3a34b6"}, @uac_iso={0x7, 0x25, 0x1, 0x80, 0x9, 0x3}]}}]}}]}}]}}, &(0x7f0000000c00)={0xa, &(0x7f0000000140)={0xa, 0x6, 0x300, 0x6, 0xc, 0x9, 0x0, 0x4}, 0x30, &(0x7f0000000180)={0x5, 0xf, 0x30, 0x2, [@wireless={0xb, 0x10, 0x1, 0xc, 0x50, 0x1, 0xfa, 0x1, 0x9}, @ssp_cap={0x35, 0x10, 0xa, 0xff, 0x5, 0x6, 0xf, 0x800, [0x3f00, 0xffffcf, 0xf, 0x156e13b56c97ee9c, 0xff00f0]}]}, 0x8, [{0x34, &(0x7f0000000d40)=@string={0x34, 0x3, "2ace61107e0ea5e1ab29ea617ea80932153e66e0db076caa29ef23561d95f3793172373f5dfec4f979b09ab5218a7229047b"}}, {0x4, &(0x7f0000000d00)=@lang_id={0x4, 0x3, 0x405}}, {0x13, &(0x7f0000000e00)=ANY=[@ANYBLOB="1343ee358fe9fa4aab4285b338a365073499420c"]}, {0x4a, &(0x7f0000000b80)=ANY=[@ANYBLOB="4a032dba3640830a00207125fbed2a5f234fd0b4a3261bdfb0a97051dd9ef60316ac1005e0a7f116581231527889b530feb72471aa1da582812bbddae495ed7b3947fb12a44e7eb80000"]}, {0x4, &(0x7f0000000b00)=@lang_id={0x4, 0x3, 0x500a}}, {0x4, &(0x7f0000000b40)=@lang_id={0x4, 0x3, 0x1009}}, {0xc9, &(0x7f0000000c80)=ANY=[@ANYBLOB="dd3385c6c9984cc6ef859780"]}, {0x4, &(0x7f0000000d80)=@string={0x0, 0x3, "6d1f4f24b120272bbc5176006597be1b189fdfd907944a590fc8a8da24d1aa0d201650e6c8464c2aa35b2765b6b2d4551d66abe4f92934e1c46776954f90d2ae22699606c8d601335ddd4f9055bb705da4d87bc08e7f2cc694fca6db3efcdb99de5be48f7f12d947aec29dab7308f7"}}]}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x31, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) (async) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) (async) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e23, 0x3, 'dh\x00', 0x1, 0x7, 0x49}, 0x2c) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x1c0, 0xffffffff, 0xffffffff, 0x1c0, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @dev, [0xffffff00], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd8, 0x100, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@uncond, 0x0, 0xd0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xfffffffffffffc98}, {0x28}}}}, 0xffffffffffffff65) r5 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000180), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000e40)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r5, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB="252e5a3100000000643d19c90af01ab257bfb21fe7ce92d2911c3706090032d5766a4280d94b1a6b12445d96f3a883a0f404b378a52f1ebe9f468dde147e806a00b7ec1c525342b700e812af196c2b09fa0167ce3b7f5ccff1c727c167ca1ef453679bea2d7340421192dfd7108cbc9c798d0bf79f60ae52fcbefb87343cc984fd1edf7784f88721f575c349ac4f4b3c683eb1338e246633e3448a1111ab3f2f4552d4df3fda8131e612162025590c4a27dd", @ANYRESDEC=0x0, @ANYBLOB=',\x00']) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) (async) openat$dir(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x515002, 0xc6) landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) (async) r6 = landlock_create_ruleset(&(0x7f00000000c0)={0x501b, 0x2, 0x1}, 0x18, 0x0) landlock_restrict_self(r6, 0x0) connect$unix(0xffffffffffffffff, 0x0, 0x0) (async) connect$unix(0xffffffffffffffff, 0x0, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r3, 0x0, 0x487, &(0x7f0000000000)={{0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0x3, 'wrr\x00', 0x4, 0x81, 0x5}, {@rand_addr=0xac1414aa, 0x4e23, 0x3, 0x1cb, 0x12d5c, 0x12d5c}}, 0x44) r7 = syz_open_dev$vim2m(&(0x7f0000000000), 0x47b, 0x2) ioctl$vim2m_VIDIOC_S_CTRL(r7, 0xc008561c, &(0x7f0000000040)={0xa00965, 0x1}) 5.649700271s ago: executing program 1 (id=1285): syz_io_uring_setup(0x75d2, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) (async) syz_io_uring_submit(r0, r1, &(0x7f0000000080)=@IORING_OP_ASYNC_CANCEL={0xe, 0x10, 0x0, 0x0, 0x0, 0x365cf, 0x0, 0x0, 0x1}) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) syz_io_uring_setup(0x235, &(0x7f0000000380)={0x0, 0xf691, 0x10100, 0x3, 0x2b4}, &(0x7f0000000200)=0x0, &(0x7f00000001c0)=0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r4, r4, 0x2f, 0x20, 0x4}, 0x20) (async) syz_io_uring_submit(r2, r3, 0x0) io_uring_enter(0xffffffffffffffff, 0x708, 0x8009432, 0x20, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x100000a, 0x5d032, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, 0x0) open_tree(0xffffffffffffffff, &(0x7f0000000140)='./file0\x00', 0x8100) (async) socket$inet_mptcp(0x2, 0x1, 0x106) r5 = openat$vhost_vsock(0xffffffffffffff9c, 0x0, 0x2, 0x0) (async) r6 = eventfd(0x9) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, 0x0, 0x0) (async) r8 = syz_io_uring_setup(0x835, &(0x7f00000000c0)={0x0, 0x679a, 0x400, 0x2000006, 0x3ce}, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) (async) syz_io_uring_submit(0x0, 0x0, 0x0) io_uring_enter(r8, 0x3516, 0x0, 0x0, 0x0, 0x0) (async) ioctl$VHOST_SET_LOG_FD(r5, 0x4004af07, &(0x7f0000000240)=r6) r9 = userfaultfd(0x801) ioctl$UFFDIO_API(r9, 0xc018aa3f, 0x0) (async) ioctl$UFFDIO_REGISTER(r9, 0xc020aa00, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x0, 0x0, 0xc06620, 0x4) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) 5.613917397s ago: executing program 2 (id=1286): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r0, 0x402, 0xd) (async) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r1, 0x402, 0x18) (async) open(&(0x7f00009e1000)='./file0\x00', 0x30001, 0x0) 5.542513379s ago: executing program 2 (id=1287): syz_usb_connect(0x5, 0x24, &(0x7f0000001280)={{0x12, 0x1, 0x300, 0x0, 0x1f, 0x66, 0x8, 0x58f, 0x6610, 0x4805, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x4, 0x95, 0x70, 0x81, [{{0x9, 0x4, 0x0, 0x81, 0x0, 0xff, 0xff, 0xff, 0x2}}]}}]}}, &(0x7f0000001700)={0xffffffa0, 0x0, 0x0, 0x0, 0x23}) r0 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000000)='source', &(0x7f0000000100)='::,:/', 0x0) r1 = syz_open_dev$I2C(&(0x7f0000000000), 0x1, 0x402) ioctl$I2C_RDWR(r1, 0x707, &(0x7f0000000180)={&(0x7f0000000140)=[{0x9, 0x2200, 0x0, 0x0}, {0x8000, 0xaa00, 0x0, 0x0}], 0x2}) syz_usb_connect(0x0, 0x2d, &(0x7f0000000100)=ANY=[@ANYBLOB="12010000d5e9bd40eb030200c0ba050000010902115c01000000000904000001b504b100090581"], 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r4, 0x4008ae89, &(0x7f0000000000)={0x1, 0x0, [{0x40000073, 0x0, 0x9}]}) r5 = syz_open_dev$evdev(&(0x7f0000000000), 0x4, 0x0) ioctl$EVIOCGKEYCODE_V2(r5, 0x80284504, &(0x7f0000000040)=""/185) 5.46967146s ago: executing program 1 (id=1288): socket$igmp6(0xa, 0x3, 0x2) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) socket$kcm(0x10, 0x2, 0x0) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x6, 0x87}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000340), 0x68c81, 0x0) ioctl$DRM_IOCTL_SYNCOBJ_FD_TO_HANDLE_SYNC_FILE(0xffffffffffffffff, 0xc01064c2, &(0x7f00000001c0)) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x1) r5 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) r6 = dup(r5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb, 0x13, r6, 0x2000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x42, &(0x7f0000000380)='/proc.sys/net/p\x9aJ\xdc\xd6\'\xd9ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r7 = syz_open_dev$vbi(&(0x7f0000000040), 0x2, 0x2) ioctl$VIDIOC_S_INPUT(r7, 0xc0045627, &(0x7f0000000000)=0x2) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x1) syz_io_uring_setup(0xecb, 0x0, &(0x7f0000000300), &(0x7f0000000440)) open_by_handle_at(r4, &(0x7f0000000240)=ANY=[], 0x10000) ioctl$TIOCSERGETLSR(r6, 0x5459, &(0x7f00000000c0)) 3.528216614s ago: executing program 4 (id=1293): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) (async) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0xc) ioctl$VHOST_SET_VRING_ERR(r1, 0x4008af22, &(0x7f0000000040)={0x1, r2}) (async) close_range(r0, r1, 0x0) 3.369774973s ago: executing program 4 (id=1294): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000000)={0x84, &(0x7f0000000500)=ANY=[@ANYBLOB="000002"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) mount(&(0x7f00000000c0)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000000)='iso9660\x00', 0x208000, 0x0) 3.199762465s ago: executing program 3 (id=1295): socket$nl_route(0x10, 0x3, 0x0) mq_notify(0xffffffffffffffff, &(0x7f0000000000)={0x110c230000, 0xffffffff, 0x0, @thr={0x0, 0x0}}) fchmodat(0xffffffffffffff9c, 0x0, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000a40), 0xffffffffffffffff) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000040)=0x4f8a, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000002d80), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000002e00)={'wpan0\x00'}) r3 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x40c8e0, 0x0) ioctl$TCFLSH(r3, 0x80045439, 0x1) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000002f00)={0x0, 0x0, &(0x7f0000002ec0)={&(0x7f0000002e40)={0x14, r2, 0x20, 0x70bd23, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4004880}, 0x40480b4) sendmmsg$unix(r0, &(0x7f00000029c0)=[{{&(0x7f0000000600)=@file={0x0, './file0\x00'}, 0x6e, 0x0, 0x0, &(0x7f0000000c00)=[@cred={{0x1c, 0x1, 0x51}}], 0x20, 0x24000010}}], 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r4, 0x6, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) request_key(&(0x7f0000000040)='asymmetric\x00', 0x0, &(0x7f0000001fee)='R\x10rust\xe3c*s\xa8rVid8\xc4e', 0x0) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000001c0), 0x240, 0x0) read(r7, 0x0, 0x0) ioctl$TIOCSTI(r7, 0x5412, &(0x7f0000000040)=0x33) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) setsockopt$EBT_SO_SET_COUNTERS(0xffffffffffffffff, 0x0, 0x81, 0x0, 0x0) 3.105070988s ago: executing program 1 (id=1296): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x3c, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) 3.021448686s ago: executing program 1 (id=1297): prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x3, 0x6, &(0x7f0000006680)=0x1) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="2c0000001300290a000000000000000007000000", @ANYRES32=r2, @ANYBLOB="00000000000000000c001a8008000480"], 0x2c}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x94eb2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000240)={0x94, r5, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x8}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_ADDR={0x40, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xa0}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @remote}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xd}]}]}, 0x94}, 0x1, 0x0, 0x0, 0x200600dc}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f00000004c0)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r8 = syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') pread64(r8, &(0x7f0000001240)=""/102400, 0x200000, 0x0) unshare(0x2040400) 2.365543771s ago: executing program 0 (id=1299): r0 = socket$inet6(0xa, 0x5, 0x84) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r3, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r3, 0x7a0, &(0x7f0000000000)={@local}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r3, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e}) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r4, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, &(0x7f0000000240)={@host}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r4, 0x7a8, &(0x7f0000000540)={{@hyper, 0x2}, @hyper, 0x0, 0x0, 0x5e, 0xfffffffffffffff9}) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) clock_gettime(0x0, &(0x7f0000009a40)={0x0, 0x0}) recvmmsg(r0, &(0x7f0000009840)=[{{&(0x7f0000000100)=@nfc_llcp, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)=""/4096, 0x1000}, {&(0x7f0000001180)=""/4096, 0x1000}, {&(0x7f0000000000)=""/57, 0x39}], 0x3, &(0x7f0000002180)=""/25, 0x19}}, {{&(0x7f00000021c0)=@in6={0xa, 0x0, 0x0, @local}, 0x80, &(0x7f0000003240)=[{&(0x7f0000002240)=""/4096, 0x1000}], 0x1, &(0x7f0000003280)=""/61, 0x3d}}, {{&(0x7f00000032c0)=@ethernet, 0x80, &(0x7f00000036c0)=[{&(0x7f0000003340)=""/69, 0x45}, {&(0x7f00000033c0)=""/150, 0x96}, {&(0x7f0000003480)=""/213, 0xd5}, {&(0x7f0000003580)=""/36, 0x24}, {&(0x7f00000035c0)=""/151, 0x97}, {&(0x7f0000003680)=""/43, 0x2b}], 0x6, &(0x7f0000003740)=""/248, 0xf8}, 0xe08b}, {{0x0, 0x0, &(0x7f0000003900)=[{&(0x7f0000003840)=""/90, 0x5a}, {&(0x7f00000038c0)=""/58, 0x3a}], 0x2, &(0x7f0000003940)=""/202, 0xca}, 0x9}, {{&(0x7f0000003a40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x80, &(0x7f0000003c80)=[{&(0x7f0000003ac0)=""/70, 0x46}, {&(0x7f0000003b40)=""/158, 0x9e}, {&(0x7f0000003c00)=""/87, 0x57}], 0x3, &(0x7f0000003cc0)=""/3, 0x3}}, {{0x0, 0x0, &(0x7f0000006040)=[{&(0x7f0000003d00)=""/25, 0x19}, {&(0x7f0000003d40)=""/4096, 0x1000}, {&(0x7f0000004d40)=""/216, 0xd8}, {&(0x7f0000004e40)=""/23, 0x17}, {&(0x7f0000004e80)=""/202, 0xca}, {&(0x7f0000004f80)=""/181, 0xb5}, {&(0x7f0000005040)=""/4096, 0x1000}], 0x7, &(0x7f00000060c0)=""/219, 0xdb}, 0xff}, {{&(0x7f00000061c0)=@tipc=@id, 0x80, &(0x7f0000006240)}, 0x40}, {{&(0x7f0000006280)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x80, &(0x7f0000008780)=[{&(0x7f0000006300)=""/157, 0x9d}, {&(0x7f00000063c0)=""/139, 0x8b}, {&(0x7f0000006480)=""/183, 0xb7}, {&(0x7f0000006540)=""/4096, 0x1000}, {&(0x7f0000007540)=""/143, 0x8f}, {&(0x7f0000007600)=""/145, 0x91}, {&(0x7f00000076c0)=""/5, 0x5}, {&(0x7f0000007700)=""/20, 0x14}, {&(0x7f0000007740)=""/12, 0xc}, {&(0x7f0000007780)=""/4096, 0x1000}], 0xa, &(0x7f0000008840)=""/4096, 0x1000}, 0x5}], 0x8, 0x10000, &(0x7f0000009a80)={r6, r7+60000000}) ioctl$KVM_SET_MSRS(r5, 0x4008ae89, &(0x7f00000000c0)={0x1, 0x0, [{0x480, 0x0, 0xd8100011e57ed0}]}) shutdown(r0, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f0000000040)={0x1, 0xffffffff}, 0x8) close(r0) 2.249548187s ago: executing program 3 (id=1300): bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) r0 = fsopen(&(0x7f00000000c0)='hfsplus\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000280)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\bb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xd7\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async, rerun: 64) r1 = getpid() (rerun: 64) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) (async, rerun: 32) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 32) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000003400)=[{{&(0x7f0000000400)=@isdn, 0x0, &(0x7f0000000040), 0x0, &(0x7f0000000580)=""/111}, 0xe}, {{&(0x7f0000000600)=@x25, 0x0, &(0x7f0000000300)=[{&(0x7f0000000680)=""/167}], 0x0, &(0x7f0000000740)=""/149}, 0x7f}, {{&(0x7f0000000800)=@l2={0x1f, 0x0, @none}, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000880)=""/50}, {&(0x7f0000000a00)=""/210}, {&(0x7f0000000b00)=""/33}, {&(0x7f0000000b40)=""/156}], 0x0, &(0x7f0000000c40)=""/244}, 0x1}, {{&(0x7f0000000d40)=@ethernet={0x0, @link_local}, 0x0, &(0x7f0000001180)=[{&(0x7f0000000dc0)=""/97}, {&(0x7f0000000e40)=""/229}, {&(0x7f00000022c0)=""/4096}, {&(0x7f0000000f40)=""/132}, {&(0x7f0000001000)=""/98}, {&(0x7f0000001080)=""/39}, {&(0x7f00000010c0)=""/171}]}, 0x2058c000}, {{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001200)=""/93}, {&(0x7f0000001280)=""/179}, {&(0x7f0000001340)=""/185}, {&(0x7f0000001400)=""/101}, {&(0x7f0000001480)=""/196}, {&(0x7f0000001580)=""/151}], 0x0, &(0x7f00000016c0)=""/92}, 0xfffffffb}, {{&(0x7f0000001740)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, 0x0, &(0x7f0000003380)=[{&(0x7f00000032c0)=""/168}], 0x0, &(0x7f00000033c0)}, 0x9442}], 0x400002d, 0x21, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x9, &(0x7f0000000000)=@raw=[@printk={@lu={0x18, 0x4}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xb8}}, @exit], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) (async, rerun: 64) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) (async, rerun: 64) set_mempolicy_home_node(&(0x7f0000349000/0xa000)=nil, 0xa000, 0x0, 0x3f00000000000000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) r6 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f00000002c0)={0x7, 0x0, 0x6737, 0x3, 0x5, "84a4df9aeb944af9e8922912cee2b03da46f33"}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffffb9}, 0x48) (async) sendfile(0xffffffffffffffff, r6, 0x0, 0x20000023896) 2.166459058s ago: executing program 0 (id=1301): r0 = openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$SOUND_MIXER_READ_STEREODEVS(r0, 0x80044dfb, &(0x7f0000000100)) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c40)={0x8, 0x3, &(0x7f0000000040)=ANY=[@ANYRESHEX=0x0], &(0x7f0000001200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4a}, 0x94) r2 = fsopen(&(0x7f0000000000)='cgroup2\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r2, 0x6, 0x0, 0x0, 0x0) r3 = fsmount(r2, 0x0, 0x0) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x200, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x7, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x5}, {0xa, 0x5}]}]}, {0x0, [0x61, 0x5f, 0x2e, 0x61, 0x61]}}, 0x0, 0x3b, 0x0, 0x0, 0x9}, 0x28) bpf$BPF_LINK_CREATE(0x1c, &(0x7f00000003c0)={r1, r3}, 0x10) r4 = socket$inet6(0xa, 0x2, 0x3a) r5 = dup(r4) r6 = socket$inet(0xa, 0x801, 0x0) setsockopt$IPT_SO_SET_REPLACE(r6, 0x0, 0x40, &(0x7f0000001680)=@mangle={'mangle\x00', 0x44, 0x6, 0xc28, 0x98, 0x98, 0x0, 0x228, 0x98, 0xb90, 0xb90, 0xb90, 0xb90, 0xb90, 0x6, 0x0, {[{{@ip={@broadcast, @dev, 0x0, 0x0, 'geneve1\x00', 'ip6gre0\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xac8}}, {{@ip={@remote, @local, 0x0, 0x0, 'vcan0\x00', 'veth0_virt_wifi\x00'}, 0x0, 0xa8, 0xd0, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0xe}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x98, 0xc0, 0x0, {}, [@common=@ttl={{0x28}}]}, @ECN={0x28}}, {{@ip={@private, @multicast2, 0x0, 0x0, 'veth0\x00', 'bond0\x00'}, 0x0, 0x878, 0x8a0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@u32={{0x7e0}}]}, @unspec=@CHECKSUM={0x28}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'batadv_slave_1\x00'}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xc88) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB], &(0x7f00000003c0)='GPL\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r7}, 0x10) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@mpls_getroute={0x1c, 0x1a, 0x9e8a232eead7ae69, 0x70bd26, 0x0, {0x1c, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x4}}, 0x1c}, 0x1, 0x0, 0x0, 0x4040}, 0x0) bind$unix(r5, &(0x7f00000001c0)=@abs={0xa, 0x2}, 0x6e) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x4, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x29}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_emit_ethernet(0x3e, &(0x7f0000000240)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6012000800083a00fc000000000000000000000000000001fe8000000000000000210000000000aa8100907802000000438e87d450d62e14f9d059399800ce70b2f9f83e682f5974d1fe8fc65d102e20db0507784122a372c5413876b386f5c1f0f1029a91cf4c92b29f27ff8b8022b5011ea5118099f4512fd04647f705be3dae998a28fee3149ae5645f002650f898facfc6e33fed42bd35c78e0c85f0a68f2b9fb9cae13c71ddc1f2a67243aba66229c1d6046f1b5b17029bfd276f421fc12af2b5d4f6314e579fdd86257767b4399dd9316848ceeec6a725547bc1502579ac"], 0x0) socket$inet_sctp(0x2, 0x5, 0x84) 2.007669527s ago: executing program 1 (id=1302): ioctl$F2FS_IOC_GET_COMPRESS_BLOCKS(0xffffffffffffffff, 0x8008f511, &(0x7f0000000040)) socket$inet_tcp(0x2, 0x1, 0x0) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f00000001c0), 0x80280, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) r2 = syz_io_uring_setup(0x117, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x3a6}, &(0x7f0000000000)=0x0, &(0x7f0000000200)=0x0) pipe2$9p(&(0x7f0000000000)={0xffffffffffffffff}, 0x0) splice(r5, 0x0, 0xffffffffffffffff, 0x0, 0x10000000000019, 0x0) ioctl$DRM_IOCTL_MODE_GETENCODER(0xffffffffffffffff, 0xc01464a6, 0x0) openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000180), 0x101000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x3, 0x4, &(0x7f0000000300)=@framed={{}, [@map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x1, '\x00', 0x0, @sched_cls=0x36, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000}, 0x94) ioctl$DRM_IOCTL_MODE_GETCRTC(0xffffffffffffffff, 0xc06864a1, 0x0) r6 = dup(0xffffffffffffffff) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffc00, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000000c0)=@IORING_OP_SENDMSG={0x9, 0x40, 0x0, r1, 0x0, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000100000001000000"], 0x18}, 0x0, 0x20040000}) r7 = openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000340)}, {0x0}], 0x2) io_uring_enter(r2, 0x47f6, 0x80ffff, 0x4, 0x0, 0x0) r8 = openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) sched_setaffinity(0x0, 0x0, 0x0) syz_clone3(&(0x7f0000000700)={0x80000000, &(0x7f0000000340), &(0x7f00000003c0), &(0x7f0000000500), {}, &(0x7f0000000540)=""/32, 0x20, &(0x7f0000000580)=""/46, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, {r6}}, 0x58) ioctl$UI_DEV_DESTROY(r8, 0x5502) r9 = socket$kcm(0x2, 0x5, 0x84) setsockopt$sock_attach_bpf(r9, 0x84, 0x25, &(0x7f0000000000), 0x20000010) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x5, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x24}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xe}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0xf, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) 1.921549873s ago: executing program 0 (id=1303): r0 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_rfc1337\x00', 0x2, 0x0) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f0000000040)='syzkaller\x00'}, 0x90) r2 = socket$packet(0x11, 0x3, 0x300) syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e0707051474"], 0xa) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x8, 0x37, 0x0, 0x9}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendfile(r0, r0, 0x0, 0x1) 1.87063079s ago: executing program 2 (id=1304): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000440), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(r1, 0x4068aea3, &(0x7f00000001c0)={0x79, 0x0, 0xc73}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x2) ioctl$KVM_SET_MP_STATE(r2, 0x4004ae99, &(0x7f0000000040)=0x3) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1000003, 0x13, r2, 0x0) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f00000000c0)={[0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x6], 0x0, 0x8340}) ioctl$KVM_SET_VCPU_EVENTS(r2, 0x4040aea0, &(0x7f0000000080)=@x86={0x7c, 0x3, 0xfd, 0x0, 0x1, 0x7e, 0xcb, 0x10, 0x8, 0x5, 0xb, 0x8, 0x0, 0x10003, 0x9, 0xff, 0x6, 0x8, 0xc, '\x00', 0x1}) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000180)={0x8}) ioctl$KVM_RUN(r2, 0xae80, 0x0) 1.670587315s ago: executing program 3 (id=1305): epoll_create(0x400) eventfd(0x7fffffff) openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x42, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) (async) r0 = syz_usb_connect(0x3, 0x4a, &(0x7f0000000040)=ANY=[@ANYBLOB="120100005520f010402038b1420104000001090238000100000000090400000371055900090582eb1000000001020009050276"], 0x0) syz_usb_control_io$cdc_ncm(r0, &(0x7f00000001c0)={0x14, 0x0, &(0x7f0000000180)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r0]) (async) syz_usb_ep_write$ath9k_ep1(r0, 0x82, 0xc38, &(0x7f0000001240)=ANY=[@ANYBLOB="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", @ANYRES16=r0]) mkdir(&(0x7f0000000040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000580)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@verity_require}]}) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000}}, &(0x7f0000000000)='syzkaller\x00', 0x3}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8924, &(0x7f00000000c0)={'dummy0\x00', 0x2000}) chdir(&(0x7f0000000140)='./bus\x00') openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) 1.62709821s ago: executing program 0 (id=1306): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) (async, rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x800) recvfrom(r1, 0x0, 0x0, 0x12000, 0x0, 0x0) r2 = openat$selinux_attr(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/thread-self/attr/keycreate\x00', 0x2, 0x0) write$selinux_attr(r2, &(0x7f0000000040)='system_u:object_r:kmsg_device_t:s0\x00', 0x23) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001580)={&(0x7f00000001c0)='nilfs2_segment_usage_allocated\x00'}, 0x18) (async, rerun: 64) ioctl$USBDEVFS_SUBMITURB(0xffffffffffffffff, 0x8038550a, &(0x7f0000000000)=@urb_type_control={0x2, {}, 0x0, 0x85, &(0x7f0000000080)={0x0, 0xb, 0x0, 0x0, 0x7995}, 0xfcd6, 0x0, 0x0, 0x48000000, 0x0, 0x0, 0x0}) (async, rerun: 64) r4 = syz_open_dev$usbfs(&(0x7f0000000100), 0x74, 0x513201) ioctl$USBDEVFS_FREE_STREAMS(r4, 0x802c550a, &(0x7f0000000000)=ANY=[]) (async, rerun: 32) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) (rerun: 32) mkdir(&(0x7f0000000100)='./file2\x00', 0x1) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r6, 0x6, 0x13, &(0x7f0000000280)=0xfffffffffffffffe, 0x4) (async) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x4008000) mount(&(0x7f0000000140)=@nullb, &(0x7f0000000040)='./cgroup\x00', &(0x7f0000000080)='xfs\x00', 0x200013, 0x0) (async) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000400)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f0000000340), 0x0, &(0x7f00000000c0)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) lchown(&(0x7f0000000000)='./file0\x00', 0x0, 0x0) 1.625462828s ago: executing program 2 (id=1307): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) r2 = semget(0x3, 0x0, 0x400) openat$pfkey(0xffffffffffffff9c, &(0x7f00000000c0), 0x427b0b8b922fa59e, 0x0) semctl$GETALL(r2, 0x0, 0xd, &(0x7f0000000000)=""/151) r3 = openat$dsp1(0xffffffffffffff9c, &(0x7f00000000c0), 0x800, 0x0) ioctl$SNDCTL_DSP_SPEED(r3, 0xc0045002, &(0x7f0000000100)=0xd3) sendmsg$ETHTOOL_MSG_LINKINFO_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000007c0)={0x3c, r1, 0x1, 0x70bd24, 0x25dfdbfc, {}, [@ETHTOOL_A_LINKINFO_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKINFO_TP_MDIX_CTRL={0x5, 0x5, 0x8}, @ETHTOOL_A_LINKINFO_PHYADDR={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x0) 1.485564137s ago: executing program 0 (id=1308): syz_emit_vhci(&(0x7f0000000640)=ANY=[@ANYBLOB="040282f4322acb7101aaaaaa1e3f66041dac01758705000000000000003bfeb4a5a4404479c0bf77460a7f16ad0d4a956df463d4c28f986eeccb63094e65bd64390a45cc0a83a01043c5a071495d18af384081d195e79e5d3126b0cc6fc5df8b81671f64ecd6c86b30db8a79cd79e6d0424ee766d2914508299b082508714dfd9eedc8a8327d47ea04e4bef5e1f576eb86dc6f0285e83a522553c7ad1e4148aba1aba7b054e020", @ANYBLOB="5f6eda2626d8341c41a9c163ddfd4dccd6e55fec81cd13e1629e9b5e36bb2c7f5c4c1d4a06732b5f20cb472b794107eea3d87bca4bf3d1640645c442dadd9f3a6a9d494216b3451db4b05ef0e783e0be85020f04f1720ed2ef88c34ee94db837b7450395f8a50e53e7700eb9a4c68f0aad5b0830"], 0x12) (async) fallocate(0xffffffffffffffff, 0x10, 0x0, 0xbc) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x100}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) (async) r0 = syz_open_dev$sndmidi(&(0x7f00000001c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000040), 0x60240) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, &(0x7f0000001400)={{0x80}, 'port1\x00', 0xe3, 0x1b1c07}) (async) close_range(r1, r1, 0x0) (async) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000140), 0x8417f, 0x0) (async) clock_adjtime(0x0, &(0x7f0000000380)={0x3ff, 0x3, 0x4100, 0xd, 0x0, 0x3, 0x400000000, 0x800000000006, 0x0, 0x100, 0x3, 0x0, 0x7, 0x0, 0x9f, 0x2, 0x0, 0x0, 0x300000000000, 0x9, 0x8001, 0x3, 0x0, 0x3, 0x0, 0xe}) (async) write$uinput_user_dev(0xffffffffffffffff, 0x0, 0x0) (async) syz_io_uring_submit(0x0, 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(0xffffffffffffffff, 0x4601, 0x0) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) write$RDMA_USER_CM_CMD_LEAVE_MCAST(r2, &(0x7f0000000600)={0x11, 0x10, 0xfa00, {0x0}}, 0x18) iopl(0x5) (async) r3 = syz_open_dev$ttys(0xc, 0x2, 0x0) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@generic={&(0x7f0000000b40)='.\x02\x00', 0x0, 0x10}, 0x18) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000bc0), &(0x7f0000000c00)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000d40)={0x8, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18470000fdffffff0000000000000000850000000000000018250000", @ANYRES32, @ANYBLOB="000000000100000018350000020000000000000000000000578a01000800000018340000050000000000000000000000186600000d0000000000000007000000ddb6fcff10000000"], &(0x7f0000000280)='GPL\x00', 0x5, 0x2b, &(0x7f0000000340)=""/43, 0x40f00, 0x31, '\x00', 0x0, @cgroup_skb=0x1, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x9, 0x5, 0x6}, 0x10, 0x0, 0xffffffffffffffff, 0x6, &(0x7f0000000c80)=[0xffffffffffffffff, r4, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r4, r5], &(0x7f0000000cc0)=[{0x4, 0x1, 0xa, 0xc}, {0x2, 0x1, 0x0, 0x7}, {0x5, 0x5, 0xa, 0xc}, {0x1, 0x4, 0x7, 0x8}, {0x1, 0x5, 0xa, 0x4}, {0x0, 0x5, 0xf, 0x3}], 0x10, 0xffffffff}, 0x94) ioctl$TIOCSETD(r3, 0x5423, &(0x7f0000000080)=0x14) ioctl$TIOCVHANGUP(r3, 0x5437, 0x0) (async) symlink(&(0x7f0000000100)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38//file0\x00', &(0x7f00000002c0)='.\x02\x00') (async) r6 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) shmctl$IPC_SET(0x0, 0x1, 0x0) (async) ptrace(0x10, r6) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r6, 0x101, 0x0) 1.480279592s ago: executing program 2 (id=1309): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) syz_clone(0x0, &(0x7f0000000680)="207cc6dc8c89ccebe01c16f45f88ee08d8cbe02519447faf01d5bd1ae590da5f03c6e4f0f64ce3cdba575adfffcd4558f79b0ba9", 0x34, &(0x7f00000006c0), &(0x7f0000000700), &(0x7f0000000740)="54180f5d8a9221094bc83ea32a03ff248cebbe557e7af4fd7687a518a2c5aca091874fdda1155189132715cef36837dfba2fa613cfc37ab67015edaedb334f610b72bcb5bdeafe455026762f2828c8683d07d6108d00aac641a44896f5b987ec2873264191e241a51c38e35421068547d7e5c93bce70db5cf0662ad01637fc0d0654") r1 = socket(0x10, 0x3, 0x0) getsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) setuid(r2) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000800), &(0x7f0000000840)=0xc) ioctl$UDMABUF_CREATE_LIST(0xffffffffffffffff, 0x40087543, &(0x7f0000000280)=ANY=[@ANYBLOB="0100000000000000ff5302daefe8042ee397b9b531c97720"]) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000019c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="9feb010018000000000000004100000041000000020000000d000000f1865b00ee310177442fcaf1230000000a01000000030000000000000f010000002f0a00000000000001000000003d0064d5080000000000000b080000000f000000"], &(0x7f0000001ec0)=""/4096, 0x5e, 0x1000, 0x0, 0xffffffff, 0x10000}, 0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001a00)) openat$procfs(0xffffffffffffff9c, &(0x7f0000001a40)='/proc/asound/timers\x00', 0x0, 0x0) syz_open_dev$amidi(&(0x7f0000001c80), 0x100000001, 0x8100) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0xc0686611, &(0x7f0000000180)={0x67, 0x0, 0x18, 0x2000, &(0x7f0000ffd000/0x2000)=nil}) syz_io_uring_setup(0x6efa, &(0x7f0000000200)={0x0, 0xb6bf, 0x100, 0x0, 0x2000021b}, &(0x7f0000001d40), &(0x7f00000000c0)) socket$rxrpc(0x21, 0x2, 0xa) r5 = gettid() process_vm_writev(r5, &(0x7f0000000140)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xe7}], 0x1, 0x0) ioctl$AUTOFS_DEV_IOCTL_REQUESTER(0xffffffffffffffff, 0xc018937b, &(0x7f0000001dc0)={{0x1, 0x1, 0x18, r0, {0xffffffffffffffff, r3}}, './file1\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) fchdir(r6) mkdir(&(0x7f0000000100)='./control\x00', 0x0) rmdir(&(0x7f0000000040)='./control\x00') r7 = openat$cgroup_freezer_state(r6, &(0x7f0000000080), 0x2, 0x0) sendfile(r7, r7, 0x0, 0x8000002) newfstatat(0xffffffffffffff9c, &(0x7f0000001e00)='./file0\x00', &(0x7f0000001e40), 0x0) getpid() getuid() openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x42, 0x0) 1.372952865s ago: executing program 0 (id=1310): bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000100000020"], 0x50) r0 = ioctl$KVM_GET_VCPU_MMAP_SIZE(0xffffffffffffffff, 0xae04) mmap$KVM_VCPU(&(0x7f0000ffb000/0x4000)=nil, r0, 0x2, 0x2010, 0xffffffffffffffff, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a72b7a104c05e102c8e201020301090224000100000000090471020216fa1f0009051402100000fa0009058202"], 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e00140002800800090001"], 0x44}}, 0x0) lsm_list_modules(&(0x7f0000000080)=[0x0, 0x0], &(0x7f00000000c0)=0x10, 0x0) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, 0x0) 1.297418255s ago: executing program 4 (id=1311): syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1c, 0xa, &(0x7f0000000400)=@raw=[@call={0x85, 0x0, 0x0, 0xab}, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xbf}], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) gettid() r1 = socket(0x10, 0x803, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r3, &(0x7f00000007c0)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000280)={0x4003, 0x3, 0x9, 0x4, 0x4, 0x0, 0x338}, 0xc) r4 = socket$inet6(0xa, 0x3, 0x6) syz_emit_ethernet(0x0, 0x0, 0x0) setsockopt$inet6_buf(r4, 0x29, 0x39, &(0x7f0000000040)="ff02040000b5ffffffffffffffff2e2be82db1af00000000", 0x18) r5 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r5, 0x29, 0x39, &(0x7f00000003c0)=ANY=[@ANYBLOB="0006040000000000fc020000000000000000000000000001fe80"], 0x38) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x36, 0x0, 0x0) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e20, 0x1000040, @private1={0xfc, 0x1, '\x00', 0xa}, 0xae3c}, 0x1c) sendmmsg$inet6(r4, &(0x7f0000002940)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}}], 0x62, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='kfree\x00', r0}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe6f, 0x0, 0x0, 0x75, '\x00', 0x0, 0x2}, 0x94) sendmsg$IPSET_CMD_TYPE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='8'], 0x38}}, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r6, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r6, 0x0) syz_io_uring_submit(0x0, 0x0, &(0x7f0000000000)=@IORING_OP_FSYNC={0x3, 0x42, 0x0, @fd=r1}) 1.287302438s ago: executing program 2 (id=1312): ioctl$SNDCTL_DSP_SETFMT(0xffffffffffffffff, 0xc0045005, &(0x7f0000001180)=0x2000000) mmap$dsp(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x3, 0x12, 0xffffffffffffffff, 0x0) ioctl$SNDCTL_DSP_GETOPTR(0xffffffffffffffff, 0x5008, 0x0) ioctl$SNDCTL_DSP_SUBDIVIDE(0xffffffffffffffff, 0xc0045009, &(0x7f0000000080)=0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYRES8=r0], &(0x7f0000000280)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r0, r1}) sendto$inet(r0, &(0x7f0000000440)="8818", 0x2, 0x4040085, 0x0, 0x0) ioctl$SNDCTL_DSP_SYNC(0xffffffffffffffff, 0x5001, 0x0) ioctl$SNDCTL_DSP_GETOSPACE(0xffffffffffffffff, 0x8010500c, &(0x7f00000000c0)) r3 = add_key$fscrypt_v1(&(0x7f0000000040), 0x0, 0x0, 0x0, 0x0) keyctl$instantiate_iov(0x14, r3, &(0x7f0000000740)=[{&(0x7f0000001440)="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", 0x5dd}], 0x1, 0x0) r4 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x6, 0x0, 0x6, 0x691}, 0x10) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x3) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000140)={0x5, 0x7, 0xd000, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(0xffffffffffffffff, 0x4090ae82, &(0x7f00000001c0)={[0x78, 0x6, 0x0, 0x7, 0x6, 0x5, 0x400200cc4, 0x8, 0xf, 0x3, 0x2000000000, 0x0, 0x0, 0x4000, 0x6a, 0x40008b], 0x0, 0x3395c5}) ioctl$KVM_RUN(r6, 0xae80, 0x0) socket(0x10, 0x803, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2b, 0xffffffff, {0x0, 0x0, 0x0, r9, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x1, 0x0) 839.466628ms ago: executing program 4 (id=1313): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000020000103000000000000000180000000000000001a0000000c000c400000000000000003"], 0x28}}, 0x0) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) socket$alg(0x26, 0x5, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) (async, rerun: 32) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async, rerun: 64) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) (rerun: 64) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) r3 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) mprotect(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x2000001) writev(r3, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) (async, rerun: 32) syz_io_uring_setup(0x893, 0x0, 0x0, &(0x7f00000001c0)) (rerun: 32) r4 = timerfd_create(0x8, 0x80000) timerfd_settime(r4, 0x0, &(0x7f0000007000)={{0x0, 0x4}, {0x0, 0x989680}}, 0x0) readv(r4, 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r5 = socket(0x400000000010, 0x3, 0x0) (async) r6 = socket$unix(0x1, 0x1, 0x0) (async, rerun: 32) r7 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$inet(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="5c00000012006b04000000d86e6c1d0000147ea60864160af36504b68675f8001d000a00a0e69ee517d34460bc24eab556a705251e6182949a36c23d3b48dfd8cdbf9367b4fa51f60a64c9f4080003680601000008000300ff000000", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x2004000c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xc, 0xf}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x20008850) (async) sendmsg$NFNL_MSG_COMPAT_GET(r5, &(0x7f0000000480)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x70, 0x0, 0xb, 0x5, 0x0, 0x0, {0x7, 0x0, 0x5}, [@NFTA_COMPAT_NAME={0xb, 0x1, 'TIPCv2\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x5}, @NFTA_COMPAT_NAME={0xd, 0x1, '}\xa7-^/&-/\x00'}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0xb9}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_TYPE={0x8}, @NFTA_COMPAT_NAME={0x17, 0x1, '\x04\x00e\t\x00\x00\x00\x17\x00'/19}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004080}, 0x4000880) (async, rerun: 64) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001300)=@newtfilter={0xe6c, 0x2c, 0xd27, 0x70bd2a, 0xfffff001, {0x0, 0x0, 0x0, r8, {0xffff, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flow={{0x9}, {0xdd4, 0x2, [@TCA_FLOW_BASECLASS={0x8, 0x3, {0xffff, 0x7}}, @TCA_FLOW_MODE={0x8, 0x2, 0x1}, @TCA_FLOW_POLICE={0x444, 0xa, 0x0, 0x1, [@TCA_POLICE_TBF={0x3c, 0x1, {0x5, 0x7, 0x1, 0x3, 0x2, {0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {0x81, 0x2, 0x2, 0x3, 0x9, 0x1000}, 0xffff, 0x316, 0x2}}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0xfffffff7, 0x1, 0x1, 0x7, 0x7, 0x6, 0x8, 0x3, 0x5, 0x6, 0x2, 0xf4, 0x984, 0x1, 0xf0000000, 0x8001, 0x3, 0x3, 0x5, 0x63, 0x218, 0x62, 0x4, 0x0, 0x0, 0xff, 0x4, 0x0, 0x9, 0x0, 0x0, 0x8, 0xffff, 0xa4c, 0xdf20, 0x8, 0x9, 0x3, 0x7, 0x5, 0x1, 0x8, 0x8, 0x240000, 0x1, 0x3, 0x4, 0x6, 0xfff, 0x6, 0x3, 0xbd, 0x9, 0x3, 0x5, 0x2, 0x9, 0x3, 0x40, 0xe0, 0x4, 0xc79, 0x6, 0x2b, 0x5, 0xc1c, 0x7ff, 0xe, 0x831, 0x9, 0xc635, 0x10000, 0x723, 0xffffffff, 0x1000, 0x8, 0xfab, 0x6, 0x7, 0x3000, 0xffffffff, 0x100, 0x3, 0x9, 0x45, 0xff, 0x9, 0x8, 0xe0f, 0xfc91, 0x6, 0x0, 0x2, 0x1ff, 0xcb, 0x909, 0x4, 0x1, 0x6, 0x0, 0x4, 0x9, 0x9, 0x7fffffff, 0x16e6, 0x8, 0x7fff, 0x7, 0x4, 0x7, 0xc53, 0x1, 0x8, 0x3, 0x7, 0xffff, 0x0, 0x8, 0x2, 0xf076, 0x6, 0x9, 0x20c, 0x7, 0x86, 0x80000001, 0x6, 0xf00000, 0x3, 0x2b8, 0x7, 0x8001, 0x0, 0x5, 0x4, 0x5, 0x2976e326, 0x6, 0xc19, 0x6, 0x2, 0xe, 0x3, 0x4, 0x3, 0x8, 0x0, 0x10, 0x0, 0x80000, 0x6, 0x5, 0x0, 0xb, 0x8, 0x5, 0x1000, 0x10263ed7, 0xfffffff9, 0x71, 0xd1cd, 0x9, 0x9, 0x8, 0x4, 0x7, 0x3, 0x6, 0x9, 0x2, 0x4, 0x80, 0x1c5, 0x0, 0x32, 0x6, 0x7, 0x1, 0x7ff, 0x120, 0x24, 0x8, 0xb, 0x8000, 0x9, 0xc00, 0x10001, 0x1, 0xffffffff, 0x7, 0x0, 0x3, 0x9, 0x8, 0x8, 0x5d, 0x1, 0x80000000, 0x8001, 0x0, 0xff, 0x40, 0x6, 0xa, 0x7, 0x5, 0x1, 0xcf1c, 0x0, 0x2, 0x10001, 0x7, 0x4195, 0x7, 0x10000, 0x10, 0x4, 0x7fffffff, 0x100, 0x2, 0x7, 0xfffffffe, 0x9, 0xd32d, 0xfffffffc, 0x6, 0x68, 0x7, 0x4, 0x8, 0x7fff, 0x4cc, 0x3, 0xc3b, 0x2, 0x4, 0x6, 0x1000, 0x4, 0xffffffff, 0x10001, 0x7, 0x19598a23, 0x9b84, 0xffffffff, 0x3, 0x2, 0x3, 0x3, 0x7, 0x6, 0x7, 0x3, 0x8, 0x4]}]}, @TCA_FLOW_EMATCHES={0x500, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1a27}}, @TCA_EMATCH_TREE_LIST={0x6c, 0x2, 0x0, 0x1, [@TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x1, 0x3, 0x8}, {0x8000, 0x1, 0x0, 0x800}}}, @TCF_EM_U32={0x1c, 0x3, 0x0, 0x0, {{0x40, 0x3, 0x6}, {0x72, 0x80000000, 0xffff, 0x5}}}, @TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x9}, {0x0, 0xc707, 0x50b, 0x1, 0xa, 0x2}}}, @TCF_EM_NBYTE={0x18, 0x1, 0x0, 0x0, {{0x9, 0x2, 0x6}, {0x8, 0x7, 0x0, "8c8c05bc89cd93"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0x4, 0x1, 0x33}, {0x6, 0x1, 0x3, 0x1, 0x0, 0x1, 0x2}}}, @TCF_EM_IPT={0x14, 0x2, 0x0, 0x0, {{0x3, 0x9, 0x81}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}]}, @TCA_EMATCH_TREE_LIST={0x110, 0x2, 0x0, 0x1, [@TCF_EM_META={0x18, 0x1, 0x0, 0x0, {{0x1ff, 0x4, 0x3bb7}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1ff, 0x7b, 0x1}, {0x4, 0xff, 0x3}}}]}}, @TCF_EM_IPT={0xa8, 0x2, 0x0, 0x0, {{0xde26, 0x9, 0x3}, [@TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_DATA={0x6a, 0x5, "d58c2994ccb5a2db49d57c9c3a899347f6cfa785a551ff043d97038eb8b5f00cf1afe5a38837839570cf290cda59db6d66c929ccff02e4eb1855a536edfa78de8c48686d15d285051adec2b06fbc9cd624155978dc74453d583d25c6a94e5c3c1a23afa7e39a"}, @TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_U32={0x1c, 0x40, 0x0, 0x0, {{0xfff7, 0x3, 0x7}, {0x4, 0x9, 0xffff7fff, 0x9}}}, @TCF_EM_U32={0x1c, 0x2, 0x0, 0x0, {{0x100, 0x3, 0x10}, {0x1, 0xfffffffb, 0x8, 0xdb4}}}, @TCF_EM_CANID={0x14, 0x2, 0x0, 0x0, {{0x7, 0x7, 0xc21a}, {{0x2, 0x1, 0x1, 0x1}, {0x2, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_LIST={0x330, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x2a0, 0x3, 0x0, 0x0, {{0x4, 0x9, 0x36ad}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x7}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0x96, 0x5, "a428121fa1d5f573d15b529805fbc74cd4e8087ded9f9c2ec785c9f242422e39af61e56ad7acdf916837d47c2c3e8fc4ba2bc5e5a2dd0436f3d92d06564bb4ec109260e5e2249f66f57a4fcb7e1af08a5260a7c44cdd11dd795afd20d012e82ab745be418610ba7c8591c884fad25dde2fb2c27a7ed5461fd6d1b597823d7d2d612f2ff02e19200c9373cecb3a49b3206607"}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x1}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_MATCH_DATA={0xce, 0x5, "c67030c1eb0db2174b5aa1790d2adb9165e458387b542ec3ee2e3f98e742da1f475303cb49de971184fb887a4bffbddd3ca2b1e747c79a5906d1ca6a4ea9df80b2b0a7928c5eb6b189983ff49a07ea13e99bd940842393683c9d4c79fc32e201ada5536f0a0371d09520e27c0bfd9e4835a2ab15ada42815a13551df1bdfd8257344ee2dcbc360f5d0fbe32abb5295507b341715fea8a4a63819e99f27928e0f6edd061bdff183ac8c39af64ee1ea94e4f3971ebfb952e8e2e89ac262985bc1ec4b98523b6b33b4697bb"}, @TCA_EM_IPT_MATCH_DATA={0xf4, 0x5, "2df3553de2dc4052d957e3ccc365f50c2f0cd644b6a6a966c6a5493eb7e2302f40268da89fe581cb9a5d2696ec3fdcee2f1d8be1b90f580f80a9187ce2c6c5740674317ba530cdffead7b823c4829e3671f7d7c6b133e6e49afc0166ad5537421ca95b7c17eb0e0ea8a58d61de574e13ba64c0e4987c777414cfe95eea155616b8e204a59f72b6fed26b7d98f6b7886df97a0d50c3991463b537b5e855a74aacb013485fcb9996776fff0d704fe2e9dc4827bf2b3e9cd8450db56826c5d42fa4ec950914cae3cd160b993e0a50fb1dd04eedef75211c75502a4508d0f35281df23d7a3b009464235581fded7770dbf7f"}, @TCA_EM_IPT_MATCH_REVISION={0x5, 0x3, 0x4}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x5}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x7fff, 0x8, 0x9}, {0x3, 0x1, 0x1}}}, @TCF_EM_META={0x40, 0x2, 0x0, 0x0, {{0x0, 0x4, 0xa}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x1c00, 0x7, 0x1}, {0x8, 0x2, 0x1}}}, @TCA_EM_META_RVALUE={0x19, 0x3, [@TCF_META_TYPE_VAR="969d845062293ccf", @TCF_META_TYPE_VAR="c2c80c95c2780fb906", @TCF_META_TYPE_VAR="78e5ef14"]}, @TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x6, 0x1}, {0x40, 0x9, 0x1}}}]}}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x6, 0x1, 0x9}, {0x6194, 0xa8d1, 0xfff, 0x1, 0x7, 0x1, 0x46b39b51a20aee7}}}, @TCF_EM_IPSET={0x10, 0x1, 0x0, 0x0, {{0x1, 0x8, 0x7}, {0x3, 0x1, 0x6}}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1b1, 0x7, 0x72f}, {{0x1}, {0x2, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x7649}}]}, @TCA_FLOW_POLICE={0x464, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x2}, @TCA_POLICE_RATE64={0xc, 0x8, 0x7}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x3}, @TCA_POLICE_RATE={0x404, 0x2, [0x3, 0x872e, 0x2, 0x4, 0x7fffffff, 0x0, 0x4, 0x400, 0x9, 0xf3, 0x7f, 0x2, 0x1, 0x0, 0xffff, 0x816, 0x4, 0x6, 0x1, 0x33, 0x8, 0x0, 0x3, 0x6, 0xfff, 0x23, 0x8001, 0x5, 0x9, 0x6, 0x200, 0x0, 0x5, 0xa800000, 0xf6c1, 0x400, 0xf, 0x9, 0xfffffffe, 0x9, 0x4, 0xe33e, 0xe, 0x5f51, 0x0, 0x9, 0x6e7e, 0xfffffff7, 0x3, 0x10001, 0xfff, 0x1, 0xfffffffb, 0x7ff, 0x1, 0xfffffffc, 0xe, 0xffffaba1, 0x7fff, 0x0, 0x5, 0x4, 0x62c3, 0x8, 0x3, 0x7fffffff, 0x8, 0xd39, 0x8, 0x40, 0xcf7, 0xcc2, 0x1, 0x7ff, 0x0, 0x5498, 0x6, 0x8, 0xffffffff, 0x3, 0x10f7e062, 0xffff, 0x6, 0xfffffffb, 0x5203, 0x3, 0x5, 0x0, 0x1, 0x8001, 0x0, 0x6, 0x4, 0x2, 0x1000, 0xb17, 0x7, 0x4, 0x3d, 0x40, 0x5, 0x400, 0x101, 0x401, 0x3, 0x6, 0x1, 0x9, 0x10, 0x2, 0x5, 0x7ff, 0x9, 0x7fff, 0x2, 0x2, 0xec, 0x7, 0x9, 0x6, 0x6, 0x401, 0x8, 0x4, 0x1, 0xfffffffc, 0xfffffff7, 0x7fff, 0x0, 0x0, 0xd, 0x1, 0x0, 0x80b, 0x40, 0x7, 0x305, 0x1, 0x0, 0x81, 0xa7, 0x101, 0x7fffffff, 0x3, 0x1, 0x7ff, 0x9, 0x2, 0x9d6d, 0xfffffffe, 0x9, 0x5, 0x6, 0x3, 0x9, 0x8, 0x7ff, 0x8, 0x7, 0x0, 0x1ff, 0x70d, 0xfffff918, 0x1000, 0x2, 0x1, 0x5, 0x6, 0x2, 0xdcd, 0x10001, 0x4, 0x8, 0x2, 0x10ec, 0x3, 0xaa32, 0x6ac, 0x4, 0xc9fa, 0x5, 0x4, 0x8, 0x9, 0x80, 0x7fff, 0x6, 0xfff, 0x5, 0x8001, 0x9, 0xa4, 0x80, 0x8001, 0x2, 0x400, 0xffff0001, 0x9, 0x0, 0x101, 0x101, 0x40995aae, 0x3c, 0x8, 0x7, 0x8001, 0x4, 0x5bdf3193, 0xc, 0xfffffffb, 0x1, 0xffffffff, 0x8, 0x0, 0x1, 0x2dc, 0xd, 0x2, 0x1, 0x2, 0x9, 0x9, 0xf6, 0x10, 0x0, 0x8, 0x80000001, 0x4, 0xf, 0x7fff, 0x0, 0x80, 0x8, 0xa498, 0xfffffffb, 0x1, 0x977, 0x200, 0x4b, 0xe, 0x200, 0x7, 0x8, 0x0, 0xfffffffd, 0x2, 0x5, 0x7, 0x7, 0x8, 0xfff, 0xfffffffa, 0x1000, 0x80, 0xf19d1c5a, 0x3]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1ff, 0x6, 0x81, 0x2, 0x7, {0x4, 0x1, 0x7b, 0x1, 0x2, 0xff}, {0x3, 0x1, 0x8001, 0x97, 0x8ad8, 0x7f}, 0x1, 0x1, 0x80000000}}]}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x800}, @TCA_FLOW_DIVISOR={0x8, 0x8, 0x5}, @TCA_FLOW_RSHIFT={0x8, 0x4, 0x6}]}}, @TCA_RATE={0x6, 0x5, {0x2, 0x2}}, @TCA_RATE={0x6, 0x5, {0xbb, 0x9}}, @TCA_RATE={0x6, 0x5, {0x4, 0x2}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_route={{0xa}, {0x34, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4, 0x3}}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x0, 0xa}}, @TCA_ROUTE4_IIF={0x8, 0x4, r8}, @TCA_ROUTE4_IIF={0x8, 0x4, r8}, @TCA_ROUTE4_CLASSID={0x8, 0x1, {0x8}}, @TCA_ROUTE4_TO={0x8, 0x2, 0xbb}]}}, @TCA_CHAIN={0x8}]}, 0xe6c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) (rerun: 64) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) syz_genetlink_get_family_id$wireguard(&(0x7f0000000000), r1) (async) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000017000000540006803c00040067636d28616573290000000000000000000000000000000000000000000000001c220000e3de3d7b4cd07ec3ee777de774fc7987cca41989140003"], 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x4008014) 277.578951ms ago: executing program 1 (id=1314): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000003c0), 0x8943, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x1fe, 0x0, 0x0, 0x1000, &(0x7f0000000000/0x1000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000600)=[@text64={0x40, 0x0}], 0x1, 0x76, 0x0, 0x0) lsm_get_self_attr(0x66, &(0x7f0000000040)={0x0, 0x0, 0xb6, 0x96, ""/150}, &(0x7f0000000100)=0xb6, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 152.924794ms ago: executing program 4 (id=1315): r0 = socket(0x10, 0x80002, 0x0) bind$netlink(r0, &(0x7f0000000840)={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40004}, 0x4000) (async) r5 = syz_open_dev$radio(&(0x7f0000000000), 0xffffffffffffffff, 0x2) ioctl$VIDIOC_G_FREQUENCY(r5, 0xc02c5638, &(0x7f0000000080)={0x5d7d, 0x2, 0x5}) (async) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) fcntl$getflags(r5, 0x7266cfd7524ad18) syz_open_dev$ndb(&(0x7f00000002c0), 0x0, 0x0) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000880), 0xffffffffffffffff) sendmsg$NBD_CMD_RECONFIGURE(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x1c, r7, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r8 = socket(0x400000000010, 0x3, 0x0) (async) r9 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000540)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x8000, {0x0, 0x0, 0x0, r10, {0x0, 0xffe0}, {}, {0xfff3, 0xfff3}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS_MASK={0x10, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x2}]}]}, @TCA_FLOWER_KEY_ENC_OPTS={0x18, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x100c}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x22044028}, 0x0) 0s ago: executing program 4 (id=1316): syz_init_net_socket$x25(0x9, 0x5, 0x0) r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r0, 0x29, 0xd1, 0x0, 0x0) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = syz_open_dev$radio(&(0x7f0000000100), 0x0, 0x2) ioctl$VIDIOC_G_DV_TIMINGS(r5, 0xc0845658, &(0x7f0000000180)={0x0, @reserved}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x1, 0x2, 0x0, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001, 0x1400}, 0x8, 0x5, 0xffffffe}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x40, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0x2}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x80015}, 0x4000) sendmsg$inet(r1, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @loopback}, 0x10, 0x0}, 0x34004000) kernel console output (not intermixed with test programs): g garbage [ 335.856977][ T5947] cdc_wdm 4-1:1.0: skipping garbage [ 336.342629][ T5947] cdc_wdm 4-1:1.0: cdc-wdm0: USB WDM device [ 336.348743][ T5947] cdc_wdm 4-1:1.0: Unknown control protocol [ 336.791345][ T5982] usb 1-1: Using ep0 maxpacket: 16 [ 336.805790][ T5947] usb 4-1: USB disconnect, device number 52 [ 336.818959][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 337.351574][ T5982] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 337.364614][ T5982] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 337.422412][ T5982] usb 1-1: New USB device found, idVendor=0457, idProduct=07da, bcdDevice= 0.00 [ 337.432277][ T5982] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.447164][ T5982] usb 1-1: config 0 descriptor?? [ 337.640572][ T5947] usb 2-1: new high-speed USB device number 45 using dummy_hcd [ 337.802214][ T5947] usb 2-1: unable to get BOS descriptor or descriptor too short [ 337.810889][ T5947] usb 2-1: config 166 has an invalid interface number: 51 but max is 0 [ 337.819144][ T5947] usb 2-1: config 166 has no interface number 0 [ 337.831796][ T5947] usb 2-1: config 166 interface 51 has no altsetting 0 [ 337.842036][ T5947] usb 2-1: New USB device found, idVendor=04a5, idProduct=300c, bcdDevice=a8.c9 [ 337.851528][ T5897] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 337.859195][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.869178][ T5947] usb 2-1: Product: syz [ 337.873334][ T5982] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 337.873360][ T5982] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 337.873382][ T5982] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 337.873402][ T5982] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 337.881099][ T5947] usb 2-1: Manufacturer: syz [ 337.881117][ T5947] usb 2-1: SerialNumber: syz [ 337.913601][ T5982] hid-multitouch 0003:0457:07DA.000E: unknown main item tag 0x0 [ 337.924348][ T5982] hid-multitouch 0003:0457:07DA.000E: hidraw0: USB HID v0.00 Device [HID 0457:07da] on usb-dummy_hcd.0-1/input0 [ 338.021858][ T5897] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 338.033961][ T5897] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 338.044725][ T5897] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 338.053862][ T5897] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.064070][ T9945] raw-gadget.2 gadget.2: fail, usb_ep_enable returned -22 [ 338.073713][ T5897] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 338.086577][ T9941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.095424][ T9941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.106351][ T5947] gspca_main: spca500-2.14.0 probing 04a5:300c [ 338.121080][ T5947] usb 2-1: USB disconnect, device number 45 [ 338.271525][ T9951] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.280203][ T9951] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.298092][ T5982] usb 3-1: USB disconnect, device number 33 [ 338.562673][ T9955] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.562881][ T9955] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.563068][ T9955] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.563325][ T9955] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.563584][ T9955] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.563769][ T9955] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.563974][ T9955] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.564158][ T9955] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.564350][ T9955] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.564601][ T9955] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 338.695531][ T9960] FAULT_INJECTION: forcing a failure. [ 338.695531][ T9960] name failslab, interval 1, probability 0, space 0, times 0 [ 338.695598][ T9960] CPU: 0 UID: 0 PID: 9960 Comm: syz.1.1054 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 338.695621][ T9960] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 338.695631][ T9960] Call Trace: [ 338.695637][ T9960] [ 338.695644][ T9960] dump_stack_lvl+0x16c/0x1f0 [ 338.695672][ T9960] should_fail_ex+0x512/0x640 [ 338.695695][ T9960] ? __kmalloc_node_track_caller_noprof+0xc3/0x510 [ 338.695724][ T9960] should_failslab+0xc2/0x120 [ 338.695751][ T9960] __kmalloc_node_track_caller_noprof+0xd6/0x510 [ 338.695777][ T9960] ? ethnl_default_set_doit+0x397/0xb10 [ 338.695808][ T9960] kmemdup_noprof+0x29/0x60 [ 338.695831][ T9960] ethnl_default_set_doit+0x397/0xb10 [ 338.695859][ T9960] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 338.695889][ T9960] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 338.695910][ T9960] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 338.695937][ T9960] genl_family_rcv_msg_doit+0x206/0x2f0 [ 338.695959][ T9960] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 338.695987][ T9960] ? bpf_lsm_capable+0x9/0x10 [ 338.696005][ T9960] ? security_capable+0x7e/0x260 [ 338.696026][ T9960] ? ns_capable+0xd7/0x110 [ 338.696049][ T9960] genl_rcv_msg+0x55c/0x800 [ 338.696072][ T9960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.696096][ T9960] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 338.696133][ T9960] netlink_rcv_skb+0x155/0x420 [ 338.696150][ T9960] ? __pfx_genl_rcv_msg+0x10/0x10 [ 338.696171][ T9960] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 338.696199][ T9960] ? netlink_deliver_tap+0x1ae/0xd30 [ 338.696236][ T9960] genl_rcv+0x28/0x40 [ 338.696253][ T9960] netlink_unicast+0x53a/0x7f0 [ 338.696273][ T9960] ? __pfx_netlink_unicast+0x10/0x10 [ 338.696299][ T9960] netlink_sendmsg+0x8d1/0xdd0 [ 338.696321][ T9960] ? __pfx_netlink_sendmsg+0x10/0x10 [ 338.696348][ T9960] ____sys_sendmsg+0xa95/0xc70 [ 338.696368][ T9960] ? copy_msghdr_from_user+0x10a/0x160 [ 338.696391][ T9960] ? __pfx_____sys_sendmsg+0x10/0x10 [ 338.696421][ T9960] ___sys_sendmsg+0x134/0x1d0 [ 338.696446][ T9960] ? __pfx____sys_sendmsg+0x10/0x10 [ 338.696467][ T9960] ? __lock_acquire+0x622/0x1c90 [ 338.696520][ T9960] __sys_sendmsg+0x16d/0x220 [ 338.696544][ T9960] ? __pfx___sys_sendmsg+0x10/0x10 [ 338.696586][ T9960] do_syscall_64+0xcd/0x4c0 [ 338.696614][ T9960] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 338.696632][ T9960] RIP: 0033:0x7f840538e929 [ 338.696647][ T9960] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 338.696664][ T9960] RSP: 002b:00007f84031f6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 338.696681][ T9960] RAX: ffffffffffffffda RBX: 00007f84055b5fa0 RCX: 00007f840538e929 [ 338.696693][ T9960] RDX: 0000000000000000 RSI: 0000200000000500 RDI: 0000000000000003 [ 338.696703][ T9960] RBP: 00007f84031f6090 R08: 0000000000000000 R09: 0000000000000000 [ 338.696713][ T9960] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 338.696724][ T9960] R13: 0000000000000000 R14: 00007f84055b5fa0 R15: 00007ffe6e0ef9d8 [ 338.696749][ T9960] [ 339.023743][ T9968] netlink: 'syz.2.1058': attribute type 21 has an invalid length. [ 339.026719][ T9956] tty tty1: ldisc open failed (-12), clearing slot 0 [ 339.035250][ T9968] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1058'. [ 339.080692][ T5947] usb 2-1: new high-speed USB device number 46 using dummy_hcd [ 339.083525][ T9968] netlink: 'syz.2.1058': attribute type 6 has an invalid length. [ 339.216451][ T9968] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1058'. [ 339.253002][ T5947] usb 2-1: Using ep0 maxpacket: 32 [ 339.259738][ T5947] usb 2-1: config 0 has an invalid interface number: 43 but max is 0 [ 339.268131][ T5947] usb 2-1: config 0 has no interface number 0 [ 339.278312][ T5947] usb 2-1: config 0 interface 43 altsetting 128 endpoint 0x5 has invalid maxpacket 1023, setting to 64 [ 339.320360][ T5947] usb 2-1: config 0 interface 43 has no altsetting 0 [ 339.343062][ T5947] usb 2-1: New USB device found, idVendor=299e, idProduct=78f0, bcdDevice=e8.9a [ 339.354730][ T5947] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 339.372780][ T5947] usb 2-1: Product: syz [ 339.376953][ T5947] usb 2-1: Manufacturer: syz [ 340.467519][ T5947] usb 2-1: SerialNumber: syz [ 341.336820][ T5982] usb 1-1: USB disconnect, device number 38 [ 342.482979][ T5947] usb 2-1: config 0 descriptor?? [ 342.488233][ C1] raw-gadget.2 gadget.1: ignoring, device is not running [ 342.498319][ T5947] usb 2-1: can't set config #0, error -32 [ 342.951647][ T5905] usb 2-1: USB disconnect, device number 46 [ 343.153196][ T9997] FAULT_INJECTION: forcing a failure. [ 343.153196][ T9997] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.166610][ T9997] CPU: 0 UID: 0 PID: 9997 Comm: syz.4.1065 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 343.166634][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 343.166644][ T9997] Call Trace: [ 343.166650][ T9997] [ 343.166657][ T9997] dump_stack_lvl+0x16c/0x1f0 [ 343.166686][ T9997] should_fail_ex+0x512/0x640 [ 343.166712][ T9997] _copy_to_user+0x32/0xd0 [ 343.166739][ T9997] simple_read_from_buffer+0xcb/0x170 [ 343.166763][ T9997] proc_fail_nth_read+0x197/0x270 [ 343.166787][ T9997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.166810][ T9997] ? rw_verify_area+0xcf/0x680 [ 343.166829][ T9997] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 343.166850][ T9997] vfs_read+0x1e1/0xc60 [ 343.166874][ T9997] ? __pfx___mutex_lock+0x10/0x10 [ 343.166899][ T9997] ? __pfx_vfs_read+0x10/0x10 [ 343.166927][ T9997] ? __fget_files+0x20e/0x3c0 [ 343.166959][ T9997] ksys_read+0x12a/0x250 [ 343.166980][ T9997] ? __pfx_ksys_read+0x10/0x10 [ 343.167010][ T9997] do_syscall_64+0xcd/0x4c0 [ 343.167042][ T9997] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.167059][ T9997] RIP: 0033:0x7f85bf18d33c [ 343.167074][ T9997] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 343.167090][ T9997] RSP: 002b:00007f85bffe2030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 343.167107][ T9997] RAX: ffffffffffffffda RBX: 00007f85bf3b5fa0 RCX: 00007f85bf18d33c [ 343.167119][ T9997] RDX: 000000000000000f RSI: 00007f85bffe20a0 RDI: 0000000000000004 [ 343.167129][ T9997] RBP: 00007f85bffe2090 R08: 0000000000000000 R09: 0000000000000000 [ 343.167139][ T9997] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.167149][ T9997] R13: 0000000000000000 R14: 00007f85bf3b5fa0 R15: 00007ffeb77d1b78 [ 343.167174][ T9997] [ 343.349300][ C0] vkms_vblank_simulate: vblank timer overrun [ 344.150363][ T9] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 344.261736][T10018] program syz.1.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.314899][T10019] program syz.1.1070 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 344.370652][T10019] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 344.411227][ T9] usb 3-1: Using ep0 maxpacket: 16 [ 344.451274][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 344.560069][ T9] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 344.585185][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 344.648718][ T9] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 344.677797][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 344.711324][ T9] usb 3-1: config 0 descriptor?? [ 345.104905][T10029] FAULT_INJECTION: forcing a failure. [ 345.104905][T10029] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 345.118016][T10029] CPU: 1 UID: 0 PID: 10029 Comm: syz.1.1073 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 345.118039][T10029] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 345.118049][T10029] Call Trace: [ 345.118056][T10029] [ 345.118063][T10029] dump_stack_lvl+0x16c/0x1f0 [ 345.118091][T10029] should_fail_ex+0x512/0x640 [ 345.118118][T10029] _copy_from_user+0x2e/0xd0 [ 345.118143][T10029] __sys_bpf+0x21d/0x4d80 [ 345.118171][T10029] ? __pfx___sys_bpf+0x10/0x10 [ 345.118195][T10029] ? ksys_write+0x190/0x250 [ 345.118222][T10029] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 345.118262][T10029] ? fput+0x70/0xf0 [ 345.118276][T10029] ? ksys_write+0x1ac/0x250 [ 345.118296][T10029] ? __pfx_ksys_write+0x10/0x10 [ 345.118323][T10029] __x64_sys_bpf+0x78/0xc0 [ 345.118346][T10029] ? lockdep_hardirqs_on+0x7c/0x110 [ 345.118368][T10029] do_syscall_64+0xcd/0x4c0 [ 345.118394][T10029] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.118410][T10029] RIP: 0033:0x7f840538e929 [ 345.118424][T10029] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 345.118441][T10029] RSP: 002b:00007f84031b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 345.118458][T10029] RAX: ffffffffffffffda RBX: 00007f84055b6160 RCX: 00007f840538e929 [ 345.118469][T10029] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 345.118479][T10029] RBP: 00007f84031b4090 R08: 0000000000000000 R09: 0000000000000000 [ 345.118489][T10029] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 345.118499][T10029] R13: 0000000000000000 R14: 00007f84055b6160 R15: 00007ffe6e0ef9d8 [ 345.118523][T10029] [ 345.294110][ T9] HID 045e:07da: Invalid code 65791 type 1 [ 345.323018][ T9] input: HID 045e:07da as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/0003:045E:07DA.000F/input/input18 [ 345.340525][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 345.404664][ T9] microsoft 0003:045E:07DA.000F: input,hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.2-1/input0 [ 345.510109][ T9] usb 3-1: USB disconnect, device number 34 [ 345.518514][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 345.533749][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x82 has invalid maxpacket 1023 [ 345.589780][T10033] pim6reg: entered allmulticast mode [ 345.623944][ T30] kauditd_printk_skb: 18 callbacks suppressed [ 345.623980][ T30] audit: type=1400 audit(1751984053.969:791): avc: denied { read } for pid=10030 comm="syz.3.1074" lport=1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 345.654469][ T10] usb 5-1: config 1 interface 1 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 576 [ 345.761210][ T10] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 345.771185][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.780153][ T10] usb 5-1: Product: syz [ 345.785129][ T10] usb 5-1: Manufacturer: 鶨궺å¿ê¿¶è›¹è™‹ïŒçˆŸê©¶ï´™éª¦ã´®ïª‡áªªíŠ½á–¢ìµ’䌥낼⡗꾌勦뽛宋è‘à¬ê–€åƒ³ìµƒáŽ¹æºšæ´‹ã©ç³¨èš‘ꨩâŠë®â³ƒî‹¡ëŠ«è³„挀é’숆渭æžæ£ˆé¶“彣콄젴ï˜á¥½ãš¶áž§äŒŠë—‡áº“ﺨ넹ã­ì¯”êŽâ¡ïˆâ¹æ®¦ãŸ°ç§€ç„î©à¥ˆï« é„V䩩ⷉ࿄೷씱웞駒რ[ 345.820453][ T10] usb 5-1: SerialNumber: syz [ 345.821462][ T5897] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 345.888259][T10040] Bluetooth: MGMT ver 1.23 [ 345.958817][ T30] audit: type=1400 audit(1751984054.289:792): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 346.030482][ T5897] usb 1-1: Using ep0 maxpacket: 16 [ 346.039873][ T10] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 346.046773][ T10] cdc_ncm 5-1:1.0: bind() failure [ 346.049570][ T5897] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 192, changing to 11 [ 346.054739][ T10] cdc_ncm 5-1:1.1: CDC Union missing and no IAD found [ 346.079404][ T10] cdc_ncm 5-1:1.1: bind() failure [ 346.087669][ T5897] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 8 [ 346.103404][ T10] usb 5-1: USB disconnect, device number 44 [ 346.111628][ T5897] usb 1-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 18 [ 346.154753][ T5897] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 346.164278][ T5897] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 346.189542][ T5897] usb 1-1: SerialNumber: syz [ 346.205284][T10015] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 346.212665][ T5947] usb 2-1: new high-speed USB device number 47 using dummy_hcd [ 346.358353][T10051] loop6: detected capacity change from 0 to 7 [ 346.366100][T10051] Dev loop6: unable to read RDB block 7 [ 346.371962][ T30] audit: type=1400 audit(1751984054.729:793): avc: denied { ioctl } for pid=10052 comm="syz.3.1081" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xae83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 346.372216][T10051] loop6: unable to read partition table [ 346.403472][T10051] loop6: partition table beyond EOD, truncated [ 346.410133][T10051] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 346.477980][T10055] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1082'. [ 346.482223][ T5947] usb 2-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 346.487192][T10055] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1082'. [ 346.514932][ T5947] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.538511][ T5947] usb 2-1: config 0 descriptor?? [ 346.552309][ T5947] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 346.930326][ T5905] usb 5-1: new full-speed USB device number 45 using dummy_hcd [ 346.970350][ T9] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 347.070364][ T48] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 347.093776][ T5905] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 347.102145][ T5905] usb 5-1: config 0 has no interface number 0 [ 347.108244][ T5905] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 347.119898][ T5905] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 347.130024][ T5905] usb 5-1: config 0 interface 113 has no altsetting 0 [ 347.139940][ T5905] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 347.140466][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 347.149442][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.157981][ T9] usb 4-1: config 5 has an invalid interface number: 52 but max is 1 [ 347.162095][ T5905] usb 5-1: Product: syz [ 347.175052][ T5905] usb 5-1: Manufacturer: syz [ 347.180033][ T5905] usb 5-1: SerialNumber: syz [ 347.186463][ T9] usb 4-1: config 5 has an invalid descriptor of length 0, skipping remainder of the config [ 347.187151][ T5905] usb 5-1: config 0 descriptor?? [ 347.201935][ T9] usb 4-1: config 5 has 1 interface, different from the descriptor's value: 2 [ 347.206915][ C1] usb 5-1: NFC: Urb failure (status -71) [ 347.221564][ T9] usb 4-1: config 5 has no interface number 0 [ 347.222306][ T5905] usb 5-1: NFC: Unable to get FW version [ 347.229280][ T9] usb 4-1: New USB device found, idVendor=04b4, idProduct=0002, bcdDevice=e2.5c [ 347.238973][ T48] usb 3-1: New USB device found, idVendor=093a, idProduct=050f, bcdDevice=c2.b7 [ 347.252312][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 347.254601][ T5905] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 347.263816][ T9] usb 4-1: Product: syz [ 347.268841][ T48] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 347.281223][ T9] usb 4-1: Manufacturer: syz [ 347.285842][ T9] usb 4-1: SerialNumber: syz [ 347.289895][ T5897] cdc_ether 1-1:1.0: probe with driver cdc_ether failed with error -22 [ 347.299381][ T48] usb 3-1: config 0 descriptor?? [ 347.310047][ T48] gspca_main: mars-2.14.0 probing 093a:050f [ 347.326271][ T5897] usb 1-1: USB disconnect, device number 39 [ 347.469917][T10063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1084'. [ 347.481914][ T5905] usb 5-1: USB disconnect, device number 45 [ 347.510633][ T9] cytherm 4-1:5.52: Cypress thermometer device now attached [ 347.518247][ T30] audit: type=1400 audit(1751984055.869:794): avc: denied { setopt } for pid=10067 comm="syz.2.1086" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 347.541640][ T5897] usb 3-1: USB disconnect, device number 35 [ 347.542053][ T9] usb 4-1: USB disconnect, device number 53 [ 347.554123][ T9] cytherm 4-1:5.52: Cypress thermometer now disconnected [ 348.474891][T10088] x_tables: duplicate underflow at hook 2 [ 348.495541][T10087] hfs: unable to load iocharset "io#harset" [ 348.501773][ T30] audit: type=1400 audit(1751984056.849:795): avc: denied { write } for pid=10085 comm="syz.2.1092" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 348.541486][ T30] audit: type=1400 audit(1751984056.849:796): avc: denied { ioctl } for pid=10085 comm="syz.2.1092" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0xaea3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 348.671690][ T30] audit: type=1400 audit(1751984056.849:797): avc: denied { append } for pid=10085 comm="syz.2.1092" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 349.400394][ T5947] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 349.520377][ T30] audit: type=1400 audit(1751984057.789:798): avc: denied { setopt } for pid=10045 comm="syz.1.1078" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 349.970311][ T5947] usb 3-1: Using ep0 maxpacket: 8 [ 349.976885][ T5947] usb 3-1: New USB device found, idVendor=0af0, idProduct=6751, bcdDevice=75.8b [ 349.986584][ T5947] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.101125][T10117] FAULT_INJECTION: forcing a failure. [ 350.101125][T10117] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.114278][T10117] CPU: 0 UID: 0 PID: 10117 Comm: syz.4.1099 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 350.114301][T10117] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 350.114311][T10117] Call Trace: [ 350.114318][T10117] [ 350.114324][T10117] dump_stack_lvl+0x16c/0x1f0 [ 350.114353][T10117] should_fail_ex+0x512/0x640 [ 350.114379][T10117] _copy_from_user+0x2e/0xd0 [ 350.114405][T10117] generic_map_delete_batch+0x439/0x700 [ 350.114433][T10117] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 350.114462][T10117] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 350.114487][T10117] bpf_map_do_batch+0x4a6/0x680 [ 350.114509][T10117] __sys_bpf+0x5fc/0x4d80 [ 350.114534][T10117] ? __pfx___sys_bpf+0x10/0x10 [ 350.114559][T10117] ? ksys_write+0x190/0x250 [ 350.114585][T10117] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 350.114625][T10117] ? fput+0x70/0xf0 [ 350.114639][T10117] ? ksys_write+0x1ac/0x250 [ 350.114660][T10117] ? __pfx_ksys_write+0x10/0x10 [ 350.114685][T10117] __x64_sys_bpf+0x78/0xc0 [ 350.114709][T10117] ? lockdep_hardirqs_on+0x7c/0x110 [ 350.114732][T10117] do_syscall_64+0xcd/0x4c0 [ 350.114757][T10117] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.114774][T10117] RIP: 0033:0x7f85bf18e929 [ 350.114789][T10117] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 350.114805][T10117] RSP: 002b:00007f85bffa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 350.114822][T10117] RAX: ffffffffffffffda RBX: 00007f85bf3b6160 RCX: 00007f85bf18e929 [ 350.114833][T10117] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 350.114843][T10117] RBP: 00007f85bffa0090 R08: 0000000000000000 R09: 0000000000000000 [ 350.114853][T10117] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.114864][T10117] R13: 0000000000000000 R14: 00007f85bf3b6160 R15: 00007ffeb77d1b78 [ 350.114887][T10117] [ 350.312530][ T5905] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 350.338600][ T5947] usb 3-1: config 0 descriptor?? [ 350.341656][ T5947] hso 3-1:0.0: Can't find BULK IN endpoint [ 350.462118][ T5947] usb 2-1: USB disconnect, device number 47 [ 350.493446][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 350.507350][ T5905] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 350.518401][ T5905] usb 4-1: New USB device found, idVendor=054c, idProduct=0df2, bcdDevice=d6.af [ 350.527709][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 350.545242][ T48] usb 3-1: USB disconnect, device number 36 [ 350.553553][ T5905] usb 4-1: config 0 descriptor?? [ 351.070451][ T48] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 353.587752][ T48] usb 5-1: New USB device found, idVendor=045e, idProduct=02bf, bcdDevice=7b.41 [ 353.630118][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 353.666950][ T48] usb 5-1: Product: syz [ 353.684239][ T48] usb 5-1: Manufacturer: syz [ 353.710186][ T48] usb 5-1: SerialNumber: syz [ 353.752803][ T48] usb 5-1: config 0 descriptor?? [ 353.786963][ T30] audit: type=1400 audit(1751984062.099:799): avc: denied { listen } for pid=10135 comm="syz.2.1105" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 354.000399][ T48] usb 5-1: can't set config #0, error -71 [ 354.023018][ T48] usb 5-1: USB disconnect, device number 46 [ 354.450545][ T48] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 355.641718][ T48] usb 5-1: config 0 has an invalid interface number: 113 but max is 0 [ 355.649927][ T48] usb 5-1: config 0 has no interface number 0 [ 355.656481][ T48] usb 5-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 355.668229][ T48] usb 5-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 355.736729][ T48] usb 5-1: config 0 interface 113 has no altsetting 0 [ 355.789324][ T48] usb 5-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 355.816171][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.991911][ T48] usb 5-1: Product: syz [ 355.996172][ T48] usb 5-1: Manufacturer: syz [ 356.001014][ T48] usb 5-1: SerialNumber: syz [ 356.009900][ T48] usb 5-1: config 0 descriptor?? [ 356.017931][ C1] usb 5-1: NFC: Urb failure (status -71) [ 356.023800][ T48] usb 5-1: NFC: Unable to get FW version [ 356.029997][ T48] pn533_usb 5-1:0.113: probe with driver pn533_usb failed with error -90 [ 356.080647][ T5905] usbhid 4-1:0.0: can't add hid device: -71 [ 356.086680][ T5905] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 356.101701][ T5905] usb 4-1: USB disconnect, device number 54 [ 356.130364][ T10] usb 2-1: new high-speed USB device number 48 using dummy_hcd [ 356.223482][T10161] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1112'. [ 356.237502][ T48] usb 5-1: USB disconnect, device number 47 [ 356.280310][ T10] usb 2-1: Using ep0 maxpacket: 32 [ 356.289499][ T10] usb 2-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 356.302957][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 356.322924][ T10] usb 2-1: Product: syz [ 356.327124][ T10] usb 2-1: Manufacturer: syz [ 356.331792][ T10] usb 2-1: SerialNumber: syz [ 356.342557][ T10] usb 2-1: config 0 descriptor?? [ 356.352621][ T10] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 356.700480][ T5898] usb 3-1: new high-speed USB device number 37 using dummy_hcd [ 356.922309][ T5898] usb 3-1: unable to get BOS descriptor or descriptor too short [ 356.931077][ T5898] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 356.943425][ T5898] usb 3-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 356.952224][ T5898] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 356.989584][ T5898] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 357.069501][T10171] FAULT_INJECTION: forcing a failure. [ 357.069501][T10171] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.082715][T10171] CPU: 1 UID: 0 PID: 10171 Comm: syz.4.1113 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 357.082738][T10171] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 357.082749][T10171] Call Trace: [ 357.082755][T10171] [ 357.082762][T10171] dump_stack_lvl+0x16c/0x1f0 [ 357.082792][T10171] should_fail_ex+0x512/0x640 [ 357.082818][T10171] _copy_from_user+0x2e/0xd0 [ 357.082844][T10171] generic_map_delete_batch+0x439/0x700 [ 357.082873][T10171] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 357.082901][T10171] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 357.082925][T10171] bpf_map_do_batch+0x4a6/0x680 [ 357.082948][T10171] __sys_bpf+0x5fc/0x4d80 [ 357.082974][T10171] ? __pfx___sys_bpf+0x10/0x10 [ 357.082998][T10171] ? ksys_write+0x190/0x250 [ 357.083025][T10171] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 357.083065][T10171] ? fput+0x70/0xf0 [ 357.083080][T10171] ? ksys_write+0x1ac/0x250 [ 357.083101][T10171] ? __pfx_ksys_write+0x10/0x10 [ 357.083128][T10171] __x64_sys_bpf+0x78/0xc0 [ 357.083157][T10171] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.083179][T10171] do_syscall_64+0xcd/0x4c0 [ 357.083205][T10171] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.083223][T10171] RIP: 0033:0x7f85bf18e929 [ 357.083237][T10171] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.083253][T10171] RSP: 002b:00007f85bffa0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 357.083270][T10171] RAX: ffffffffffffffda RBX: 00007f85bf3b6160 RCX: 00007f85bf18e929 [ 357.083281][T10171] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 357.083292][T10171] RBP: 00007f85bffa0090 R08: 0000000000000000 R09: 0000000000000000 [ 357.083302][T10171] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.083313][T10171] R13: 0000000000000000 R14: 00007f85bf3b6160 R15: 00007ffeb77d1b78 [ 357.083337][T10171] [ 357.367642][ T5898] usb 3-1: config 1 has no interface number 1 [ 357.373932][ T5898] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 357.389769][ T5898] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 357.398982][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 357.407022][ T5898] usb 3-1: Product: syz [ 357.411298][ T5898] usb 3-1: Manufacturer: syz [ 357.416067][ T5898] usb 3-1: SerialNumber: syz [ 357.790833][ T10] gspca_ov534_9: reg_w failed -110 [ 357.840363][ T9] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 357.948662][ T5898] usb 3-1: 2:1 : no or invalid class specific endpoint descriptor [ 357.956567][ T5898] usb 3-1: found format II with max.bitrate = 8, frame size=9 [ 357.964123][ T5898] usb 3-1: 2:1 : invalid UAC_FORMAT_TYPE desc [ 358.148940][ T5898] usb 3-1: USB disconnect, device number 37 [ 358.161990][ T10] gspca_ov534_9: Unknown sensor 0000 [ 358.186988][ T10] ov534_9 2-1:0.0: probe with driver ov534_9 failed with error -22 [ 358.273461][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 358.285376][ T5912] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 358.409631][ T9] usb 1-1: config 0 has no interface number 0 [ 358.513813][ T10] usb 2-1: USB disconnect, device number 48 [ 358.520337][ T9] usb 1-1: New USB device found, idVendor=0b48, idProduct=1005, bcdDevice=8c.1e [ 358.529375][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.547471][ T9] usb 1-1: config 0 descriptor?? [ 358.555045][ T9] usb 1-1: selecting invalid altsetting 1 [ 358.566337][ T9] dvb_ttusb_budget: ttusb_init_controller: error [ 358.573337][ T9] dvbdev: DVB: registering new adapter (Technotrend/Hauppauge Nova-USB) [ 358.608035][ T5912] usb 4-1: config 155 has an invalid descriptor of length 0, skipping remainder of the config [ 358.627530][ T5912] usb 4-1: config 155 interface 0 altsetting 0 has an endpoint descriptor with address 0xE2, changing to 0x82 [ 358.639259][ T5912] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 358.660641][ T5912] usb 4-1: config 155 interface 0 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 358.676885][ T5912] usb 4-1: config 155 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 11 [ 358.714720][ T9] DVB: Unable to find symbol cx22700_attach() [ 358.731598][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 358.732212][ T5912] usb 4-1: New USB device found, idVendor=15c2, idProduct=ffdc, bcdDevice=bd.30 [ 358.759089][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 358.787543][ T5912] usb 4-1: Product: syz [ 358.788751][T10192] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1119'. [ 358.797086][ T5912] usb 4-1: Manufacturer: syz [ 358.811540][ T9] DVB: Unable to find symbol tda10046_attach() [ 358.817837][ T5912] usb 4-1: SerialNumber: syz [ 358.822521][ T9] dvb_ttusb_budget: no frontend driver found for device [0b48:1005] [ 358.843215][ T5912] imon:imon_init_intf0: usb_submit_urb failed for intf0 (-90) [ 358.853903][ T9] usb 1-1: USB disconnect, device number 40 [ 358.860743][ T5912] imon 4-1:155.0: unable to initialize intf0, err -90 [ 358.868207][ T5912] imon:imon_probe: failed to initialize context! [ 358.878132][ T5912] imon 4-1:155.0: unable to register, err -19 [ 358.966396][ T30] audit: type=1400 audit(1751984067.319:800): avc: denied { map } for pid=10205 comm="syz.2.1122" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 358.994484][ T30] audit: type=1400 audit(1751984067.319:801): avc: denied { execute } for pid=10205 comm="syz.2.1122" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 359.027383][ T5982] usb 2-1: new high-speed USB device number 49 using dummy_hcd [ 359.050359][ T5898] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 359.072707][ T30] audit: type=1400 audit(1751984067.429:802): avc: denied { map } for pid=10205 comm="syz.2.1122" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 359.182617][ T5982] usb 2-1: Using ep0 maxpacket: 32 [ 359.190651][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.205990][ T5982] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.216377][ T5982] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 359.221548][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 359.227722][ T5982] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.236495][ T5898] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 359.254381][ T5898] usb 5-1: New USB device found, idVendor=0d8c, idProduct=0022, bcdDevice= 0.00 [ 359.255018][ T5982] usb 2-1: config 0 descriptor?? [ 359.263516][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 359.265487][ T5898] usb 5-1: config 0 descriptor?? [ 359.287613][ T5982] hub 2-1:0.0: USB hub found [ 359.427603][T10212] dlm: no local IP address has been set [ 359.435565][T10212] dlm: cannot start dlm midcomms -107 [ 359.487446][ T5982] hub 2-1:0.0: 1 port detected [ 359.686883][ T5898] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 359.696656][ T5898] cm6533_jd 0003:0D8C:0022.0010: unknown main item tag 0x0 [ 359.705809][ T5947] usb 4-1: USB disconnect, device number 55 [ 359.715991][ T5898] input: HID 0d8c:0022 as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:0D8C:0022.0010/input/input19 [ 359.736172][ T5898] cm6533_jd 0003:0D8C:0022.0010: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 0d8c:0022] on usb-dummy_hcd.4-1/input0 [ 359.854360][ T5982] hub 2-1:0.0: hub_hub_status failed (err = -71) [ 359.862591][ T5982] hub 2-1:0.0: config failed, can't get hub status (err -71) [ 359.874294][ T5982] usbhid 2-1:0.0: can't add hid device: -71 [ 359.880303][ T5982] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 359.920691][ T5982] usb 2-1: USB disconnect, device number 49 [ 360.041588][T10223] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.065278][T10196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 360.100472][T10196] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 360.109107][T10196] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 361.322247][T10235] FAULT_INJECTION: forcing a failure. [ 361.322247][T10235] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 361.335451][T10235] CPU: 1 UID: 0 PID: 10235 Comm: syz.1.1127 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 361.335475][T10235] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 361.335486][T10235] Call Trace: [ 361.335491][T10235] [ 361.335498][T10235] dump_stack_lvl+0x16c/0x1f0 [ 361.335526][T10235] should_fail_ex+0x512/0x640 [ 361.335554][T10235] _copy_from_user+0x2e/0xd0 [ 361.335579][T10235] generic_map_delete_batch+0x439/0x700 [ 361.335609][T10235] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 361.335637][T10235] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 361.335663][T10235] bpf_map_do_batch+0x4a6/0x680 [ 361.335685][T10235] __sys_bpf+0x5fc/0x4d80 [ 361.335712][T10235] ? __pfx___sys_bpf+0x10/0x10 [ 361.335737][T10235] ? ksys_write+0x190/0x250 [ 361.335764][T10235] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 361.335805][T10235] ? fput+0x70/0xf0 [ 361.335820][T10235] ? ksys_write+0x1ac/0x250 [ 361.335841][T10235] ? __pfx_ksys_write+0x10/0x10 [ 361.335867][T10235] __x64_sys_bpf+0x78/0xc0 [ 361.335891][T10235] ? lockdep_hardirqs_on+0x7c/0x110 [ 361.335914][T10235] do_syscall_64+0xcd/0x4c0 [ 361.335940][T10235] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.335958][T10235] RIP: 0033:0x7f840538e929 [ 361.335973][T10235] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 361.335990][T10235] RSP: 002b:00007f84031b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 361.336008][T10235] RAX: ffffffffffffffda RBX: 00007f84055b6160 RCX: 00007f840538e929 [ 361.336019][T10235] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 361.336029][T10235] RBP: 00007f84031b4090 R08: 0000000000000000 R09: 0000000000000000 [ 361.336040][T10235] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 361.336050][T10235] R13: 0000000000000000 R14: 00007f84055b6160 R15: 00007ffe6e0ef9d8 [ 361.336074][T10235] [ 362.599726][ T5982] usb 5-1: USB disconnect, device number 48 [ 362.671277][ T5898] usb 2-1: new full-speed USB device number 50 using dummy_hcd [ 362.854004][ T5898] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 362.872776][ T5898] usb 2-1: config 0 has no interface number 0 [ 362.889117][ T5898] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 362.930521][ T5898] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 362.962851][ T5898] usb 2-1: config 0 interface 113 has no altsetting 0 [ 363.012677][T10277] Can't find a SQUASHFS superblock on nullb0 [ 363.113192][ T5898] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 363.130355][ T9] usb 3-1: new full-speed USB device number 38 using dummy_hcd [ 363.138256][ T5898] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.138280][ T5898] usb 2-1: Product: syz [ 363.163198][ T5898] usb 2-1: Manufacturer: syz [ 363.167908][ T5898] usb 2-1: SerialNumber: syz [ 363.177245][ T5898] usb 2-1: config 0 descriptor?? [ 363.322845][ C1] usb 2-1: NFC: Urb failure (status -71) [ 363.330591][ T5898] usb 2-1: NFC: Unable to get FW version [ 363.336625][ T5898] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 363.435353][ T9] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 363.523951][ T9] usb 3-1: too many endpoints for config 0 interface 0 altsetting 0: 255, using maximum allowed: 30 [ 363.530649][ T5898] usb 2-1: USB disconnect, device number 50 [ 363.926422][ T9] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 255 [ 363.975012][ T9] usb 3-1: New USB device found, idVendor=5543, idProduct=0004, bcdDevice= 0.00 [ 363.994908][ T9] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.098057][ T9] usb 3-1: config 0 descriptor?? [ 364.368401][T10299] FAULT_INJECTION: forcing a failure. [ 364.368401][T10299] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 364.381583][T10299] CPU: 0 UID: 0 PID: 10299 Comm: syz.0.1143 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 364.381607][T10299] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 364.381618][T10299] Call Trace: [ 364.381624][T10299] [ 364.381630][T10299] dump_stack_lvl+0x16c/0x1f0 [ 364.381660][T10299] should_fail_ex+0x512/0x640 [ 364.381686][T10299] _copy_from_user+0x2e/0xd0 [ 364.381711][T10299] generic_map_delete_batch+0x439/0x700 [ 364.381740][T10299] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 364.381769][T10299] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 364.381793][T10299] bpf_map_do_batch+0x4a6/0x680 [ 364.381815][T10299] __sys_bpf+0x5fc/0x4d80 [ 364.381837][T10299] ? rcu_is_watching+0x12/0xc0 [ 364.381861][T10299] ? __pfx___sys_bpf+0x10/0x10 [ 364.381883][T10299] ? __schedule+0x1181/0x5de0 [ 364.381904][T10299] ? ksys_write+0x190/0x250 [ 364.381948][T10299] ? fput+0x70/0xf0 [ 364.381962][T10299] ? ksys_write+0x1ac/0x250 [ 364.381989][T10299] __x64_sys_bpf+0x78/0xc0 [ 364.382013][T10299] ? lockdep_hardirqs_on+0x7c/0x110 [ 364.382036][T10299] do_syscall_64+0xcd/0x4c0 [ 364.382061][T10299] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 364.382086][T10299] RIP: 0033:0x7f0c5a98e929 [ 364.382099][T10299] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 364.382116][T10299] RSP: 002b:00007f0c587f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 364.382132][T10299] RAX: ffffffffffffffda RBX: 00007f0c5abb6160 RCX: 00007f0c5a98e929 [ 364.382144][T10299] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 364.382154][T10299] RBP: 00007f0c587f6090 R08: 0000000000000000 R09: 0000000000000000 [ 364.382165][T10299] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 364.382175][T10299] R13: 0000000000000000 R14: 00007f0c5abb6160 R15: 00007ffc7ae4d5d8 [ 364.382199][T10299] [ 364.662919][ T30] audit: type=1400 audit(1751984073.009:803): avc: denied { listen } for pid=10301 comm="syz.3.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 364.725082][ T30] audit: type=1400 audit(1751984073.009:804): avc: denied { ioctl } for pid=10301 comm="syz.3.1145" path="socket:[26946]" dev="sockfs" ino=26946 ioctlcmd=0x89f9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 365.034274][T10317] input: syz0 as /devices/virtual/input/input20 [ 365.170642][T10295] tipc: Failed to remove unknown binding: 66,1,1/0:3244972857/3244972859 [ 365.180341][T10295] tipc: Failed to remove unknown binding: 66,1,1/0:3244972857/3244972859 [ 365.701155][ T5912] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 365.714693][T10327] pim6reg1: entered allmulticast mode [ 366.300323][ T5912] usb 5-1: Using ep0 maxpacket: 8 [ 366.308877][ T5912] usb 5-1: config 0 has an invalid interface number: 143 but max is 0 [ 366.372705][ T5912] usb 5-1: config 0 has no interface number 0 [ 366.381990][ T5912] usb 5-1: New USB device found, idVendor=2058, idProduct=1005, bcdDevice=c1.9b [ 366.400418][ T5912] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.403915][T10335] pim6reg1: entered promiscuous mode [ 366.410449][ T5912] usb 5-1: config 0 descriptor?? [ 366.416005][T10335] pim6reg1: entered allmulticast mode [ 366.521441][ T5912] viperboard 5-1:0.143: version 0.00 found at bus 005 address 049 [ 366.552918][T10339] syz.1.1152: attempt to access beyond end of device [ 366.552918][T10339] nbd1: rw=4096, sector=2, nr_sectors = 2 limit=0 [ 366.573557][T10339] EXT4-fs (nbd1): unable to read superblock [ 366.586769][ T5912] viperboard-i2c viperboard-i2c.2.auto: error -EIO: failure setting i2c_bus_freq to 100 [ 366.600751][ T5912] viperboard-i2c viperboard-i2c.2.auto: probe with driver viperboard-i2c failed with error -5 [ 366.658260][T10295] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1142'. [ 366.704669][ T5912] usb 5-1: USB disconnect, device number 49 [ 366.767010][ T5982] usb 3-1: USB disconnect, device number 38 [ 367.551086][T10355] FAULT_INJECTION: forcing a failure. [ 367.551086][T10355] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.564237][T10355] CPU: 1 UID: 0 PID: 10355 Comm: syz.1.1157 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 367.564260][T10355] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 367.564271][T10355] Call Trace: [ 367.564276][T10355] [ 367.564284][T10355] dump_stack_lvl+0x16c/0x1f0 [ 367.564313][T10355] should_fail_ex+0x512/0x640 [ 367.564339][T10355] _copy_from_user+0x2e/0xd0 [ 367.564365][T10355] generic_map_delete_batch+0x439/0x700 [ 367.564394][T10355] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 367.564423][T10355] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 367.564447][T10355] bpf_map_do_batch+0x4a6/0x680 [ 367.564470][T10355] __sys_bpf+0x5fc/0x4d80 [ 367.564493][T10355] ? rcu_is_watching+0x12/0xc0 [ 367.564517][T10355] ? __pfx___sys_bpf+0x10/0x10 [ 367.564539][T10355] ? __schedule+0x1181/0x5de0 [ 367.564560][T10355] ? ksys_write+0x190/0x250 [ 367.564603][T10355] ? fput+0x70/0xf0 [ 367.564619][T10355] ? ksys_write+0x1ac/0x250 [ 367.564646][T10355] __x64_sys_bpf+0x78/0xc0 [ 367.564670][T10355] ? lockdep_hardirqs_on+0x7c/0x110 [ 367.564692][T10355] do_syscall_64+0xcd/0x4c0 [ 367.564719][T10355] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.564736][T10355] RIP: 0033:0x7f840538e929 [ 367.564750][T10355] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.564767][T10355] RSP: 002b:00007f84031b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 367.564784][T10355] RAX: ffffffffffffffda RBX: 00007f84055b6160 RCX: 00007f840538e929 [ 367.564795][T10355] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 367.564806][T10355] RBP: 00007f84031b4090 R08: 0000000000000000 R09: 0000000000000000 [ 367.564816][T10355] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.564826][T10355] R13: 0000000000000000 R14: 00007f84055b6160 R15: 00007ffe6e0ef9d8 [ 367.564850][T10355] [ 367.753807][ C1] vkms_vblank_simulate: vblank timer overrun [ 368.348406][T10365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1160'. [ 368.380599][T10365] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1160'. [ 368.464336][T10369] program syz.1.1162 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 368.531266][ T30] audit: type=1400 audit(1751984076.879:805): avc: denied { read write } for pid=5823 comm="syz-executor" name="loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.613442][ T30] audit: type=1400 audit(1751984076.879:806): avc: denied { open } for pid=5823 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 368.688244][ T30] audit: type=1400 audit(1751984076.879:807): avc: denied { ioctl } for pid=5823 comm="syz-executor" path="/dev/loop1" dev="devtmpfs" ino=648 ioctlcmd=0x4c01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 369.080561][ T30] audit: type=1400 audit(1751984076.909:808): avc: denied { prog_load } for pid=10357 comm="syz.4.1158" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bpf permissive=1 [ 369.150349][ T30] audit: type=1400 audit(1751984076.909:809): avc: denied { bpf } for pid=10357 comm="syz.4.1158" capability=39 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 369.205061][ T30] audit: type=1400 audit(1751984076.929:810): avc: denied { read } for pid=10371 comm="syz.0.1163" name="comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.388695][ T30] audit: type=1400 audit(1751984076.929:811): avc: denied { open } for pid=10371 comm="syz.0.1163" path="/dev/comedi0" dev="devtmpfs" ino=1276 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 369.404728][T10383] "syz.1.1166" (10383) uses obsolete ecb(arc4) skcipher [ 369.480353][ T30] audit: type=1400 audit(1751984076.959:812): avc: denied { create } for pid=10371 comm="syz.0.1163" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 369.932676][T10395] FAULT_INJECTION: forcing a failure. [ 369.932676][T10395] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 369.945805][T10395] CPU: 0 UID: 0 PID: 10395 Comm: syz.1.1169 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 369.945834][T10395] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.945845][T10395] Call Trace: [ 369.945850][T10395] [ 369.945857][T10395] dump_stack_lvl+0x16c/0x1f0 [ 369.945887][T10395] should_fail_ex+0x512/0x640 [ 369.945913][T10395] _copy_from_user+0x2e/0xd0 [ 369.945938][T10395] generic_map_delete_batch+0x439/0x700 [ 369.945968][T10395] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 369.945997][T10395] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 369.946021][T10395] bpf_map_do_batch+0x4a6/0x680 [ 369.946043][T10395] __sys_bpf+0x5fc/0x4d80 [ 369.946069][T10395] ? __pfx___sys_bpf+0x10/0x10 [ 369.946093][T10395] ? ksys_write+0x190/0x250 [ 369.946120][T10395] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 369.946160][T10395] ? fput+0x70/0xf0 [ 369.946175][T10395] ? ksys_write+0x1ac/0x250 [ 369.946195][T10395] ? __pfx_ksys_write+0x10/0x10 [ 369.946221][T10395] __x64_sys_bpf+0x78/0xc0 [ 369.946244][T10395] ? lockdep_hardirqs_on+0x7c/0x110 [ 369.946266][T10395] do_syscall_64+0xcd/0x4c0 [ 369.946292][T10395] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.946309][T10395] RIP: 0033:0x7f840538e929 [ 369.946323][T10395] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 369.946339][T10395] RSP: 002b:00007f84031b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 369.946356][T10395] RAX: ffffffffffffffda RBX: 00007f84055b6160 RCX: 00007f840538e929 [ 369.946367][T10395] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 369.946378][T10395] RBP: 00007f84031b4090 R08: 0000000000000000 R09: 0000000000000000 [ 369.946388][T10395] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 369.946398][T10395] R13: 0000000000000000 R14: 00007f84055b6160 R15: 00007ffe6e0ef9d8 [ 369.946422][T10395] [ 370.150281][ T30] kauditd_printk_skb: 28 callbacks suppressed [ 370.150298][ T30] audit: type=1400 audit(1751984078.489:841): avc: denied { ioctl } for pid=10391 comm="syz.1.1169" path="socket:[26616]" dev="sockfs" ino=26616 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.281865][ T30] audit: type=1400 audit(1751984078.489:842): avc: denied { setopt } for pid=10391 comm="syz.1.1169" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 370.578642][ T30] audit: type=1400 audit(1751984078.929:843): avc: denied { create } for pid=10389 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 370.739884][ T30] audit: type=1400 audit(1751984078.929:844): avc: denied { setopt } for pid=10389 comm="syz.2.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 370.901895][ T30] audit: type=1400 audit(1751984078.959:845): avc: denied { create } for pid=10400 comm="syz.1.1171" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 370.954902][T10408] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1172'. [ 371.073428][ T30] audit: type=1400 audit(1751984078.959:846): avc: denied { ioctl } for pid=10400 comm="syz.1.1171" path="socket:[27655]" dev="sockfs" ino=27655 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 371.150404][ T30] audit: type=1400 audit(1751984078.959:847): avc: denied { write } for pid=10400 comm="syz.1.1171" name="ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.174888][ T30] audit: type=1400 audit(1751984078.959:848): avc: denied { map } for pid=10400 comm="syz.1.1171" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.200708][ T48] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 371.202197][ T30] audit: type=1400 audit(1751984078.959:849): avc: denied { execute } for pid=10400 comm="syz.1.1171" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.240713][ T30] audit: type=1400 audit(1751984078.959:850): avc: denied { ioctl } for pid=10400 comm="syz.1.1171" path="/dev/ubi_ctrl" dev="devtmpfs" ino=706 ioctlcmd=0x642d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 371.360370][ T48] usb 5-1: device descriptor read/64, error -71 [ 371.515734][T10419] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 371.658122][T10422] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 371.785661][ T48] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 371.990436][ T48] usb 5-1: device descriptor read/64, error -71 [ 372.192723][ T48] usb usb5-port1: attempt power cycle [ 372.616056][ T10] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 372.640358][ T48] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 372.668766][T10435] loop6: detected capacity change from 0 to 7 [ 372.689714][ T48] usb 5-1: device descriptor read/8, error -71 [ 372.699178][T10435] Dev loop6: unable to read RDB block 7 [ 372.705934][T10435] loop6: unable to read partition table [ 372.715525][T10435] loop6: partition table beyond EOD, truncated [ 372.722895][T10435] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 372.896592][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 372.907833][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 372.924199][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 373.013970][T10442] FAULT_INJECTION: forcing a failure. [ 373.013970][T10442] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 373.027146][T10442] CPU: 0 UID: 0 PID: 10442 Comm: syz.0.1181 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 373.027170][T10442] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 373.027180][T10442] Call Trace: [ 373.027187][T10442] [ 373.027194][T10442] dump_stack_lvl+0x16c/0x1f0 [ 373.027223][T10442] should_fail_ex+0x512/0x640 [ 373.027250][T10442] _copy_from_user+0x2e/0xd0 [ 373.027276][T10442] generic_map_delete_batch+0x439/0x700 [ 373.027307][T10442] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 373.027335][T10442] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 373.027360][T10442] bpf_map_do_batch+0x4a6/0x680 [ 373.027383][T10442] __sys_bpf+0x5fc/0x4d80 [ 373.027406][T10442] ? rcu_is_watching+0x12/0xc0 [ 373.027431][T10442] ? __pfx___sys_bpf+0x10/0x10 [ 373.027453][T10442] ? __schedule+0x1181/0x5de0 [ 373.027474][T10442] ? ksys_write+0x190/0x250 [ 373.027518][T10442] ? fput+0x70/0xf0 [ 373.027533][T10442] ? ksys_write+0x1ac/0x250 [ 373.027560][T10442] __x64_sys_bpf+0x78/0xc0 [ 373.027584][T10442] ? lockdep_hardirqs_on+0x7c/0x110 [ 373.027606][T10442] do_syscall_64+0xcd/0x4c0 [ 373.027632][T10442] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 373.027650][T10442] RIP: 0033:0x7f0c5a98e929 [ 373.027663][T10442] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 373.027680][T10442] RSP: 002b:00007f0c587f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 373.027698][T10442] RAX: ffffffffffffffda RBX: 00007f0c5abb6160 RCX: 00007f0c5a98e929 [ 373.027710][T10442] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 373.027720][T10442] RBP: 00007f0c587f6090 R08: 0000000000000000 R09: 0000000000000000 [ 373.027730][T10442] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 373.027741][T10442] R13: 0000000000000000 R14: 00007f0c5abb6160 R15: 00007ffc7ae4d5d8 [ 373.027764][T10442] [ 373.181749][ T48] usb 5-1: new high-speed USB device number 53 using dummy_hcd [ 373.195911][ T10] usb 3-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 373.242560][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.251952][ T10] usb 3-1: config 0 descriptor?? [ 374.625596][ T48] usb 5-1: device descriptor read/8, error -71 [ 374.639780][ T10] usbhid 3-1:0.0: can't add hid device: -71 [ 374.684022][ T10] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 374.733211][ T10] usb 3-1: USB disconnect, device number 39 [ 374.741370][ T48] usb usb5-port1: unable to enumerate USB device [ 375.111578][ T48] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 375.232377][ T30] kauditd_printk_skb: 37 callbacks suppressed [ 375.232394][ T30] audit: type=1400 audit(1751984083.589:888): avc: denied { listen } for pid=10451 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 375.272414][ T30] audit: type=1400 audit(1751984083.629:889): avc: denied { connect } for pid=10451 comm="syz.0.1184" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 375.295239][ T48] usb 4-1: config 223 has an invalid interface number: 35 but max is 0 [ 375.303932][ T48] usb 4-1: config 223 has no interface number 0 [ 375.328840][ T48] usb 4-1: config 223 interface 35 has no altsetting 0 [ 375.348074][ T48] usb 4-1: New USB device found, idVendor=05f9, idProduct=ffff, bcdDevice=b4.bb [ 375.357372][ T48] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 375.365451][ T48] usb 4-1: Product: syz [ 375.369708][ T48] usb 4-1: Manufacturer: syz [ 375.374476][ T48] usb 4-1: SerialNumber: syz [ 375.594973][ T30] audit: type=1400 audit(1751984083.949:890): avc: denied { read } for pid=10470 comm="syz.4.1189" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 376.285659][T10473] netlink: 'syz.4.1189': attribute type 27 has an invalid length. [ 377.767879][ T48] usbserial_generic 4-1:223.35: The "generic" usb-serial driver is only for testing and one-off prototypes. [ 377.900869][ T5912] usb 5-1: new full-speed USB device number 54 using dummy_hcd [ 378.121713][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.170203][ T5912] usb 5-1: New USB device found, idVendor=2304, idProduct=020f, bcdDevice=3b.de [ 378.283456][ T5912] usb 5-1: New USB device strings: Mfr=1, Product=12, SerialNumber=3 [ 378.390586][ T5912] usb 5-1: Product: syz [ 378.441653][ T5912] usb 5-1: Manufacturer: syz [ 378.492369][ T5912] usb 5-1: SerialNumber: syz [ 378.530488][ T10] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 378.719273][ T30] audit: type=1400 audit(1751984083.949:891): avc: denied { open } for pid=10470 comm="syz.4.1189" path="/dev/video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 378.742777][ T48] usbserial_generic 4-1:223.35: Tell linux-usb@vger.kernel.org to add your device to a proper driver. [ 378.754614][ T48] usbserial_generic 4-1:223.35: device has no bulk endpoints [ 378.797498][ T30] audit: type=1400 audit(1751984086.479:892): avc: denied { create } for pid=10476 comm="syz.1.1190" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 378.818972][ T48] safe_serial 4-1:223.35: safe_serial converter detected [ 378.820659][ T5912] usb 5-1: config 0 descriptor?? [ 378.826182][ T48] safe_serial 4-1:223.35: probe with driver safe_serial failed with error -22 [ 378.948644][ T30] audit: type=1400 audit(1751984086.549:893): avc: denied { read } for pid=10476 comm="syz.1.1190" name="mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 378.950422][ T10] usb 2-1: Using ep0 maxpacket: 16 [ 378.978375][ T10] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 378.993697][ T10] usb 2-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 379.006954][ T10] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 379.018035][ T30] audit: type=1400 audit(1751984086.569:894): avc: denied { open } for pid=10476 comm="syz.1.1190" path="/dev/input/mice" dev="devtmpfs" ino=916 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 379.059124][ T30] audit: type=1400 audit(1751984086.839:895): avc: denied { read } for pid=10480 comm="syz.2.1191" name="card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 379.109650][ T30] audit: type=1400 audit(1751984086.839:896): avc: denied { open } for pid=10480 comm="syz.2.1191" path="/dev/dri/card1" dev="devtmpfs" ino=628 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 379.141338][ T5912] dvb-usb: found a 'Pinnacle 400e DVB-S USB2.0' in warm state. [ 379.177323][ T5912] dvb-usb: bulk message failed: -22 (4/0) [ 379.199127][ T48] usb 4-1: USB disconnect, device number 56 [ 379.294130][T10494] FAULT_INJECTION: forcing a failure. [ 379.294130][T10494] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 379.307337][T10494] CPU: 1 UID: 0 PID: 10494 Comm: syz.3.1193 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 379.307360][T10494] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.307371][T10494] Call Trace: [ 379.307377][T10494] [ 379.307384][T10494] dump_stack_lvl+0x16c/0x1f0 [ 379.307413][T10494] should_fail_ex+0x512/0x640 [ 379.307439][T10494] _copy_from_user+0x2e/0xd0 [ 379.307465][T10494] generic_map_delete_batch+0x439/0x700 [ 379.307495][T10494] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 379.307524][T10494] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 379.307548][T10494] bpf_map_do_batch+0x4a6/0x680 [ 379.307570][T10494] __sys_bpf+0x5fc/0x4d80 [ 379.307593][T10494] ? rcu_is_watching+0x12/0xc0 [ 379.307617][T10494] ? __pfx___sys_bpf+0x10/0x10 [ 379.307638][T10494] ? __schedule+0x1181/0x5de0 [ 379.307660][T10494] ? ksys_write+0x190/0x250 [ 379.307713][T10494] __x64_sys_bpf+0x78/0xc0 [ 379.307739][T10494] ? lockdep_hardirqs_on+0x7c/0x110 [ 379.307762][T10494] do_syscall_64+0xcd/0x4c0 [ 379.307788][T10494] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.307805][T10494] RIP: 0033:0x7f885c78e929 [ 379.307819][T10494] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.307836][T10494] RSP: 002b:00007f885a5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 379.307853][T10494] RAX: ffffffffffffffda RBX: 00007f885c9b6160 RCX: 00007f885c78e929 [ 379.307864][T10494] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 379.307874][T10494] RBP: 00007f885a5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 379.307884][T10494] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 379.307894][T10494] R13: 0000000000000000 R14: 00007f885c9b6160 R15: 00007ffc5de19118 [ 379.307917][T10494] [ 379.491031][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.694585][ T10] usb 2-1: config 0 descriptor?? [ 379.698789][ T30] audit: type=1400 audit(1751984086.969:897): avc: denied { create } for pid=10480 comm="syz.2.1191" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 379.718938][ C1] vkms_vblank_simulate: vblank timer overrun [ 379.725488][ T5912] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 379.725686][ T5912] dvb-usb: bulk message failed: -22 (5/0) [ 379.757016][ T10] input: bcm5974 as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/input/input21 [ 379.893270][ T5912] ttusb2: there might have been an error during control message transfer. (rlen = 0, was 0) [ 379.935471][ T5912] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 379.951585][T10503] FAULT_INJECTION: forcing a failure. [ 379.951585][T10503] name failslab, interval 1, probability 0, space 0, times 0 [ 379.969031][ T5185] bcm5974 2-1:0.0: could not read from device [ 379.975390][T10503] CPU: 0 UID: 0 PID: 10503 Comm: syz.3.1196 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 379.975412][T10503] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 379.975421][T10503] Call Trace: [ 379.975426][T10503] [ 379.975432][T10503] dump_stack_lvl+0x16c/0x1f0 [ 379.975458][T10503] should_fail_ex+0x512/0x640 [ 379.975478][T10503] ? fs_reclaim_acquire+0xae/0x150 [ 379.975497][T10503] ? tomoyo_encode2+0x100/0x3e0 [ 379.975518][T10503] should_failslab+0xc2/0x120 [ 379.975542][T10503] __kmalloc_noprof+0xd2/0x510 [ 379.975563][T10503] ? d_absolute_path+0x136/0x1a0 [ 379.975586][T10503] tomoyo_encode2+0x100/0x3e0 [ 379.975612][T10503] tomoyo_encode+0x29/0x50 [ 379.975634][T10503] tomoyo_realpath_from_path+0x18f/0x6e0 [ 379.975666][T10503] tomoyo_path_number_perm+0x245/0x580 [ 379.975685][T10503] ? tomoyo_path_number_perm+0x237/0x580 [ 379.975708][T10503] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 379.975730][T10503] ? find_held_lock+0x2b/0x80 [ 379.975776][T10503] ? find_held_lock+0x2b/0x80 [ 379.975797][T10503] ? hook_file_ioctl_common+0x145/0x410 [ 379.975829][T10503] ? __fget_files+0x20e/0x3c0 [ 379.975856][T10503] security_file_ioctl+0x9b/0x240 [ 379.975879][T10503] __x64_sys_ioctl+0xb7/0x210 [ 379.975898][T10503] do_syscall_64+0xcd/0x4c0 [ 379.975920][T10503] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.975936][T10503] RIP: 0033:0x7f885c78e929 [ 379.975949][T10503] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 379.975970][T10503] RSP: 002b:00007f885d511038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 379.975985][T10503] RAX: ffffffffffffffda RBX: 00007f885c9b5fa0 RCX: 00007f885c78e929 [ 379.975995][T10503] RDX: 0000200000000040 RSI: 0000000080044dfd RDI: 0000000000000003 [ 379.976004][T10503] RBP: 00007f885d511090 R08: 0000000000000000 R09: 0000000000000000 [ 379.976013][T10503] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 379.976022][T10503] R13: 0000000000000000 R14: 00007f885c9b5fa0 R15: 00007ffc5de19118 [ 379.976043][T10503] [ 379.976058][T10503] ERROR: Out of memory at tomoyo_realpath_from_path. [ 380.077850][T10505] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(7) [ 380.092963][ T5912] dvb-usb: Pinnacle 400e DVB-S USB2.0 error while loading driver (-19) [ 380.093507][T10505] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 380.117123][ T5912] usb 5-1: USB disconnect, device number 54 [ 380.132613][ C1] vkms_vblank_simulate: vblank timer overrun [ 380.226853][ T10] bcm5974 2-1:0.0: could not read from device [ 380.229439][T10505] vhci_hcd vhci_hcd.0: Device attached [ 380.258065][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 380.258079][ T30] audit: type=1400 audit(1751984088.609:909): avc: denied { write } for pid=10504 comm="syz.2.1197" path="/dev/vhci" dev="devtmpfs" ino=1268 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 380.300466][ T5185] bcm5974 2-1:0.0: could not read from device [ 380.328432][ T30] audit: type=1400 audit(1751984088.679:910): avc: denied { read } for pid=10504 comm="syz.2.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 380.348111][ T10] input: failed to attach handler mousedev to device input21, error: -5 [ 380.368781][ T5185] bcm5974 2-1:0.0: could not read from device [ 380.368876][ T10] usb 2-1: USB disconnect, device number 51 [ 380.388095][ T5185] bcm5974 2-1:0.0: could not read from device [ 380.390953][ T30] audit: type=1400 audit(1751984088.699:911): avc: denied { append } for pid=10509 comm="syz.0.1198" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 380.417896][ T30] audit: type=1400 audit(1751984088.739:912): avc: denied { write } for pid=10504 comm="syz.2.1197" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 380.450614][ T48] usb 37-1: new low-speed USB device number 2 using vhci_hcd [ 380.910353][T10506] vhci_hcd: connection reset by peer [ 381.013417][ T10] usb 2-1: new full-speed USB device number 52 using dummy_hcd [ 381.147656][ T1329] vhci_hcd: stop threads [ 381.152848][ T1329] vhci_hcd: release socket [ 381.158324][ T1329] vhci_hcd: disconnect device [ 381.220063][ T30] audit: type=1400 audit(1751984089.569:913): avc: denied { write } for pid=10530 comm="syz.0.1204" name="binder1" dev="binder" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 381.253712][ T30] audit: type=1400 audit(1751984089.599:914): avc: denied { mounton } for pid=10530 comm="syz.0.1204" path="/242/file0" dev="tmpfs" ino=1302 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 381.277730][ T30] audit: type=1400 audit(1751984089.609:915): avc: denied { ioctl } for pid=10530 comm="syz.0.1204" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0xe500 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 381.303868][ T10] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 381.399637][ T10] usb 2-1: config 0 has no interface number 0 [ 381.408709][ T10] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 381.580774][ T10] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 381.604329][ T10] usb 2-1: config 0 interface 113 has no altsetting 0 [ 381.714476][ T10] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 381.723702][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 381.731791][ T10] usb 2-1: Product: syz [ 381.746178][ T10] usb 2-1: Manufacturer: syz [ 381.846782][ T10] usb 2-1: SerialNumber: syz [ 381.867343][ T30] audit: type=1400 audit(1751984090.219:916): avc: denied { compute_member } for pid=10538 comm="syz.2.1207" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 381.997231][T10541] FAULT_INJECTION: forcing a failure. [ 381.997231][T10541] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.010385][T10541] CPU: 1 UID: 0 PID: 10541 Comm: syz.3.1206 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 382.010408][T10541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.010419][T10541] Call Trace: [ 382.010426][T10541] [ 382.010434][T10541] dump_stack_lvl+0x16c/0x1f0 [ 382.010463][T10541] should_fail_ex+0x512/0x640 [ 382.010490][T10541] _copy_from_user+0x2e/0xd0 [ 382.010516][T10541] generic_map_delete_batch+0x439/0x700 [ 382.010544][T10541] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 382.010573][T10541] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 382.010598][T10541] bpf_map_do_batch+0x4a6/0x680 [ 382.010620][T10541] __sys_bpf+0x5fc/0x4d80 [ 382.010642][T10541] ? __pfx___schedule+0x10/0x10 [ 382.010665][T10541] ? __pfx___sys_bpf+0x10/0x10 [ 382.010689][T10541] ? ksys_write+0x190/0x250 [ 382.010716][T10541] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 382.010741][T10541] ? lockdep_hardirqs_on+0x7c/0x110 [ 382.010776][T10541] ? fput+0x70/0xf0 [ 382.010791][T10541] ? ksys_write+0x1ac/0x250 [ 382.010811][T10541] ? __pfx_ksys_write+0x10/0x10 [ 382.010837][T10541] __x64_sys_bpf+0x78/0xc0 [ 382.010861][T10541] ? lockdep_hardirqs_on+0x7c/0x110 [ 382.010883][T10541] do_syscall_64+0xcd/0x4c0 [ 382.010909][T10541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.010926][T10541] RIP: 0033:0x7f885c78e929 [ 382.010941][T10541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 382.010957][T10541] RSP: 002b:00007f885a5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 382.010980][T10541] RAX: ffffffffffffffda RBX: 00007f885c9b6160 RCX: 00007f885c78e929 [ 382.010991][T10541] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 382.011002][T10541] RBP: 00007f885a5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 382.011012][T10541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 382.011022][T10541] R13: 0000000000000000 R14: 00007f885c9b6160 R15: 00007ffc5de19118 [ 382.011045][T10541] [ 382.155176][ T30] audit: type=1400 audit(1751984090.219:917): avc: denied { watch watch_reads } for pid=10538 comm="syz.2.1207" path="/264" dev="tmpfs" ino=1406 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 382.169183][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.251061][ T10] usb 2-1: config 0 descriptor?? [ 382.272573][ C0] usb 2-1: NFC: Urb failure (status -71) [ 382.278574][ T10] usb 2-1: NFC: Unable to get FW version [ 382.284770][ T10] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 382.317115][ T30] audit: type=1400 audit(1751984090.659:918): avc: denied { mount } for pid=10544 comm="syz.4.1209" name="/" dev="ramfs" ino=27560 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 382.339333][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.558830][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1200'. [ 382.672863][ T5898] usb 2-1: USB disconnect, device number 52 [ 382.735486][T10553] FAULT_INJECTION: forcing a failure. [ 382.735486][T10553] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 382.753646][T10553] CPU: 1 UID: 0 PID: 10553 Comm: syz.2.1210 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 382.753672][T10553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 382.753682][T10553] Call Trace: [ 382.753688][T10553] [ 382.753694][T10553] dump_stack_lvl+0x16c/0x1f0 [ 382.753721][T10553] should_fail_ex+0x512/0x640 [ 382.753748][T10553] _copy_to_user+0x32/0xd0 [ 382.753774][T10553] simple_read_from_buffer+0xcb/0x170 [ 382.753798][T10553] proc_fail_nth_read+0x197/0x270 [ 382.753819][T10553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.753841][T10553] ? rw_verify_area+0xcf/0x680 [ 382.753860][T10553] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 382.753880][T10553] vfs_read+0x1e1/0xc60 [ 382.753906][T10553] ? __pfx___mutex_lock+0x10/0x10 [ 382.753931][T10553] ? __pfx_vfs_read+0x10/0x10 [ 382.753960][T10553] ? __fget_files+0x20e/0x3c0 [ 382.753998][T10553] ksys_read+0x12a/0x250 [ 382.754018][T10553] ? __pfx_ksys_read+0x10/0x10 [ 382.754040][T10553] ? fput+0x70/0xf0 [ 382.754058][T10553] do_syscall_64+0xcd/0x4c0 [ 382.754084][T10553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 382.754101][T10553] RIP: 0033:0x7fc382d8d33c [ 382.754115][T10553] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 382.754130][T10553] RSP: 002b:00007fc383b26030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 382.754146][T10553] RAX: ffffffffffffffda RBX: 00007fc382fb5fa0 RCX: 00007fc382d8d33c [ 382.754158][T10553] RDX: 000000000000000f RSI: 00007fc383b260a0 RDI: 0000000000000004 [ 382.754168][T10553] RBP: 00007fc383b26090 R08: 0000000000000000 R09: 0000000000000000 [ 382.754177][T10553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 382.754187][T10553] R13: 0000000000000000 R14: 00007fc382fb5fa0 R15: 00007ffe66abd448 [ 382.754210][T10553] [ 382.943162][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.460326][T10555] nvme_fabrics: missing parameter 'transport=%s' [ 383.487598][T10555] nvme_fabrics: missing parameter 'nqn=%s' [ 383.540464][ T10] usb 3-1: new full-speed USB device number 40 using dummy_hcd [ 383.756621][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 383.770329][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 383.790301][ T5947] usb 4-1: new low-speed USB device number 57 using dummy_hcd [ 384.226137][ T10] usb 3-1: New USB device found, idVendor=1e71, idProduct=170e, bcdDevice= 0.00 [ 384.311754][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 384.342862][ T10] usb 3-1: config 0 descriptor?? [ 384.360468][ T5947] usb 4-1: device descriptor read/64, error -71 [ 384.640339][ T5947] usb 4-1: new low-speed USB device number 58 using dummy_hcd [ 384.763641][ T10] nzxt-kraken2 0003:1E71:170E.0011: item fetching failed at offset 5/7 [ 384.789446][ T10] nzxt-kraken2 0003:1E71:170E.0011: hid parse failed with -22 [ 384.816242][ T10] nzxt-kraken2 0003:1E71:170E.0011: probe with driver nzxt-kraken2 failed with error -22 [ 385.322384][ T5947] usb 4-1: device descriptor read/64, error -71 [ 385.337133][ T10] usb 3-1: USB disconnect, device number 40 [ 385.441140][ T5947] usb usb4-port1: attempt power cycle [ 385.733584][ T48] vhci_hcd: vhci_device speed not set [ 385.814512][T10582] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=62736 sclass=netlink_route_socket pid=10582 comm=syz.1.1217 [ 385.851555][T10582] overlayfs: cannot append lower layer [ 385.880033][ T30] kauditd_printk_skb: 51 callbacks suppressed [ 385.880045][ T30] audit: type=1400 audit(1751984094.229:970): avc: denied { name_bind } for pid=10571 comm="syz.1.1217" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 386.010341][ T5947] usb 4-1: new low-speed USB device number 59 using dummy_hcd [ 386.061223][ T5947] usb 4-1: device descriptor read/8, error -71 [ 386.155723][ T10] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 386.321968][T10594] FAULT_INJECTION: forcing a failure. [ 386.321968][T10594] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 386.335082][T10594] CPU: 0 UID: 0 PID: 10594 Comm: syz.2.1221 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 386.335105][T10594] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 386.335116][T10594] Call Trace: [ 386.335122][T10594] [ 386.335129][T10594] dump_stack_lvl+0x16c/0x1f0 [ 386.335157][T10594] should_fail_ex+0x512/0x640 [ 386.335183][T10594] _copy_from_user+0x2e/0xd0 [ 386.335209][T10594] generic_map_delete_batch+0x439/0x700 [ 386.335238][T10594] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 386.335267][T10594] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 386.335292][T10594] bpf_map_do_batch+0x4a6/0x680 [ 386.335314][T10594] __sys_bpf+0x5fc/0x4d80 [ 386.335337][T10594] ? rcu_is_watching+0x12/0xc0 [ 386.335361][T10594] ? __pfx___sys_bpf+0x10/0x10 [ 386.335382][T10594] ? __schedule+0x1181/0x5de0 [ 386.335439][T10594] __x64_sys_bpf+0x78/0xc0 [ 386.335462][T10594] ? lockdep_hardirqs_on+0x7c/0x110 [ 386.335485][T10594] do_syscall_64+0xcd/0x4c0 [ 386.335511][T10594] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 386.335528][T10594] RIP: 0033:0x7fc382d8e929 [ 386.335542][T10594] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 386.335559][T10594] RSP: 002b:00007fc380bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 386.335576][T10594] RAX: ffffffffffffffda RBX: 00007fc382fb6160 RCX: 00007fc382d8e929 [ 386.335587][T10594] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 386.335598][T10594] RBP: 00007fc380bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 386.335608][T10594] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 386.335618][T10594] R13: 0000000000000000 R14: 00007fc382fb6160 R15: 00007ffe66abd448 [ 386.335642][T10594] [ 386.543749][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 386.550681][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 386.560364][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 32, changing to 9 [ 386.571362][ T10] usb 5-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid maxpacket 1160, setting to 1024 [ 386.582409][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 386.660476][ T5947] usb 4-1: new low-speed USB device number 60 using dummy_hcd [ 386.735666][ T10] usb 5-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 386.744874][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.753035][ T10] usb 5-1: Product: syz [ 386.759284][ T10] usb 5-1: Manufacturer: syz [ 386.763972][ T10] usb 5-1: SerialNumber: syz [ 386.773248][ T10] usb 5-1: config 0 descriptor?? [ 386.779256][T10589] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 386.981798][ T5947] usb 4-1: device not accepting address 60, error -71 [ 386.989765][T10589] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 386.991708][ T5947] usb usb4-port1: unable to enumerate USB device [ 387.018738][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input22 [ 387.019523][T10601] loop6: detected capacity change from 0 to 7 [ 387.432488][ T30] audit: type=1400 audit(1751984095.399:971): avc: denied { ioctl } for pid=5185 comm="acpid" path="/dev/input/mouse1" dev="devtmpfs" ino=3125 ioctlcmd=0x4520 scontext=system_u:system_r:acpid_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 387.446864][T10601] Dev loop6: unable to read RDB block 7 [ 387.463478][ T30] audit: type=1400 audit(1751984095.549:972): avc: denied { write } for pid=10597 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 387.464381][T10601] loop6: unable to read partition table [ 387.490312][ T30] audit: type=1400 audit(1751984095.839:973): avc: denied { create } for pid=10597 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.492770][T10601] loop6: partition table beyond EOD, truncated [ 387.510637][ T30] audit: type=1400 audit(1751984095.869:974): avc: denied { connect } for pid=10597 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.524620][T10601] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 387.537060][ T30] audit: type=1400 audit(1751984095.889:975): avc: denied { write } for pid=10597 comm="syz.0.1223" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 387.569450][ T30] audit: type=1400 audit(1751984095.919:976): avc: denied { ioctl } for pid=10588 comm="syz.4.1220" path="/dev/input/mice" dev="devtmpfs" ino=916 ioctlcmd=0x5429 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 387.614286][ T5905] usb 5-1: USB disconnect, device number 55 [ 387.630394][ T5947] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 387.888426][ T5947] usb 4-1: Using ep0 maxpacket: 32 [ 387.900920][ T5947] usb 4-1: config 0 has an invalid interface number: 241 but max is 0 [ 387.906693][T10608] loop6: detected capacity change from 0 to 7 [ 387.909144][ T5947] usb 4-1: config 0 has no interface number 0 [ 387.924008][ T5947] usb 4-1: config 0 interface 241 altsetting 7 endpoint 0x6 has invalid maxpacket 512, setting to 64 [ 387.935133][T10608] Dev loop6: unable to read RDB block 7 [ 387.935165][T10608] loop6: unable to read partition table [ 387.942389][ T5947] usb 4-1: config 0 interface 241 has no altsetting 0 [ 387.956232][T10608] loop6: partition table beyond EOD, truncated [ 387.963978][T10608] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 388.061779][ T5947] usb 4-1: New USB device found, idVendor=0bfd, idProduct=010a, bcdDevice=52.b8 [ 388.073388][ T5947] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 388.081487][ T5947] usb 4-1: Product: syz [ 388.085701][ T5947] usb 4-1: Manufacturer: syz [ 388.090487][ T5947] usb 4-1: SerialNumber: syz [ 388.102653][ T5947] usb 4-1: config 0 descriptor?? [ 388.109260][ T5947] kvaser_usb 4-1:0.241: error -ENODEV: Cannot get usb endpoint(s) [ 388.180522][ T48] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 388.222861][ T30] audit: type=1400 audit(1751984096.579:977): avc: denied { write } for pid=10616 comm="syz.1.1229" name="video7" dev="devtmpfs" ino=949 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 388.249228][ T30] audit: type=1400 audit(1751984096.599:978): avc: denied { ioctl } for pid=10616 comm="syz.1.1229" path="/dev/video7" dev="devtmpfs" ino=949 ioctlcmd=0x561c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 388.278753][ T30] audit: type=1400 audit(1751984096.629:979): avc: denied { write } for pid=10616 comm="syz.1.1229" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 388.314994][T10596] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1222'. [ 388.329973][T10596] netlink: 'syz.3.1222': attribute type 30 has an invalid length. [ 388.340368][ T48] usb 3-1: device descriptor read/64, error -71 [ 388.344358][T10596] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.359132][T10596] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.368033][T10596] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.376856][T10596] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 388.416220][ T10] usb 4-1: USB disconnect, device number 61 [ 388.449913][T10620] xt_CT: You must specify a L4 protocol and not use inversions on it [ 388.670398][ T48] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 388.986891][ T48] usb 3-1: device descriptor read/64, error -71 [ 389.110637][ T48] usb usb3-port1: attempt power cycle [ 389.450334][ T48] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 389.502571][ T48] usb 3-1: device descriptor read/8, error -71 [ 389.690799][T10638] FAULT_INJECTION: forcing a failure. [ 389.690799][T10638] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 389.703944][T10638] CPU: 0 UID: 0 PID: 10638 Comm: syz.3.1234 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 389.703969][T10638] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 389.703980][T10638] Call Trace: [ 389.703986][T10638] [ 389.703993][T10638] dump_stack_lvl+0x16c/0x1f0 [ 389.704022][T10638] should_fail_ex+0x512/0x640 [ 389.704049][T10638] _copy_from_user+0x2e/0xd0 [ 389.704075][T10638] generic_map_delete_batch+0x439/0x700 [ 389.704104][T10638] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 389.704133][T10638] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 389.704157][T10638] bpf_map_do_batch+0x4a6/0x680 [ 389.704180][T10638] __sys_bpf+0x5fc/0x4d80 [ 389.704203][T10638] ? rcu_is_watching+0x12/0xc0 [ 389.704227][T10638] ? __pfx___sys_bpf+0x10/0x10 [ 389.704248][T10638] ? __schedule+0x1181/0x5de0 [ 389.704270][T10638] ? ksys_write+0x190/0x250 [ 389.704314][T10638] ? fput+0x70/0xf0 [ 389.704328][T10638] ? ksys_write+0x1ac/0x250 [ 389.704355][T10638] __x64_sys_bpf+0x78/0xc0 [ 389.704379][T10638] ? lockdep_hardirqs_on+0x7c/0x110 [ 389.704402][T10638] do_syscall_64+0xcd/0x4c0 [ 389.704428][T10638] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 389.704446][T10638] RIP: 0033:0x7f885c78e929 [ 389.704460][T10638] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 389.704477][T10638] RSP: 002b:00007f885a5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 389.704495][T10638] RAX: ffffffffffffffda RBX: 00007f885c9b6160 RCX: 00007f885c78e929 [ 389.704506][T10638] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 389.704517][T10638] RBP: 00007f885a5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 389.704528][T10638] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 389.704538][T10638] R13: 0000000000000000 R14: 00007f885c9b6160 R15: 00007ffc5de19118 [ 389.704562][T10638] [ 389.964332][ T48] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 390.006672][ T48] usb 3-1: device descriptor read/8, error -71 [ 390.121068][ T48] usb usb3-port1: unable to enumerate USB device [ 390.155074][T10646] loop6: detected capacity change from 0 to 7 [ 390.165256][T10646] Dev loop6: unable to read RDB block 7 [ 390.180212][T10646] loop6: unable to read partition table [ 390.200461][T10646] loop6: partition table beyond EOD, truncated [ 390.213601][T10646] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 390.430335][ T10] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 390.978086][ T30] kauditd_printk_skb: 4 callbacks suppressed [ 390.978101][ T30] audit: type=1400 audit(1751984099.329:984): avc: denied { create } for pid=10656 comm="syz.3.1243" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 391.319338][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 64, changing to 10 [ 391.332698][ T10] usb 1-1: New USB device found, idVendor=172f, idProduct=0501, bcdDevice= 0.00 [ 391.360824][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 391.401480][ T10] usb 1-1: config 0 descriptor?? [ 392.063795][T10675] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1246'. [ 392.076031][T10675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 392.085363][T10675] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 393.464701][ T10] waltop 0003:172F:0501.0012: hidraw0: USB HID v1.01 Device [HID 172f:0501] on usb-dummy_hcd.0-1/input0 [ 394.187399][ T30] audit: type=1400 audit(1751984102.539:985): avc: denied { create } for pid=10682 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 394.237712][ T30] audit: type=1400 audit(1751984102.569:986): avc: denied { write } for pid=10682 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 394.258172][ T30] audit: type=1400 audit(1751984102.569:987): avc: denied { nlmsg_write } for pid=10682 comm="syz.4.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 394.291630][ T30] audit: type=1400 audit(1751984102.649:988): avc: denied { getopt } for pid=10684 comm="syz.3.1249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 394.313869][ T10] usb 1-1: USB disconnect, device number 41 [ 395.927948][T10689] syzkaller1: entered promiscuous mode [ 396.380473][T10689] syzkaller1: entered allmulticast mode [ 396.471183][T10700] binder: 10699:10700 ioctl c0306201 2000000003c0 returned -14 [ 396.640144][ T48] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 396.957120][T10711] FAULT_INJECTION: forcing a failure. [ 396.957120][T10711] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 396.970222][T10711] CPU: 0 UID: 0 PID: 10711 Comm: syz.1.1253 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 396.970246][T10711] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 396.970257][T10711] Call Trace: [ 396.970263][T10711] [ 396.970270][T10711] dump_stack_lvl+0x16c/0x1f0 [ 396.970298][T10711] should_fail_ex+0x512/0x640 [ 396.970325][T10711] _copy_from_user+0x2e/0xd0 [ 396.970351][T10711] generic_map_delete_batch+0x439/0x700 [ 396.970380][T10711] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 396.970409][T10711] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 396.970435][T10711] bpf_map_do_batch+0x4a6/0x680 [ 396.970458][T10711] __sys_bpf+0x5fc/0x4d80 [ 396.970485][T10711] ? __pfx___sys_bpf+0x10/0x10 [ 396.970510][T10711] ? ksys_write+0x190/0x250 [ 396.970536][T10711] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 396.970577][T10711] ? fput+0x70/0xf0 [ 396.970593][T10711] ? ksys_write+0x1ac/0x250 [ 396.970614][T10711] ? __pfx_ksys_write+0x10/0x10 [ 396.970640][T10711] __x64_sys_bpf+0x78/0xc0 [ 396.970664][T10711] ? lockdep_hardirqs_on+0x7c/0x110 [ 396.970687][T10711] do_syscall_64+0xcd/0x4c0 [ 396.970714][T10711] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.970732][T10711] RIP: 0033:0x7f840538e929 [ 396.970746][T10711] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 396.970763][T10711] RSP: 002b:00007f84031b4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 396.970780][T10711] RAX: ffffffffffffffda RBX: 00007f84055b6160 RCX: 00007f840538e929 [ 396.970792][T10711] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 396.970802][T10711] RBP: 00007f84031b4090 R08: 0000000000000000 R09: 0000000000000000 [ 396.970813][T10711] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 396.970824][T10711] R13: 0000000000000000 R14: 00007f84055b6160 R15: 00007ffe6e0ef9d8 [ 396.970847][T10711] [ 397.820330][ T48] usb 5-1: Using ep0 maxpacket: 8 [ 399.380095][ T48] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 399.395471][ T48] usb 5-1: New USB device found, idVendor=112a, idProduct=0005, bcdDevice=be.68 [ 399.405036][ T48] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.440184][ T30] audit: type=1400 audit(1751984107.789:989): avc: denied { mounton } for pid=10701 comm="syz.2.1250" path="/syzcgroup/unified/syz2" dev="cgroup2" ino=96 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=dir permissive=1 [ 399.500311][ T48] usb 5-1: Product: syz [ 399.504679][ T48] usb 5-1: Manufacturer: syz [ 399.520785][ T30] audit: type=1400 audit(1751984107.869:990): avc: denied { name_bind } for pid=10716 comm="syz.0.1257" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=udp_socket permissive=1 [ 399.572583][ T48] usb 5-1: SerialNumber: syz [ 399.579714][ T48] usb 5-1: config 0 descriptor?? [ 399.622406][ T48] usb 5-1: can't set config #0, error -71 [ 399.659103][ T48] usb 5-1: USB disconnect, device number 56 [ 399.685832][ T30] audit: type=1400 audit(1751984107.909:991): avc: denied { shutdown } for pid=10718 comm="syz.1.1256" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 400.155398][T10731] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 400.271157][ T5905] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 400.289329][ T30] audit: type=1400 audit(1751984107.909:992): avc: denied { map } for pid=10718 comm="syz.1.1256" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 400.596033][T10734] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 400.600310][ T30] audit: type=1400 audit(1751984107.909:993): avc: denied { execute } for pid=10718 comm="syz.1.1256" path="/dev/zero" dev="devtmpfs" ino=6 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:zero_device_t tclass=chr_file permissive=1 [ 400.654352][ T5905] usb 2-1: New USB device found, idVendor=04f3, idProduct=0755, bcdDevice= 0.00 [ 400.800413][ T5905] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.823158][ T5905] usb 2-1: config 0 descriptor?? [ 401.284884][ T30] audit: type=1400 audit(1751984109.479:994): avc: denied { setopt } for pid=10728 comm="syz.1.1260" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 401.463900][T10743] pim6reg: entered allmulticast mode [ 401.480367][ T5982] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 401.493248][ T5905] usbhid 2-1:0.0: can't add hid device: -71 [ 401.499735][ T5905] usbhid 2-1:0.0: probe with driver usbhid failed with error -71 [ 401.527605][ T5905] usb 2-1: USB disconnect, device number 53 [ 401.620337][ T5982] usb 5-1: device descriptor read/64, error -71 [ 401.662450][ T10] usb 1-1: new low-speed USB device number 42 using dummy_hcd [ 401.800342][ T10] usb 1-1: device descriptor read/64, error -71 [ 401.870456][ T5982] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 401.900291][ T5905] usb 2-1: new full-speed USB device number 54 using dummy_hcd [ 402.051884][ T5905] usb 2-1: config 0 has an invalid interface number: 113 but max is 0 [ 402.063119][ T5905] usb 2-1: config 0 has no interface number 0 [ 402.069236][ T5905] usb 2-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 402.088522][ T5905] usb 2-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 402.098654][ T5905] usb 2-1: config 0 interface 113 has no altsetting 0 [ 402.100876][ T9] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 402.112147][ T5905] usb 2-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 402.113363][ T10] usb 1-1: new low-speed USB device number 43 using dummy_hcd [ 402.129981][ T5982] usb 5-1: device descriptor read/64, error -71 [ 402.136359][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.147573][ T5905] usb 2-1: Product: syz [ 402.151847][ T5905] usb 2-1: Manufacturer: syz [ 402.156437][ T5905] usb 2-1: SerialNumber: syz [ 402.163313][ T5905] usb 2-1: config 0 descriptor?? [ 402.169747][ C1] usb 2-1: NFC: Urb failure (status -71) [ 402.175514][ T5905] usb 2-1: NFC: Unable to get FW version [ 402.288052][T10756] FAULT_INJECTION: forcing a failure. [ 402.288052][T10756] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.301374][T10756] CPU: 0 UID: 0 PID: 10756 Comm: syz.2.1266 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 402.301397][T10756] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 402.301408][T10756] Call Trace: [ 402.301414][T10756] [ 402.301421][T10756] dump_stack_lvl+0x16c/0x1f0 [ 402.301449][T10756] should_fail_ex+0x512/0x640 [ 402.301475][T10756] _copy_from_user+0x2e/0xd0 [ 402.301501][T10756] generic_map_delete_batch+0x439/0x700 [ 402.301529][T10756] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 402.301558][T10756] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 402.301591][T10756] bpf_map_do_batch+0x4a6/0x680 [ 402.301614][T10756] __sys_bpf+0x5fc/0x4d80 [ 402.301636][T10756] ? rcu_is_watching+0x12/0xc0 [ 402.301660][T10756] ? __pfx___sys_bpf+0x10/0x10 [ 402.301682][T10756] ? __schedule+0x1181/0x5de0 [ 402.301703][T10756] ? ksys_write+0x190/0x250 [ 402.301746][T10756] ? fput+0x70/0xf0 [ 402.301762][T10756] ? ksys_write+0x1ac/0x250 [ 402.301789][T10756] __x64_sys_bpf+0x78/0xc0 [ 402.301812][T10756] ? lockdep_hardirqs_on+0x7c/0x110 [ 402.301833][T10756] do_syscall_64+0xcd/0x4c0 [ 402.301859][T10756] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.301877][T10756] RIP: 0033:0x7fc382d8e929 [ 402.301892][T10756] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.301908][T10756] RSP: 002b:00007fc380bd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 402.301925][T10756] RAX: ffffffffffffffda RBX: 00007fc382fb6160 RCX: 00007fc382d8e929 [ 402.301936][T10756] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 402.301947][T10756] RBP: 00007fc380bd5090 R08: 0000000000000000 R09: 0000000000000000 [ 402.301957][T10756] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 402.301967][T10756] R13: 0000000000000000 R14: 00007fc382fb6160 R15: 00007ffe66abd448 [ 402.301991][T10756] [ 402.500649][ T5905] pn533_usb 2-1:0.113: probe with driver pn533_usb failed with error -90 [ 402.509226][ T5982] usb usb5-port1: attempt power cycle [ 402.514817][ T10] usb 1-1: device descriptor read/64, error -71 [ 402.539319][T10750] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1264'. [ 402.548986][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 402.552477][ T48] usb 2-1: USB disconnect, device number 54 [ 402.555450][ T9] usb 4-1: New USB device found, idVendor=041e, idProduct=403c, bcdDevice=cc.d7 [ 402.569097][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.578367][ T9] usb 4-1: config 0 descriptor?? [ 402.585247][ T9] gspca_main: sq930x-2.14.0 probing 041e:403c [ 402.630753][ T10] usb usb1-port1: attempt power cycle [ 402.879380][ T5982] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 402.925935][ T5982] usb 5-1: device descriptor read/8, error -71 [ 402.990562][ T10] usb 1-1: new low-speed USB device number 44 using dummy_hcd [ 403.021303][ T10] usb 1-1: device descriptor read/8, error -71 [ 403.136186][T10760] Invalid ELF section header size [ 403.142779][T10760] netlink: 'syz.2.1267': attribute type 21 has an invalid length. [ 403.150782][T10760] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1267'. [ 403.160096][T10760] netlink: 'syz.2.1267': attribute type 6 has an invalid length. [ 403.167896][T10760] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1267'. [ 403.179173][ T5982] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 403.190800][ T30] audit: type=1400 audit(1751984111.489:995): avc: denied { module_load } for pid=10757 comm="syz.2.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 403.331905][ T5982] usb 5-1: device descriptor read/8, error -71 [ 403.370506][ T10] usb 1-1: new low-speed USB device number 45 using dummy_hcd [ 403.390617][ T12] Bluetooth: (null): Invalid header checksum [ 403.397880][ T12] Bluetooth: (null): Invalid header checksum [ 403.404455][ T12] Bluetooth: (null): Invalid header checksum [ 403.423931][ T10] usb 1-1: device descriptor read/8, error -71 [ 403.465976][ T36] Bluetooth: (null): Invalid header checksum [ 403.492571][ T5982] usb usb5-port1: unable to enumerate USB device [ 403.502947][ T30] audit: type=1400 audit(1751984111.859:996): avc: denied { write } for pid=10751 comm="syz.3.1265" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 403.510880][T10764] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 403.531284][T10764] F2FS-fs (loop3): Can't find valid F2FS filesystem in 1th superblock [ 403.533589][ T30] audit: type=1400 audit(1751984111.859:997): avc: denied { create } for pid=10761 comm="syz.1.1268" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 403.566735][T10764] F2FS-fs (loop3): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 403.576166][T10764] F2FS-fs (loop3): Can't find valid F2FS filesystem in 2th superblock [ 403.613656][ T49] Bluetooth: (null): Invalid header checksum [ 403.617519][ T10] usb usb1-port1: unable to enumerate USB device [ 403.698534][ T49] Bluetooth: (null): Invalid header checksum [ 403.966168][ T30] audit: type=1400 audit(1751984112.319:998): avc: denied { read } for pid=10769 comm="syz.4.1270" name="vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 403.968751][T10770] bridge0: entered promiscuous mode [ 404.011501][T10770] macsec1: entered promiscuous mode [ 404.769925][ T9] gspca_sq930x: ucbus_write failed -110 [ 404.776732][ T9] sq930x 4-1:0.0: probe with driver sq930x failed with error -110 [ 404.791462][T10743] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.803462][T10743] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 404.836062][T10770] bridge0: port 4(macsec1) entered blocking state [ 404.836110][T10770] bridge0: port 4(macsec1) entered disabled state [ 404.836195][T10770] macsec1: entered allmulticast mode [ 404.836205][T10770] bridge0: entered allmulticast mode [ 404.857949][T10770] macsec1: left allmulticast mode [ 404.876308][T10770] bridge0: left allmulticast mode [ 404.880607][ T30] audit: type=1400 audit(1751984112.319:999): avc: denied { open } for pid=10769 comm="syz.4.1270" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 404.912606][T10770] bridge0: left promiscuous mode [ 404.930839][ T30] audit: type=1400 audit(1751984112.349:1000): avc: denied { append } for pid=10769 comm="syz.4.1270" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 404.978883][ T30] audit: type=1400 audit(1751984113.149:1001): avc: denied { setattr } for pid=10761 comm="syz.1.1268" name="file0" dev="tmpfs" ino=1400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 405.001929][ T30] audit: type=1400 audit(1751984113.319:1002): avc: denied { ioctl } for pid=10783 comm="syz.0.1272" path="socket:[28585]" dev="sockfs" ino=28585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 405.034026][T10773] veth0_vlan: entered allmulticast mode [ 405.063764][ T10] usb 4-1: USB disconnect, device number 62 [ 405.220520][ T30] audit: type=1400 audit(1751984113.569:1003): avc: denied { unlink } for pid=5823 comm="syz-executor" name="file0" dev="tmpfs" ino=1400 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 405.342518][ T30] audit: type=1326 audit(1751984113.639:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10800 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f840538e929 code=0x7ffc0000 [ 405.395933][ T30] audit: type=1326 audit(1751984113.639:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10800 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f840538e929 code=0x7ffc0000 [ 405.443555][ T30] audit: type=1326 audit(1751984113.639:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10800 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f840538e929 code=0x7ffc0000 [ 405.467944][ T30] audit: type=1326 audit(1751984113.639:1007): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10800 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f840538e929 code=0x7ffc0000 [ 405.676555][T10810] FAULT_INJECTION: forcing a failure. [ 405.676555][T10810] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 405.689626][T10810] CPU: 0 UID: 0 PID: 10810 Comm: syz.3.1277 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 405.689650][T10810] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 405.689661][T10810] Call Trace: [ 405.689667][T10810] [ 405.689674][T10810] dump_stack_lvl+0x16c/0x1f0 [ 405.689703][T10810] should_fail_ex+0x512/0x640 [ 405.689730][T10810] _copy_from_user+0x2e/0xd0 [ 405.689756][T10810] generic_map_delete_batch+0x439/0x700 [ 405.689786][T10810] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 405.689822][T10810] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 405.689847][T10810] bpf_map_do_batch+0x4a6/0x680 [ 405.689870][T10810] __sys_bpf+0x5fc/0x4d80 [ 405.689897][T10810] ? __pfx___sys_bpf+0x10/0x10 [ 405.689922][T10810] ? ksys_write+0x190/0x250 [ 405.689948][T10810] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 405.689988][T10810] ? fput+0x70/0xf0 [ 405.690004][T10810] ? ksys_write+0x1ac/0x250 [ 405.690024][T10810] ? __pfx_ksys_write+0x10/0x10 [ 405.690051][T10810] __x64_sys_bpf+0x78/0xc0 [ 405.690075][T10810] ? lockdep_hardirqs_on+0x7c/0x110 [ 405.690098][T10810] do_syscall_64+0xcd/0x4c0 [ 405.690125][T10810] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 405.690142][T10810] RIP: 0033:0x7f885c78e929 [ 405.690156][T10810] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 405.690173][T10810] RSP: 002b:00007f885a5d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 405.690190][T10810] RAX: ffffffffffffffda RBX: 00007f885c9b6160 RCX: 00007f885c78e929 [ 405.690202][T10810] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 405.690216][T10810] RBP: 00007f885a5d5090 R08: 0000000000000000 R09: 0000000000000000 [ 405.690226][T10810] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 405.690236][T10810] R13: 0000000000000000 R14: 00007f885c9b6160 R15: 00007ffc5de19118 [ 405.690260][T10810] [ 405.883295][ T9] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 406.600315][ T30] audit: type=1326 audit(1751984113.639:1008): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10800 comm="syz.1.1275" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7f840538e929 code=0x7ffc0000 [ 406.735289][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 406.822000][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 407.187497][ T9] usb 5-1: New USB device found, idVendor=05e1, idProduct=0893, bcdDevice=fd.5b [ 407.197770][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 407.205795][ T9] usb 5-1: Product: syz [ 407.209953][ T9] usb 5-1: Manufacturer: syz [ 407.214589][ T9] usb 5-1: SerialNumber: syz [ 407.221385][ T9] usb 5-1: config 0 descriptor?? [ 407.229782][ T9] gspca_main: stk014-2.14.0 probing 05e1:0893 [ 407.236281][ T9] usb 5-1: selecting invalid altsetting 1 [ 407.515324][T10825] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1283'. [ 407.526098][T10825] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1283'. [ 407.572406][ T48] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 407.661308][T10831] input: syz1 as /devices/virtual/input/input23 [ 407.751944][ T9] gspca_stk014: reg_r err -110 [ 407.756895][ T9] stk014 5-1:0.0: probe with driver stk014 failed with error -110 [ 407.763619][ T48] usb 4-1: too many configurations: 26, using maximum allowed: 8 [ 407.776411][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 407.790006][ T48] usb 4-1: can't read configurations, error -61 [ 407.810292][ T10] usb 1-1: new full-speed USB device number 46 using dummy_hcd [ 407.930998][ T48] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 407.964053][ T10] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 407.978012][ T10] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 407.991939][ T973] usb 5-1: USB disconnect, device number 61 [ 408.002100][ T10] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 408.012417][ T10] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 408.100835][ T48] usb 4-1: too many configurations: 26, using maximum allowed: 8 [ 408.125004][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 408.137766][ T48] usb 4-1: can't read configurations, error -61 [ 408.146339][ T48] usb usb4-port1: attempt power cycle [ 408.229917][ T10] usb 1-1: usb_control_msg returned -32 [ 408.245165][ T9] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 408.285585][ T10] usbtmc 1-1:16.0: can't read capabilities [ 408.307370][ T10] usb 1-1: USB disconnect, device number 46 [ 408.450381][ T9] usb 3-1: Using ep0 maxpacket: 8 [ 408.458450][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 408.469745][ T9] usb 3-1: config 4 interface 0 has no altsetting 0 [ 408.490450][ T48] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 408.583879][T10854] FAULT_INJECTION: forcing a failure. [ 408.583879][T10854] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 408.597014][T10854] CPU: 1 UID: 0 PID: 10854 Comm: syz.0.1289 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 408.597037][T10854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 408.597047][T10854] Call Trace: [ 408.597053][T10854] [ 408.597059][T10854] dump_stack_lvl+0x16c/0x1f0 [ 408.597089][T10854] should_fail_ex+0x512/0x640 [ 408.597115][T10854] _copy_from_user+0x2e/0xd0 [ 408.597140][T10854] generic_map_delete_batch+0x439/0x700 [ 408.597169][T10854] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 408.597197][T10854] ? __pfx_generic_map_delete_batch+0x10/0x10 [ 408.597222][T10854] bpf_map_do_batch+0x4a6/0x680 [ 408.597244][T10854] __sys_bpf+0x5fc/0x4d80 [ 408.597283][T10854] ? __pfx___sys_bpf+0x10/0x10 [ 408.597307][T10854] ? ksys_write+0x190/0x250 [ 408.597334][T10854] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 408.597375][T10854] ? fput+0x70/0xf0 [ 408.597394][T10854] ? ksys_write+0x1ac/0x250 [ 408.597415][T10854] ? __pfx_ksys_write+0x10/0x10 [ 408.597441][T10854] __x64_sys_bpf+0x78/0xc0 [ 408.597464][T10854] ? lockdep_hardirqs_on+0x7c/0x110 [ 408.597486][T10854] do_syscall_64+0xcd/0x4c0 [ 408.597512][T10854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 408.597529][T10854] RIP: 0033:0x7f0c5a98e929 [ 408.597548][T10854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 408.597564][T10854] RSP: 002b:00007f0c587f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 408.597581][T10854] RAX: ffffffffffffffda RBX: 00007f0c5abb6160 RCX: 00007f0c5a98e929 [ 408.597592][T10854] RDX: 0000000000000038 RSI: 0000200000000040 RDI: 000000000000001b [ 408.597602][T10854] RBP: 00007f0c587f6090 R08: 0000000000000000 R09: 0000000000000000 [ 408.597613][T10854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 408.597623][T10854] R13: 0000000000000000 R14: 00007f0c5abb6160 R15: 00007ffc7ae4d5d8 [ 408.597647][T10854] [ 408.897212][ T48] usb 4-1: too many configurations: 26, using maximum allowed: 8 [ 408.907026][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 408.908866][ T9] usb 3-1: string descriptor 0 read error: -22 [ 408.914630][ T48] usb 4-1: can't read configurations, error -61 [ 409.033266][ T9] usb 3-1: New USB device found, idVendor=058f, idProduct=6610, bcdDevice=48.05 [ 409.136846][ T48] usb 4-1: new high-speed USB device number 66 using dummy_hcd [ 409.159036][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 409.403773][ T48] usb 4-1: too many configurations: 26, using maximum allowed: 8 [ 409.652230][ T48] usb 4-1: unable to read config index 0 descriptor/start: -61 [ 409.664561][ T9] usb 3-1: dvb_usb_v2: found a 'Sigmatek DVB-110' in warm state [ 409.676361][ T9] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 409.676464][ T48] usb 4-1: can't read configurations, error -61 [ 409.701899][ T48] usb usb4-port1: unable to enumerate USB device [ 409.731910][ T9] dvbdev: DVB: registering new adapter (Sigmatek DVB-110) [ 409.779737][ T9] usb 3-1: media controller created [ 409.875336][ T9] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 409.964844][T10864] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 409.980789][T10864] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.011460][ T30] kauditd_printk_skb: 75 callbacks suppressed [ 410.011476][ T30] audit: type=1400 audit(1751984118.369:1084): avc: denied { ioctl } for pid=10866 comm="syz.4.1293" path="/dev/vhost-vsock" dev="devtmpfs" ino=1275 ioctlcmd=0xaf01 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:vhost_device_t tclass=chr_file permissive=1 [ 410.115478][ T30] audit: type=1400 audit(1751984118.419:1085): avc: denied { create } for pid=10865 comm="syz.0.1292" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 410.142502][T10874] overlay: Unknown parameter 'euid<00000000000000000000' [ 410.149739][ T30] audit: type=1400 audit(1751984118.489:1086): avc: denied { read } for pid=10865 comm="syz.0.1292" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 410.172929][ T30] audit: type=1400 audit(1751984118.499:1087): avc: denied { ioctl } for pid=10865 comm="syz.0.1292" path="socket:[29780]" dev="sockfs" ino=29780 ioctlcmd=0x620d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 410.351274][ T973] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 410.507562][ T973] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 410.518819][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 410.529126][ T973] usb 5-1: Product: syz [ 410.535253][ T973] usb 5-1: Manufacturer: syz [ 410.540131][ T973] usb 5-1: SerialNumber: syz [ 410.547681][ T973] usb 5-1: config 0 descriptor?? [ 410.557261][ T973] ch341 5-1:0.0: ch341-uart converter detected [ 410.944992][T10842] usb 3-1: dvb_usb_au6610: wlen=0, aborting [ 410.955039][ T9] zl10353_read_register: readreg error (reg=127, ret==0) [ 410.967904][T10883] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 410.986128][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1298'. [ 411.049594][ T9] usb 3-1: USB disconnect, device number 45 [ 411.149099][ T30] audit: type=1400 audit(1751984119.499:1088): avc: denied { read } for pid=10888 comm="syz.0.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 411.338234][ T30] audit: type=1400 audit(1751984119.689:1089): avc: denied { mount } for pid=10894 comm="syz.0.1301" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 411.339893][T10895] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 411.375607][T10895] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 411.400331][ T30] audit: type=1400 audit(1751984119.689:1090): avc: denied { create } for pid=10894 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 411.440441][ T30] audit: type=1400 audit(1751984119.779:1091): avc: denied { bind } for pid=10894 comm="syz.0.1301" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 411.489109][ T30] audit: type=1400 audit(1751984119.779:1092): avc: denied { name_bind } for pid=10894 comm="syz.0.1301" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 411.528582][ T30] audit: type=1400 audit(1751984119.779:1093): avc: denied { node_bind } for pid=10894 comm="syz.0.1301" src=512 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 411.577901][ T973] ch341-uart ttyUSB0: break control not supported, using simulated break [ 411.598033][ T973] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 411.634431][ T973] usb 5-1: USB disconnect, device number 62 [ 411.657437][ T973] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 411.694497][ T973] ch341 5-1:0.0: device disconnected [ 411.716329][T10902] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 411.857183][T10906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 411.876653][T10906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 411.892222][T10906] overlayfs: upperdir is in-use as upperdir/workdir of another mount, mount with '-o index=off' to override exclusive upperdir protection. [ 412.111462][ T5947] usb 4-1: new high-speed USB device number 67 using dummy_hcd [ 412.250389][ T5947] usb 4-1: device descriptor read/64, error -71 [ 412.480514][ T5905] usb 1-1: new full-speed USB device number 47 using dummy_hcd [ 412.590514][ T5947] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 412.695141][ T5905] usb 1-1: config 0 has an invalid interface number: 113 but max is 0 [ 412.745198][ T5905] usb 1-1: config 0 has no interface number 0 [ 412.790438][ T5947] usb 4-1: device descriptor read/64, error -71 [ 412.803765][ T5905] usb 1-1: config 0 interface 113 altsetting 2 has an endpoint descriptor with address 0x14, changing to 0x4 [ 412.889853][ T5905] usb 1-1: config 0 interface 113 altsetting 2 endpoint 0x82 has invalid wMaxPacketSize 0 [ 412.962189][ T5947] usb usb4-port1: attempt power cycle [ 412.971686][ T5905] usb 1-1: config 0 interface 113 has no altsetting 0 [ 413.106780][ T5905] usb 1-1: New USB device found, idVendor=054c, idProduct=02e1, bcdDevice=e2.c8 [ 413.179944][ T5905] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.198127][ T5905] usb 1-1: Product: syz [ 413.221338][ T5905] usb 1-1: Manufacturer: syz [ 413.233712][ T5905] usb 1-1: SerialNumber: syz [ 413.245409][ T5905] usb 1-1: config 0 descriptor?? [ 413.274659][ C1] usb 1-1: NFC: Urb failure (status -71) [ 413.304181][ T5905] usb 1-1: NFC: Unable to get FW version [ 413.310391][ T5905] pn533_usb 1-1:0.113: probe with driver pn533_usb failed with error -90 [ 413.350299][ T5947] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 413.379803][ T5947] usb 4-1: device descriptor read/8, error -71 [ 413.396042][T10948] block nbd4: not configured, cannot reconfigure [ 413.498702][T10927] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1310'. [ 413.514482][ T5905] usb 1-1: USB disconnect, device number 47 [ 413.516802][T10952] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000004: 0000 [#1] SMP KASAN NOPTI [ 413.532525][T10952] KASAN: null-ptr-deref in range [0x0000000000000020-0x0000000000000027] [ 413.540944][T10952] CPU: 0 UID: 0 PID: 10952 Comm: syz.4.1316 Not tainted 6.16.0-rc5-syzkaller #0 PREEMPT(full) [ 413.551276][T10952] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 413.561335][T10952] RIP: 0010:qdisc_tree_reduce_backlog+0x1cb/0x500 [ 413.567767][T10952] Code: 4d 8b 67 18 49 8d 7c 24 08 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 ff 02 00 00 4d 8b 74 24 08 4d 8d 66 20 4c 89 e0 48 c1 e8 03 <80> 3c 18 00 0f 85 1a 03 00 00 49 83 7e 20 00 74 48 e8 7f d0 36 f8 [ 413.587384][T10952] RSP: 0018:ffffc90003327300 EFLAGS: 00010202 [ 413.593456][T10952] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffffc9000ce0a000 [ 413.601425][T10952] RDX: 0000000000080000 RSI: ffffffff898515dc RDI: ffffffff90aa1088 [ 413.609396][T10952] RBP: 00000000000affe0 R08: 0000000000000005 R09: 0000000000000000 [ 413.617372][T10952] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000020 [ 413.620262][ T5947] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 413.625355][T10952] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88805b7fe800 [ 413.625371][T10952] FS: 00007f85bffe26c0(0000) GS:ffff888124718000(0000) knlGS:0000000000000000 [ 413.625388][T10952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 413.650751][ T5947] usb 4-1: device descriptor read/8, error -71 [ 413.656335][T10952] CR2: 000000110c39c1c9 CR3: 000000002a4be000 CR4: 00000000003526f0 [ 413.656351][T10952] DR0: 0000000000000007 DR1: 0000000000004e6a DR2: 0000000000000007 [ 413.656362][T10952] DR3: 00000000000002d5 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 413.686381][T10952] Call Trace: [ 413.689658][T10952] [ 413.692591][T10952] fq_codel_change+0xb1a/0x11b0 [ 413.697452][T10952] ? __pfx_fq_codel_change+0x10/0x10 [ 413.702749][T10952] fq_codel_init+0x4ce/0xa60 [ 413.707345][T10952] ? lockdep_rtnl_is_held+0x26/0x40 [ 413.712552][T10952] ? __pfx_fq_codel_init+0x10/0x10 [ 413.717677][T10952] qdisc_create+0x457/0xfc0 [ 413.722188][T10952] tc_modify_qdisc+0x12bb/0x2130 [ 413.727134][T10952] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 413.732435][T10952] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 413.737730][T10952] rtnetlink_rcv_msg+0x3c9/0xe90 [ 413.742680][T10952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 413.748153][T10952] ? ref_tracker_free+0x37c/0x830 [ 413.753186][T10952] netlink_rcv_skb+0x155/0x420 [ 413.757954][T10952] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 413.763422][T10952] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 413.768716][T10952] ? netlink_deliver_tap+0x1ae/0xd30 [ 413.770489][ T5947] usb usb4-port1: unable to enumerate USB device [ 413.774008][T10952] netlink_unicast+0x53a/0x7f0 [ 413.774031][T10952] ? __pfx_netlink_unicast+0x10/0x10 [ 413.790453][T10952] netlink_sendmsg+0x8d1/0xdd0 [ 413.795224][T10952] ? __pfx_netlink_sendmsg+0x10/0x10 [ 413.800521][T10952] ____sys_sendmsg+0xa95/0xc70 [ 413.805291][T10952] ? copy_msghdr_from_user+0x10a/0x160 [ 413.810757][T10952] ? __pfx_____sys_sendmsg+0x10/0x10 [ 413.816044][T10952] ? try_to_wake_up+0xa2f/0x1680 [ 413.820981][T10952] ___sys_sendmsg+0x134/0x1d0 [ 413.825646][T10952] ? __pfx____sys_sendmsg+0x10/0x10 [ 413.830831][T10952] ? __lock_acquire+0x622/0x1c90 [ 413.835763][T10952] __sys_sendmsg+0x16d/0x220 [ 413.840340][T10952] ? __pfx___sys_sendmsg+0x10/0x10 [ 413.845438][T10952] ? __x64_sys_futex+0x1e0/0x4c0 [ 413.850372][T10952] do_syscall_64+0xcd/0x4c0 [ 413.854866][T10952] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 413.860741][T10952] RIP: 0033:0x7f85bf18e929 [ 413.865141][T10952] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 413.884731][T10952] RSP: 002b:00007f85bffe2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 413.893128][T10952] RAX: ffffffffffffffda RBX: 00007f85bf3b5fa0 RCX: 00007f85bf18e929 [ 413.901081][T10952] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000006 [ 413.909032][T10952] RBP: 00007f85bf210b39 R08: 0000000000000000 R09: 0000000000000000 [ 413.916983][T10952] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 413.924937][T10952] R13: 0000000000000000 R14: 00007f85bf3b5fa0 R15: 00007ffeb77d1b78 [ 413.932908][T10952] [ 413.935916][T10952] Modules linked in: [ 413.939908][T10952] ---[ end trace 0000000000000000 ]--- [ 413.945390][T10952] RIP: 0010:qdisc_tree_reduce_backlog+0x1cb/0x500 [ 413.951833][T10952] Code: 4d 8b 67 18 49 8d 7c 24 08 48 89 f8 48 c1 e8 03 80 3c 18 00 0f 85 ff 02 00 00 4d 8b 74 24 08 4d 8d 66 20 4c 89 e0 48 c1 e8 03 <80> 3c 18 00 0f 85 1a 03 00 00 49 83 7e 20 00 74 48 e8 7f d0 36 f8 [ 413.971466][T10952] RSP: 0018:ffffc90003327300 EFLAGS: 00010202 [ 413.977552][T10952] RAX: 0000000000000004 RBX: dffffc0000000000 RCX: ffffc9000ce0a000 [ 413.985546][T10952] RDX: 0000000000080000 RSI: ffffffff898515dc RDI: ffffffff90aa1088 [ 413.993556][T10952] RBP: 00000000000affe0 R08: 0000000000000005 R09: 0000000000000000 [ 414.001549][T10952] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000020 [ 414.009522][T10952] R13: 0000000000000000 R14: 0000000000000000 R15: ffff88805b7fe800 [ 414.017512][T10952] FS: 00007f85bffe26c0(0000) GS:ffff888124718000(0000) knlGS:0000000000000000 [ 414.026458][T10952] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 414.033053][T10952] CR2: 000000110c39c1c9 CR3: 000000002a4be000 CR4: 00000000003526f0 [ 414.041037][T10952] DR0: 0000000000000007 DR1: 0000000000004e6a DR2: 0000000000000007 [ 414.049003][T10952] DR3: 00000000000002d5 DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 414.056988][T10952] Kernel panic - not syncing: Fatal exception in interrupt [ 414.064362][T10952] Kernel Offset: disabled [ 414.068675][T10952] Rebooting in 86400 seconds..