last executing test programs: 1m29.345070098s ago: executing program 1 (id=1773): madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000400)={r0, 0xffffffffffffffff, 0x11, 0x0, @val=@kprobe_multi=@syms={0x0, 0x4, &(0x7f00000003c0)=[&(0x7f0000000040)=')\'\x00', &(0x7f0000000180)='^\x00', &(0x7f00000001c0)='syz0\x00', &(0x7f0000000280)='GPL\x00'], 0x0, 0x3}}, 0x30) bpf$ITER_CREATE(0x21, &(0x7f0000000440)={r2}, 0x8) msgsnd(0x0, 0x0, 0x0, 0x800) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) syz_open_dev$usbmon(0x0, 0x400, 0x208000) recvmmsg(r3, &(0x7f0000000d80)=[{{0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000500)=""/180, 0xb4}, {&(0x7f00000005c0)=""/128, 0x80}, {&(0x7f0000000640)=""/37, 0x25}, {&(0x7f0000000680)=""/188, 0xbc}, {&(0x7f0000000740)=""/239, 0xef}, {&(0x7f0000000840)=""/50, 0x32}, {&(0x7f0000000880)=""/211, 0xd3}], 0x7, &(0x7f0000000a00)=""/206, 0xce}, 0x1}, {{&(0x7f0000000b40)=@can, 0x80, &(0x7f0000000d00)=[{&(0x7f0000000bc0)=""/13, 0xd}, {&(0x7f0000000c00)=""/225, 0xe1}], 0x2, &(0x7f0000000d40)}, 0x3ff}], 0x2, 0x2, 0x0) r5 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_merged\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) ioctl$IOCTL_VMCI_VERSION2(r5, 0x7a7, &(0x7f00000000c0)=0xa0000) sched_setscheduler(0x0, 0x3, &(0x7f0000000000)=0x6) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) add_key(&(0x7f0000000000)='big_key\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffe) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)=ANY=[@ANYBLOB="1400000010000100000000000000edf734e0ddffcb00000000000a2c000000160a03020000000000000000020000000900010073797a30000000000c0003800800024000000000140000001100010000000000000000000000000a"], 0x54}}, 0x0) 1m28.283949348s ago: executing program 1 (id=1784): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000004c0)={@ipv4={'\x00', '\xff\xff', @private=0xa010101}, @private0, @mcast2, 0x9, 0xd58, 0x3, 0x180, 0x38, 0x85420066}) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x468, 0x0, 0x111, 0x4b4, 0x250, 0x700, 0x398, 0x278, 0x278, 0x398, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast2, @empty, [], [], 'vlan0\x00', 'team_slave_0\x00', {0xff}, {}, 0x88, 0x0, 0x5}, 0x0, 0x230, 0x250, 0x0, {}, [@common=@inet=@multiport={{0x50}, {0xfc}}, @common=@rt={{0x138}, {0x1000, [0xdbe, 0x9], 0x2, 0x2, 0x2, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, @loopback, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @mcast1, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @remote, @private1, @mcast2], 0x5}}]}, @unspec=@NOTRACK={0x20}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1, [], [], 'geneve1\x00', 'bridge_slave_1\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x0, 0xfffffffc}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'syz0\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4c8) r2 = accept$packet(0xffffffffffffffff, &(0x7f0000000540)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000580)=0x14) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet6_SIOCADDRT(r3, 0x890b, &(0x7f00000001c0)={@ipv4={'\x00', '\xff\xff', @local}, @mcast1, @mcast1, 0x800000, 0xa, 0x0, 0x100, 0x7ffffffe, 0x140192}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000005c0)=0x0, &(0x7f0000000600)=0x4) connect$packet(r2, &(0x7f0000000640)={0x11, 0xf8, r4, 0x1, 0x9, 0x6, @random="0329fe1ced21"}, 0x14) 1m28.053254453s ago: executing program 1 (id=1785): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x101040, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000e40)=ANY=[@ANYBLOB="840100001000130400000000fbdbdf250a010100000000000000000000000000ac1414bb00000000000000000000000000000000000000000000000004000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="640101010000000000000000000000000000000032000000ac141444000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ff010800000000000000000000000000000000000000000000000000000000090000000000000000000000000000000000000000000000050000000000000000000000000000000000000000000000000000000a00000000000000000000004c001200726663343130362867636d2861657329290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000006000000048000100626c616b6532732d3136302d61726d0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c814efcc8eaee5997e5a0c74601d8813d45133087a5319cdf31db230569f84541feb77fa48dee28e9e5097be0524cd32c466400c93b2299881498e70"], 0x184}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0xe0, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000240), 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa1, 0x8, 0x0, 0xfffffffffffffffd}}, 0x10) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x7) ioctl$KVM_CAP_DISABLE_QUIRKS(r1, 0x4068aea3, &(0x7f0000000040)={0x74, 0x0, 0x66}) ioctl$KVM_X86_SET_MSR_FILTER(r1, 0x4188aec6, &(0x7f0000000c80)={0x0, [{0x1, 0x248, 0x5, &(0x7f0000000100)="d2312dfc1632c2a1d57d795fe87d01723b58ee78ab4296f8da8957542cc19bd05c085256324b9a06e35824bf384c944915c76341af781f517baf28dd3379d8ef756705172fb7ea1804"}, {0x2, 0xf0, 0x2, &(0x7f0000000200)="c6f27f5d3b42b2f8feb9b79fa9f792d0481ff987b318558c737d2299accc"}, {0x2, 0x1a0, 0x7, &(0x7f0000000240)="0ed6e84915d5c2c2874a973a784b3796224eed306cfb700ea26c9ea83386ae0fb32497952c1f3751699ff2fa8efd8a77786ff1ad"}, {0x2, 0x728, 0x71, &(0x7f0000000280)="adace4448e1ba5d6d7764e12939387e91485d88beb33e616454909af507298629b7a80142a09e7d2e015c1e9a67c65f8a7a48d7b5fd6ff0f799d2b483600b53996be10791261d7d59f1cb86168d40339c4f2128a38b1595db1c365b743f34a779fcd796f0ee401da69c16e4712478f8ed98256ee6ecf5baf5cb3b59f1087ddd028071748ea96147dddc2df282daf83fdc9845a9f3ed0d8a003814ffa76a1ce45fd16b0675bb62c33ac25af4eedde4f976e702d327b007cb0292014b07c4c1be46117d744f40e84d91fea44c75177e95f85b4a174ba674c39c439fe095f25ea5c3723e1ba9d"}, {0x1, 0x0, 0x3, 0x0}, {0x0, 0x538, 0x10000, &(0x7f00000004c0)="a97406ecf60819dc8a052eb5b202bd3916d07b9aa7db889ba3ebd0a16d7c89284fe7fbb6a4c199b7a63b23293ae77e0d4ce298e92598712e77a5e1e94be4d8c8b2cc5f05addcca0326afe0d10a18e860cad8295fbd8d7523789f9e522d5ae527eada1df23f4ce36567d52e4419eb4cb2f7cef5dbef23a32788c0c7fbe54e0defe74f57692430cb1b6becb0983c15c50a6d799c77136a7d1d689403af7498cc616519894d0c7c1a"}, {0x2, 0x530, 0x0, &(0x7f00000005c0)="6315663cea8900c13124438af042f01f153a1d41b52e6443cc90124dea2ac4006297d75edaa0b69611682ff0e53c80c988852b1f0a1318031d6ef839516ffcac33f0dc7d18bd12681e486c572c36275f3b9d81d1b32c4655a3b231118decca6965d2c6263a4a909a6e4aa705c20ff291693696b32728788551a1917d52dbd7150fbbe348a047fa400063b0e4b3a67b42158778fa1b419fb1639f5f6caf45caad8418a35564a7"}, {0x0, 0x558, 0x5f18, &(0x7f0000000680)="ca0cc09045d3ca2f4ffe25cf227d68a47ef3370eadf4bb04457e31d8b03079f975a623410649baba6a613e4ce2458793b1bc1fe0ab5c76bf2823e855f3abd1f94138eea0a8e665070467acc567842366489d5eca1b5de19b7306972cd7bc6f753b10a84acbbd90d4812eed4d49b525f92df75e0179033a744541d7d495aa95aef62eeab1987303b448519b7cacc079421aba34be55eaeb241258c28b359fb35e669103a0972b5cec69231e"}, {0x2, 0x458, 0x2, &(0x7f0000000740)="d8c1717eaf502c69ff439d2c84bed63daa996df2d1399ff8cae602dbc9e0654d917cd7a8728983c47034287e71fdc74c8fa0db86b5ef9ffd2aea963b6811380e4b778a4f1bca054578d4c132ab3fd76b3165bad6e3e24c695feeea2bfab5096cf1641b06e2d079ac3850faf9a7b3d33b5a21fc535801b93da108901338a20ac2ca627cae61f27f62555bf5"}, {0x3, 0x0, 0x2, 0x0}, {0x2, 0x628, 0xa, &(0x7f0000000840)="dab64d2f594333ed17c03e5b409a8696a29d84044a953b5848dd89f1e2ff10abcc1d6afa5607331f9811db4db8fbe755fb141b5061fac46cb3268a47952c8e7d94d69d34eeabca3e5c57691be552ce9cc74df6fe0277b04a5076561495dfe71f69386d4fcafc9b9b518a0b0bc5efb08f7ba84d90e182001fff4e831773ec38b4aade5a594e7e6fa8744e744258ee04a8ef7fe8e7d46f4f7b2003c599490c9fa66a6fa8b6e1f2fcbc2a1e92464ed52c3603a496c9455ed736ab260e9e36679477d69b814659"}, {0x2, 0x0, 0xb3, 0x0}, {0x4, 0x0, 0x4, &(0x7f0000000a40)}, {0x3, 0x310, 0x3, &(0x7f0000000ac0)="27b19904858ebd0a06e3725a5c8285bbbca61f1f121c310d829384bf25854a310d2264b22c83029f48d9e2ffbd02eca175ad6f95e7ca0ccf1cd066731626aa8dc2db9452b42db64dc77fd3c43bdf4b8e07ffba6ee3954a14ed009feafa3d370abff9"}, {0x0, 0x1d0, 0x96bf, &(0x7f0000000b40)="0b6d7ae3bd3b1023decf8287c7f0ab170c48433a45bb169e19626d91d4b086e96c4f315fe276513be2d4ce2b4ac67fdbe6b5078b09a2f996c214"}, {0x1, 0x0, 0x80000000, 0x0}]}) 1m27.149208711s ago: executing program 1 (id=1788): pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="1500000065ffff017f000e0800395032303030"], 0x15) r2 = dup(r1) open(&(0x7f0000000100)='./file0\x00', 0x440, 0x0) write$FUSE_BMAP(r2, &(0x7f0000000000)={0x18, 0x0, 0x0, {0x3b9}}, 0x18) write$FUSE_INIT(r2, &(0x7f0000000200)={0x50, 0x0, 0x0, {0x7, 0x2b, 0x0, 0x8004000, 0x7, 0x8, 0x8000, 0x4, 0x0, 0x0, 0x10, 0x5}}, 0x50) write$FUSE_GETXATTR(r2, &(0x7f00000000c0)={0x18}, 0x18) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000180)=@generic={&(0x7f0000000140)='./file0\x00', 0x0, 0x8}, 0x18) write$FUSE_DIRENTPLUS(r2, &(0x7f00000005c0)=ANY=[@ANYBLOB="b9"], 0xb8) mount$9p_fd(0x0, &(0x7f0000000400)='./file0\x00', &(0x7f0000000080), 0x1010412, &(0x7f0000000700)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r2}}) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r3, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, 0x0, 0x41) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x40042, 0x1) 1m27.048075828s ago: executing program 1 (id=1791): ioctl$sock_SIOCGIFCONF(0xffffffffffffffff, 0x8912, &(0x7f0000000200)=@buf) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$radio(&(0x7f00000003c0), 0x2, 0x2) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xa, 0x20000000ec071, 0xffffffffffffffff, 0xbf527000) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000940)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$FIBMAP(r2, 0x1, &(0x7f0000000480)=0x79757f35) accept$alg(r1, 0x0, 0x0) r3 = syz_io_uring_setup(0x494, &(0x7f0000000200)={0x0, 0x36f1, 0x400, 0x1, 0x381}, &(0x7f0000000040)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r4, r5, &(0x7f00000002c0)=@IORING_OP_WRITEV={0x2, 0x0, 0x0, @fd_index=0x4, 0x0, 0x0}) io_uring_enter(r3, 0x26c8, 0x0, 0x1, 0x0, 0x10) read(r0, &(0x7f0000000080)=""/116, 0xfffffeb2) prlimit64(0x0, 0xe, 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000140), 0x100, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) r7 = syz_io_uring_setup(0x6aab, &(0x7f0000000240)={0x0, 0x9eff, 0x8, 0x1, 0x2ad}, &(0x7f00000001c0), &(0x7f0000000300)) r8 = syz_io_uring_setup(0x49a, &(0x7f0000000400)={0x0, 0x79af, 0x3180, 0x8000, 0x400246, 0x0, r7}, &(0x7f0000000340)=0x0, &(0x7f0000000380)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f00000000c0)=0xffb, 0x0, 0x4) syz_io_uring_submit(r9, r10, &(0x7f00000002c0)=@IORING_OP_SHUTDOWN={0x22, 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x1}) futex(&(0x7f0000000000)=0x1, 0x0, 0x2, &(0x7f0000000040)={0x77359400}, &(0x7f0000000100)=0x1, 0x2) io_uring_enter(r8, 0x4c6e, 0xc67a, 0x8, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000400000/0xc00000)=nil, 0xc00000, 0x3000002, 0x1d031, 0xffffffffffffffff, 0x0) 1m25.948465297s ago: executing program 1 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0xa7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0x8, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xf2c6}, @TCA_CAKE_RTT={0x8, 0x7, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x5c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$packet(r5, &(0x7f00000000c0)={0x11, 0xfa, r10, 0x1, 0x0, 0x6, @random="49412702b95f"}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=@newtfilter={0xe8, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb8, 0x2, [@TCA_CGROUP_EMATCHES={0xb4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xa4, 0x2, 0x0, 0x0, {{0x80, 0x0, 0x2}, "a3ddd075c38ebc620215c13577bfbd377d245d8a25b6781a8f0d9677544fbe156201d0067e8b77308f0829a755f6a5f3f671a7faf2bbffc280cf9d5345826815235c4e175efa3dbdb2de4baf698b1fec1b2aa7bd8739a0fb89ca6009b6a5ce116d0239be31d66eb74edcad63805a369062461e91dd93cf210704f90e0294cf5eec1b84d6623958acf342d5e54fca0457d754228004"}}]}]}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40010) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 1m25.647415997s ago: executing program 32 (id=1795): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000140)=0x15) ioctl$TIOCSTI(r0, 0x5412, &(0x7f00000002c0)=0x7e) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000300)=0x7d) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000040)=0x9) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbee2, 0x30, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x1, 0x0, 0x4e24}, 0xa7) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) socket$inet6_tcp(0xa, 0x1, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x5c, 0x24, 0x8, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0x6}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x2c, 0x2, [@TCA_CAKE_ACK_FILTER={0x8}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0xf2c6}, @TCA_CAKE_RTT={0x8, 0x7, 0x1}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x7}, @TCA_CAKE_ACK_FILTER={0x8, 0x10, 0x2}]}}]}, 0x5c}}, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=@newtfilter={0x94, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x5, 0xfff3}, {}, {0x7, 0xffff}}, [@filter_kind_options=@f_matchall={{0xd}, {0x60, 0x2, [@TCA_MATCHALL_ACT={0x54, 0x2, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6fe2}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0xb380, 0x4, 0x0, 0x100d87, 0x6}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}, @TCA_MATCHALL_FLAGS={0x8, 0x3, 0x2}]}}]}, 0x94}, 0x1, 0x0, 0x0, 0x10}, 0x0) bind$packet(r5, &(0x7f00000000c0)={0x11, 0xfa, r10, 0x1, 0x0, 0x6, @random="49412702b95f"}, 0x14) sendmsg$nl_route_sched(r5, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000005c0)=@newtfilter={0xe8, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xb8, 0x2, [@TCA_CGROUP_EMATCHES={0xb4, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0xa8, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0xa4, 0x2, 0x0, 0x0, {{0x80, 0x0, 0x2}, "a3ddd075c38ebc620215c13577bfbd377d245d8a25b6781a8f0d9677544fbe156201d0067e8b77308f0829a755f6a5f3f671a7faf2bbffc280cf9d5345826815235c4e175efa3dbdb2de4baf698b1fec1b2aa7bd8739a0fb89ca6009b6a5ce116d0239be31d66eb74edcad63805a369062461e91dd93cf210704f90e0294cf5eec1b84d6623958acf342d5e54fca0457d754228004"}}]}]}]}}]}, 0xe8}, 0x1, 0x0, 0x0, 0x80}, 0x40010) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) 18.518277532s ago: executing program 4 (id=2058): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/pids.max\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000000), 0x12) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x5, 0x10}, &(0x7f0000000100)=0xc) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, &(0x7f0000000140)={r2, 0x4, 0x2}, 0x8) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp_SCTP_AUTH_KEY(r0, 0x84, 0x17, &(0x7f0000000040)=ANY=[@ANYBLOB="6ecb3ddcca59f6044b94d95a0f070fcc75836bb97e0080791c579bc2efc6a4e58e7f6686eb58d5b67956d2dc2db3ce108c0b47194800fafb13e6b0b865bf74b366d0104e845e318c7633c0b11a6776fdb9fc4677b3f453fdc3554e78f7aabc3d1cda94127f54db75cbca417a5abadf04457fe37ab7f967ba5fc4c8d8d78b049f5b8c9857d1971950d5f3f9a867b648", @ANYRESHEX=r3], 0x9) 18.267330065s ago: executing program 4 (id=2062): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_NODELAY(r0, 0x84, 0x3, &(0x7f0000000000)=0x7, 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) fcntl$getown(r3, 0x9) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x40000}, 0x50) socketpair$unix(0x1, 0x2, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000340)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x2d) openat$dir(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x140, 0x0) fanotify_init(0x4, 0x101801) open(&(0x7f0000000000)='./file0\x00', 0x40, 0x14) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f00000000c0)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) recvmmsg(r6, &(0x7f0000005200)=[{{0x0, 0x0, 0x0}, 0x88b1}], 0x1, 0x40000120, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x40, &(0x7f0000000200)=0x4, 0x4) write$bt_hci(r6, &(0x7f0000000200)=ANY=[], 0x6) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) socket$kcm(0x10, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) 16.099416286s ago: executing program 4 (id=2067): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYRES32=r2, @ANYBLOB="14002d80040000008a"], 0x30}}, 0x0) 15.216843884s ago: executing program 4 (id=2071): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) bpf$PROG_BIND_MAP(0x23, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff7d) fanotify_mark(0xffffffffffffffff, 0x90, 0x40100000, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000003c0)=ANY=[@ANYRESDEC=r0, @ANYBLOB="0000000000001000b7080000000400007b8af8ff00000000bfa2000000000000070008000000b70400000000000085000000010000009527b3e733be"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2663}, 0x11) socket$netlink(0x10, 0x3, 0x0) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000000), 0x4) sendmmsg(r2, 0x0, 0xfffffffffffffd40, 0x24000007) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0xa8442, 0x0) write$binfmt_elf64(0xffffffffffffffff, 0x0, 0x7c8) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000001080)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller0\x00'}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x100) ioctl$TIOCGSID(0xffffffffffffffff, 0x5429, 0x0) accept4$packet(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000340)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}]}}]}, 0x3c}}, 0x0) 9.468212586s ago: executing program 3 (id=2101): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42072, 0xffffffffffffffff, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x26e1, 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000000200)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYBLOB="2c726f6f746d6f64653d3030303003000000303030303b30303008003638303030af757365725f697b3d", @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0, @ANYBLOB=',\x00']) lgetxattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000100)=@known='system.posix_acl_default\x00', 0x0, 0xa1ff) syz_fuse_handle_req(r1, &(0x7f00000021c0), 0x2000, &(0x7f00000041c0)={&(0x7f0000004280)={0x50}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) read$FUSE(r1, &(0x7f0000006400)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_DIRENTPLUS(r1, &(0x7f00000005c0)={0x10, 0x0, r2}, 0x10) mq_notify(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x37, 0x1}) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000140)={@link_local, @local, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @dev, @dev={0xac, 0x14, 0x14, 0xff}}}}}}, 0x0) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) r3 = openat(0xffffffffffffff9c, 0x0, 0x200000, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0x0, 0x0}, 0x10) r4 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_SNAP_CREATE(r3, 0x50009401, &(0x7f00000007c0)={{r3}, "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"}) ioctl$sock_netrom_SIOCADDRT(r4, 0x61d8, 0x0) socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004300)=@newtfilter={0x16d8, 0x2c, 0x4, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {0xfff3, 0xc}, {0x8, 0xfff3}, {0x5, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x10, 0xfc}}, @TCA_RATE={0x6, 0x5, {0x99, 0x43}}, @filter_kind_options=@f_flow={{0x9}, {0x1690, 0x2, [@TCA_FLOW_POLICE={0x410, 0xa, 0x0, 0x1, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x7fffffff, 0x6, 0x2, 0xfff, 0x38, 0x1, 0x1, 0x4, 0x3, 0xd, 0x5dcf, 0x8, 0x8000, 0xe000, 0x8, 0xa, 0x5, 0x1, 0xa, 0x7, 0xba5, 0x4, 0xff, 0x8001, 0x0, 0x8, 0x78, 0x1, 0x57, 0x4, 0x9, 0x4, 0x7, 0x9, 0x664, 0xffffcb5f, 0x3, 0x8, 0x3ff, 0x1ff, 0x10001, 0x4, 0x7, 0x3, 0x3, 0x4ae3, 0xff, 0x6, 0xc52, 0x7, 0xeed, 0x14b, 0x1, 0xedd9, 0xd, 0xffff0000, 0x7122, 0x7e9e, 0xfffffc0d, 0x5, 0x3, 0x1, 0x2, 0x3, 0x4, 0xfffffffd, 0x75d3, 0xa, 0x0, 0x67e, 0x0, 0x7fff, 0x5, 0x6, 0x2b17, 0xff, 0x3, 0x10000000, 0x8, 0x2, 0xcf3, 0x1, 0x2, 0x0, 0xf, 0x1, 0x3a, 0x3ff, 0x2, 0x7, 0xd, 0x4, 0x7, 0x3, 0x1, 0x8, 0x9, 0x48, 0x5, 0xebd, 0x8b06, 0x5, 0x5, 0x5, 0x0, 0x7, 0x7, 0x0, 0x7, 0xc, 0x6, 0x15c, 0x4, 0xe, 0x0, 0xb1d, 0x8, 0x1, 0x8, 0x6, 0xe, 0x3974, 0x8, 0x193, 0x1, 0x5, 0x8, 0x0, 0x0, 0x9, 0x7fff, 0x0, 0x0, 0x8000, 0x5, 0x9, 0x3, 0x6, 0x7, 0x7, 0x0, 0x4, 0x2, 0x9, 0x7, 0x6236f6e4, 0x6, 0x2, 0x7, 0x6, 0x4, 0x1e62, 0x81, 0xfffffffd, 0x6, 0x5, 0x8, 0x9, 0x5, 0x7fff, 0x5, 0x10, 0x4, 0x6, 0x2, 0x0, 0xac, 0xc4, 0x0, 0x6, 0x2, 0xe0000, 0x8, 0xffff, 0x8, 0x7, 0x6, 0x2ba5, 0x4, 0xb1d, 0x8, 0x7, 0x1, 0x4, 0x6, 0x7ff, 0x1ff, 0x101, 0x2, 0x3, 0x6, 0x8, 0x0, 0x0, 0xe, 0x9, 0x401, 0x9, 0x3a0b, 0x202, 0x6, 0x6, 0x1, 0x10, 0xe, 0x3, 0x0, 0x5, 0x7, 0x90, 0x6, 0x80, 0xf9c0, 0xfffffffc, 0x0, 0x7fffffff, 0x3d000, 0xa, 0x5, 0x10001, 0x7ff, 0x3, 0x10, 0x5, 0x1ff, 0x9, 0x29ad3863, 0xf812, 0x8, 0x91d2, 0x9, 0x418, 0x100, 0x0, 0x3, 0x400, 0x4, 0x400, 0x6, 0x5ec, 0x10, 0x6, 0x3, 0x9, 0x8, 0x8000, 0x9, 0x5, 0x0, 0x3, 0x5, 0x5, 0x5004add0, 0xd8f, 0x9, 0x10000]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x101}]}, @TCA_FLOW_EMATCHES={0x127c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x1108, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x100c, 0x3, 0x0, 0x0, {{0x4, 0x0, 0xd02}, "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"}}, @TCF_EM_CONTAINER={0xe4, 0x2, 0x0, 0x0, {{0x7, 0x0, 0x2d79}, "82272e06acff20d3fce653d8a0325ee4a51eed014c8ffdf8231aba84bce1b920829d093c8236b682eb0696dd444227413b83bfd8f03122a9060d2e177079f8b52fa74bef5fe23f107ba6b03e27ae24beaa3c6fd17f43b5e0ecae4b8218f723d9267fd3989128e7cbe98a75db85d000a9397fffd0b75fdffcd62cd357fdb60914ceab5aa985b862bd5ee77e47d1bc1ed52350d46f5052e8544b2169e4c9574fffd168740a4f3fdc8408e5916cecc28e2b311a4ea4516bba317b6c617725d6e30fa8540f3fcda64439151ea3bb7c3d5e984f16fe1ab13a461a"}}, @TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x80}, {{0x3, 0x1, 0x1, 0x1}, {0x1, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_LIST={0x160, 0x2, 0x0, 0x1, [@TCF_EM_CONTAINER={0x20, 0x3, 0x0, 0x0, {{0x5, 0x0, 0x8000}, "e0fddd9913a2e5336baf2d794c42845a34"}}, @TCF_EM_IPT={0x2c, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x6}, [@TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}, @TCA_EM_IPT_MATCH_NAME={0xb}]}}, @TCF_EM_IPSET={0x10, 0x3, 0x0, 0x0, {{0x1, 0x8, 0x5}, {0x3, 0x0, 0x5}}}, @TCF_EM_CONTAINER={0x5c, 0x3, 0x0, 0x0, {{0xfff, 0x0, 0x80}, "6c17c9c09c81799635923c3668f92ddb4201f447f7407427c89d09f9295f34fff6c626b4738c57655b5de85ab042b126a3fb0e64c630e6ff7223c6b79bf06285bd4091f6a938740900c68f5caa00"}}, @TCF_EM_CONTAINER={0x14, 0x1, 0x0, 0x0, {{0x0, 0x0, 0xe73}, "310a670e23cbbb"}}, @TCF_EM_CONTAINER={0x90, 0x1, 0x0, 0x0, {{0x4, 0x0, 0x4}, "bc70304567471b9bda86d1a335b85c5112d5e14dbc139fa22ae626dba2720d0ffbac5de43e2a263d7c484b98b54c0a719a1434ea3a62ec39274dc46775abc9fa710aa6f0c7ada2db61dd7904b8fde556be2175007505c6593cf665c740199ef2236a0036e30d7eb25375f63642ab206a8f466eb1742bb5d97efd20c4ca14462f70"}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}, @TCA_CHAIN={0x8, 0xb, 0xfa2}]}, 0x16d8}, 0x1, 0x0, 0x0, 0x8001}, 0x20008851) getpeername$packet(r4, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000300)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r4, 0x89f2, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x8, 0x8000, 0xa19, 0x0, {{0x1d, 0x4, 0x0, 0x6, 0x74, 0x64, 0x0, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x19}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@generic={0x94, 0x12, "78930bbef96b1e159eb4790eb8ea491f"}, @end, @ssrr={0x89, 0x7, 0xac, [@initdev={0xac, 0x1e, 0x1, 0x0}]}, @rr={0x7, 0x13, 0x4e, [@dev={0xac, 0x14, 0x14, 0x33}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x36}, @loopback]}, @timestamp_prespec={0x44, 0x14, 0x23, 0x3, 0x3, [{@empty, 0xd}, {@remote, 0x3}]}, @generic={0x83, 0x4, "071b"}, @timestamp={0x44, 0x18, 0x67, 0x0, 0x4, [0x5, 0x2, 0x800, 0x6, 0x0]}]}}}}}) getpeername$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000480)=0x14) mbind(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0xc000, 0x0, 0x81, 0x4) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000500)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000004c0)={&(0x7f00000017c0)={0x4f8, 0x0, 0x0, 0x70bd2a, 0x25dfdbfe, {}, [{{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0x250, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xcb}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r5}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}]}}, {{0x8, 0x1, r7}, {0x4}}, {{0x8}, {0x234, 0x2, 0x0, 0x1, [{0x44, 0x1, @name={{0x24}, {0x5}, {0x11, 0x4, 'activebackup\x00'}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x10000}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xe, 0x4, 'broadcast\x00'}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xf43}}, {0x8}}}]}}]}, 0x4f8}, 0x1, 0x0, 0x0, 0x1}, 0x20048041) 8.876371239s ago: executing program 5 (id=2103): creat(&(0x7f0000000540)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000140), 0x42, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x10, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=000000000100000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r0, &(0x7f0000006340)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r0, &(0x7f0000000040)={0x50, 0x0, r1, {0x7, 0x1f, 0x1, 0xc18da8, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x10}}, 0x50) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x5c831, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f00000014c0)) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x4}) r3 = openat$null(0xffffffffffffff9c, &(0x7f0000000000), 0x404100, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f000001aa40)=""/102400, 0x19000) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r6 = shmget$private(0x0, 0x9000, 0x4, &(0x7f0000ff7000/0x9000)=nil) r7 = shmget$private(0x0, 0x1000, 0x80, &(0x7f0000ffe000/0x1000)=nil) ioctl$SG_BLKSECTGET(0xffffffffffffffff, 0x1267, &(0x7f00000000c0)) shmat(r7, &(0x7f0000ff9000/0x1000)=nil, 0x5000) shmctl$SHM_INFO(r6, 0xe, &(0x7f0000000040)=""/5) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) ioctl$SCSI_IOCTL_GET_BUS_NUMBER(r3, 0x5386, &(0x7f0000000080)) 8.816493843s ago: executing program 2 (id=2105): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setregid(0xee00, 0xffffffffffffffff) r0 = syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f00000000c0)='task\x00') fchdir(r1) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0xffc0, 0x9}, 0x48) r2 = syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x3, 0x1bd}, &(0x7f00000003c0)=0x0, &(0x7f0000000140)=0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.events\x00', 0x275a, 0x0) write$UHID_CREATE2(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB='-'], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r5, 0x0) syz_io_uring_submit(r3, r4, &(0x7f0000000000)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r2, 0x2d3e, 0x0, 0x0, 0x0, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x1000001, 0x0) syz_open_procfs(r0, &(0x7f0000000240)='fdinfo\x00') r6 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r7 = dup(r6) write$6lowpan_enable(r7, &(0x7f0000000000)='0', 0xfffffd2c) r8 = syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10000, 0x3, 0x80000003, 0x0, r7}, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x24000, 0x0) sendmsg$NL80211_CMD_SET_MPATH(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c00000077097c59c4a7949e076c85fb45feb38ddbe992a98393990a1b6da423dd3d0a2be92bd5360a4db9ca6c0e711921a59aa6eadfbe815c7b1f634f21e0bb0e5c626c1794c61ee6cfe08fef42d502bdee7e03da4c49a3225d4963438adfb854fb3916988a8483cf1adf22b58293d27423581e6ba29e4034163b70110a4227f8f62789", @ANYRES16=0x0, @ANYBLOB="200028bd7000ffdbdf251600000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10000800}, 0x10) r11 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x42202) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(r11, 0xc08c5332, &(0x7f0000000280)={0x0, 0x0, 0x0, 'queue1\x00'}) write$sndseq(r11, &(0x7f0000000000)=[{0x84, 0x77, 0x0, 0x0, @tick, {}, {}, @raw32}], 0xffc8) ioctl$SNDRV_SEQ_IOCTL_REMOVE_EVENTS(r11, 0x4040534e, &(0x7f0000000040)={0x323, @tick=0x65757100}) syz_io_uring_submit(r9, r10, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r6, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r8, 0x2ded, 0xef93, 0x0, 0x0, 0x0) pipe(&(0x7f0000000000)={0xffffffffffffffff}) vmsplice(r12, &(0x7f0000000180)=[{&(0x7f0000000080)="a1", 0x1}], 0x1, 0x8) 8.665894709s ago: executing program 3 (id=2106): r0 = mq_open(&(0x7f00005a1ffb)='eth0\x00', 0x42, 0x0, 0x0) mq_notify(r0, &(0x7f00000000c0)={0x0, 0xc, 0x0, @thr={0x0, 0x0}}) readv(r0, &(0x7f0000000340), 0x0) readv(r0, &(0x7f0000000000)=[{&(0x7f0000000100)=""/251}], 0x59) r1 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r1, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) ioctl$sock_SIOCOUTQNSD(r1, 0x894b, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_ACTIVATE(r4, 0x4b63, 0x10000000000004) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './cgroup\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket(0xf, 0x80000, 0x0) setsockopt$SO_RDS_TRANSPORT(r7, 0x114, 0x8, &(0x7f00000008c0), 0x4) close(r7) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) r9 = openat$selinux_create(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$selinux_create(r9, &(0x7f00000002c0)=@objname={'system_u:object_r:wtmp_t:s0', 0x20, 'system_u:system_r:kernel_t:s0', 0x20, 0x6, 0x20, './file0\x00'}, 0x57) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000500)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010025bd7000ffdbdd253b00000008000300", @ANYRES32=r10, @ANYBLOB="2e003300d0980700ffffffffffff080211000001505050505050020004000ec1030200c82800bd06ad02110000010000"], 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x44050) syz_usb_connect(0x0, 0x34, &(0x7f0000000940)=ANY=[@ANYBLOB="12010000a6ff0540cdabeecdb9050000000109022200010000000009049c0001010351000905fd12"], 0x0) 6.972670033s ago: executing program 2 (id=2108): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, 0x0) r1 = memfd_secret(0x0) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @local}, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000)={0x1d, r2}, 0x10) setsockopt$CAN_RAW_FILTER(0xffffffffffffffff, 0x65, 0x1, &(0x7f00000000c0), 0xf00) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0xffffffffffffffa1, 0x0, 0x1, 0x0, 0x0, 0xc000}, 0x4008812) openat$6lowpan_control(0xffffffffffffff9c, 0x0, 0x2, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000800)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x28, 0x3a, 0x0, @remote, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @remote, @loopback}}}}}}, 0x0) mount(&(0x7f00000000c0)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='.\x00', &(0x7f0000000000)='minix\x00', 0x10002, 0x0) r7 = syz_open_dev$video4linux(&(0x7f0000000080), 0xe97, 0x0) ioctl$VIDIOC_SUBDEV_S_CROP(r7, 0xc038563c, &(0x7f00000005c0)={0x0, 0x2000000, {0x8, 0xfffffffd, 0xfffff1b4, 0x3}}) 6.955293412s ago: executing program 5 (id=2109): r0 = fcntl$dupfd(0xffffffffffffffff, 0x406, 0xffffffffffffffff) ioctl$SNDRV_PCM_IOCTL_HW_FREE(r0, 0x4112, 0x0) syz_usb_connect(0x2, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001173a6140f41515006ed10102030109022400013600a0000904"], 0x0) 5.692561335s ago: executing program 2 (id=2110): r0 = syz_open_dev$tty1(0xc, 0x4, 0x4) r1 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x400000000008d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r6, 0x30d, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x4440}, 0x4c006) r7 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)='ns/pid_for_children\x00') bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000b7030000000000008500000026000000b70000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x3, 0x8, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000000000000000000000000000018020000", @ANYRES32=r7], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xc, 0x8, &(0x7f0000000d80)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r8, 0x0, 0xcc0, 0x0, &(0x7f0000000340)="c1dfb080cd21d308098ee6889900", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r1, &(0x7f0000000040)) write$UHID_INPUT(r0, 0x0, 0x0) 5.571375982s ago: executing program 3 (id=2111): socketpair$unix(0x1, 0x5, 0x0, 0x0) syz_io_uring_setup(0x4000497, &(0x7f0000000480)={0x0, 0x7077, 0x0, 0x0, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setresuid(0x0, 0x0, 0x0) socket$inet6(0xa, 0x80003, 0xff) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8000}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000400)="9edf316153999dacbc1cfbb973a6a010c0d4158aef14eea5794e912245e03bf1889ec1f8eb5cd31b85fb600d4c48be0cd2db58e4323f1a25b17bc79c2dc0bf635edf5ca6a3a3786e930a22fe82446e4c759e483ad1e525ea69685ce804464b843b6cebed0054c1d4fc05f60c", 0x6c, 0x10, 0x0, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x20042, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = dup(r4) ioctl$KVM_CREATE_GUEST_MEMFD(r5, 0xc040aed4, &(0x7f00000001c0)={0x140000000, 0x8000000000000001}) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r6, &(0x7f0000019680)=""/102392, 0x18ff8) setpriority(0x2, 0x0, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2, 0x0, 0x3}, 0x18) r7 = io_uring_setup(0x5053, &(0x7f0000000140)={0x0, 0xfffffffc, 0x1000, 0x0, 0x23b}) r8 = socket(0x10, 0x4, 0x2) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="180f0200feff0000000007000000000000000000", @ANYRES32=0x0], 0x18}}, 0x20008050) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r8) syz_usb_connect(0x7, 0x0, 0x0, 0x0) r9 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r9, 0x6, 0x1f, 0x0, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb8864496e006c0066000003119078ac1e0101ac1414aa830d34c1d7f0a76424f6a10000004e234e21004890780300000003000000af71839ad1763b85e3a1e03ef7b95a7093b78ec732d3b9cb8f44021a846780e25161274c707738514ab7c1279d8c893503f39e51d6ce4108830de2ba3f25739bda340fed5666c1e28129689185f8120ff9e3186eba0fc9dfd9bc67d4821a50080000007b2d805e6bf889fe74861dadd36967846e178da9660b0400cd3541480e3d8d21ed00"/212], 0x0) openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) io_uring_enter(r7, 0x0, 0x0, 0xf, &(0x7f0000000000), 0x18) syz_io_uring_submit(r0, r1, &(0x7f0000000300)=@IORING_OP_RENAMEAT={0x23, 0x14, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000100)='./file0\x00'}) 4.524533586s ago: executing program 2 (id=2112): r0 = socket$phonet(0x23, 0x2, 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) getpid() openat$adsp1(0xffffffffffffff9c, &(0x7f0000000000), 0x80000, 0x0) r2 = io_uring_setup(0x30a7, &(0x7f0000000240)={0x0, 0x9dd9, 0x1000, 0x1, 0x21b}) io_uring_register$IORING_REGISTER_MEM_REGION(r2, 0x22, 0x0, 0x1) open_by_handle_at(0xffffffffffffffff, 0x0, 0x1) r3 = syz_open_dev$video(&(0x7f0000000580), 0x7, 0x0) ioctl$VIDIOC_TRY_EXT_CTRLS(r3, 0xc0205649, &(0x7f0000000100)={0x0, 0x1, 0x4, 0xffffffffffffffff, 0x0, &(0x7f0000000140)={0x980912, 0x8, '\x00', @value=0x1ff}}) r4 = syz_open_dev$vbi(&(0x7f0000000040), 0x0, 0x2) ioctl$VIDIOC_S_INPUT(r4, 0xc0045627, &(0x7f0000000100)=0x3) ioctl$VIDIOC_SUBDEV_S_DV_TIMINGS(r4, 0xc0845657, &(0x7f00000007c0)={0x0, @bt={0xa8c, 0x870, 0x1, 0x3, 0xd59f82, 0x2019f5, 0x4, 0xb, 0x0, 0x3, 0x27fd, 0x2800, 0x440, 0x0, 0xd, 0x0, {0x45, 0x80}, 0xcd, 0x3}}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) r6 = dup(r5) r7 = socket$kcm(0x21, 0x2, 0x2) sendmsg$inet(r7, &(0x7f0000000900)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x110, 0xd, {0x0, @multicast2, @private=0xa010102}}}], 0x20}, 0x0) write$UHID_INPUT(r6, &(0x7f0000002b40)={0xe, {"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", 0x942}}, 0x1006) 4.373037215s ago: executing program 5 (id=2113): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe7000/0x18000)=nil, &(0x7f00000000c0)=[@text16={0x10, &(0x7f0000000080)="0f8501dbdb0f741065666765f36f0f330f09660f3a0cb9000000752066b9800000c00f326635004000000f300f01d7ba4100ed14", 0x34}], 0x1, 0x12, 0x0, 0x0) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) r3 = dup(r2) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000840)={0x1fe, 0x2, 0x2000, 0x1000, &(0x7f0000003000/0x1000)=nil}) r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) syz_kvm_setup_cpu$x86(r3, r1, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000100)=[@textreal={0x8, 0x0}], 0x1, 0x42, 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r4, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000040)=[@text64={0x40, 0x0}], 0x1, 0x11, 0x0, 0x0) ioctl$KVM_RUN(r4, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x18a00, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000600)=ANY=[@ANYRES8=r7, @ANYRESOCT=r8, @ANYBLOB], 0x4c}}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_GET(0xffffffffffffffff, 0x0, 0x0) fcntl$setstatus(0xffffffffffffffff, 0x4, 0x2400) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000100)='net_prio.prioidx\x00', 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r9 = fsopen(&(0x7f00000002c0)='devpts\x00', 0x0) r10 = fcntl$dupfd(r9, 0x0, r9) fsconfig$FSCONFIG_SET_STRING(r10, 0x1, &(0x7f0000000100)='mode\x00', &(0x7f0000000180)='W\f\xd0M\xac\x89\xa64\x8e9t\x10B\xc9G', 0x0) mq_open(0x0, 0x43, 0xa2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) 3.624643833s ago: executing program 5 (id=2115): r0 = socket$isdn_base(0x22, 0x3, 0x0) accept(r0, 0x0, 0x0) 3.546016736s ago: executing program 3 (id=2117): r0 = socket(0x2, 0x80805, 0x40) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018", @ANYRES32, @ANYBLOB="0000000000040000b705c3a3fc9b1017ff1eaf00b60000b348cc0095a2e01cd3aab887f97743c99f5eb40c81f1445743"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x5a}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "f900f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@fastopen={0x1e, 0x2}]}}}}}}}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000007fc0)=[@in={0x2, 0x0, @rand_addr=0x64010102}]}, &(0x7f0000000100)=0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='net_prio.prioidx\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000040), 0x55af) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r2, 0x0) getpeername$netlink(r2, &(0x7f0000000140), &(0x7f0000000180)=0xc) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x66, &(0x7f0000000080), &(0x7f0000000000)=0x8) r3 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000340), 0x102, 0x0) write$cgroup_int(r3, 0x0, 0x0) 3.478719468s ago: executing program 5 (id=2118): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x3) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x2000)=nil, 0x2000, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000640)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540)={0x0, r0}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00'}, 0x10) prctl$PR_SET_VMA(0x53564d41, 0x0, &(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r2 = openat$selinux_relabel(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) write$selinux_access(r2, 0x0, 0x0) read$msr(r1, &(0x7f0000001a40)=""/102392, 0x18ff8) syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x6}, 0x10}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b36, &(0x7f0000000000)={'wlan0\x00'}) setsockopt$inet6_tcp_TLS_TX(r0, 0x6, 0x1, &(0x7f0000000580)=@ccm_128={{0x303}, "dc4b66de6b46976b", "a724aaf0f42d6f39f7c1c148f5f90c8f", "281d991d", "11b7efffa7ad3701"}, 0x28) r5 = socket(0x40000000015, 0x5, 0x0) connect$inet(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) bind$inet(r5, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x57) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={0x0}}, 0x0) recvmmsg(r5, &(0x7f0000000b40)=[{{0x0, 0x1f00, 0x0, 0x0, &(0x7f0000000280)=""/11, 0xb}}], 0x5df, 0x2, 0x0) 3.432679156s ago: executing program 2 (id=2119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x1ff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)) r1 = getpid() sched_setscheduler(r1, 0x5, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbeef, 0x8031, 0xffffffffffffffff, 0x55779000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) madvise(&(0x7f0000304000/0x3000)=nil, 0x3000, 0x9) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x1}, 0x1c) mkdir(&(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) r6 = fsopen(&(0x7f0000000280)='fuse\x00', 0x0) fchown(r6, 0xffffffffffffffff, 0xffffffffffffffff) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x8, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@volatile}]}) r7 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='mountinfo\x00') lseek(r7, 0x10001, 0x4) listen(r5, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000580), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='mpol=inte']) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept(r4, 0x0, 0x0) 2.858063718s ago: executing program 3 (id=2120): bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socket$kcm(0xa, 0x922000000003, 0x11) socket$kcm(0x10, 0x2, 0x4) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) ioctl$SNDRV_SEQ_IOCTL_UNSUBSCRIBE_PORT(r1, 0x40505331, &(0x7f0000000100)={{}, {0xe}, 0xbf00, 0xbf}) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x9, 0xfffffffffffffffd, 0x0, 0x300000000000000}, 0x0, &(0x7f00000002c0)={0x3fe, 0x5, 0x3, 0x9, 0x8, 0x45ff, 0x7ffffffc}, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) 2.827799588s ago: executing program 5 (id=2121): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) r1 = eventfd(0x4) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f0000000480)={0x73622a85, 0x0, 0x2}) ioctl$VHOST_SET_LOG_FD(r0, 0x4004af07, &(0x7f0000000180)=r1) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000040)={0x1, r1}) r2 = userfaultfd(0x80001) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000380)) r3 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f00000001c0)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x40, 0x4d8, 0xdf, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x8, 0x80, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x1}}, [{{0x9, 0x5, 0x2, 0x3, 0x8, 0xab, 0x2, 0x1}}]}}}]}}]}}, 0x0) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000200)={0x24, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00f8ff00000000000000"], 0x0}, 0x0) syz_usb_control_io$hid(r3, 0x0, &(0x7f0000000100)={0x2c, 0x0, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="20011000000012292083d584a74b161779b7cfacd7ae"], 0x0}) syz_open_dev$hidraw(0x0, 0x0, 0x0) r4 = syz_open_dev$evdev(0x0, 0x0, 0x200) syz_usb_control_io(r3, 0x0, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f00000002c0)={0x84, &(0x7f0000000500)=ANY=[@ANYRES32=r4, @ANYRES64=r0, @ANYRESDEC=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) ioctl$VHOST_SET_VRING_ADDR(r0, 0x4028af11, &(0x7f0000000280)={0x1, 0x1, &(0x7f0000000380)=""/236, &(0x7f00000000c0)=""/87, &(0x7f0000000480)=""/66}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(0x0, 0x7) syz_open_dev$cec(0x0, 0x0, 0x0) r7 = openat$sw_sync(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r8, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r9, &(0x7f0000000740)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000540)="44f600b242b86faa11cbcbd07f38b30b1bc9e59b9c4bfaef00172c814a6b7fd79f8d19a70e41d6b1ed37e9d6a053c9549ec562736965e1c5e2fefcfb62ed71cd80fcdc50370798d3c7655a81d05522ccaf61676d24487fbaed69827b6007a06158fa93c45048", 0x66}, {&(0x7f0000000640)="3d154643002221d1b80755beb5a3e2b7cb6f788901953fac8f657695b70cb87aee4f28ffd636b1cf9ccd7feaabcda8e6d6d78d431c01f7242e1f76abd4decbba076e0d4121f69d51eb1b6d296b62bb7c867a0c3d270f199396582a2edb31edd7c0ae65c9ef096cb49297e5508c78b98a1171be0f53e644ce77aa3450c0f8e22e19d3066b34d4a141e55331d9ab0877db71a5450a794a1325f141029c228a8310b6ff302353bc74a78beefa1b3e762658c976ebf6b138019dda57b2384b1bdcfde05c66ca512d1ee3a302378e4d960439ccd47f4a50394db17b26a3e3ef0f8e3ce747c8e117d4763b0454942f0922bdb6d358", 0xf2}], 0x2, &(0x7f00000005c0)=[@rights={{0x34, 0x1, 0x1, [r5, r6, r2, r6, r1, r8, 0xffffffffffffffff, r2, r7]}}], 0x38, 0x8042}}], 0x1, 0x0) recvmmsg(r8, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYRES8=r10, @ANYRES32, @ANYBLOB='\x00'/18, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/21], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000180), 0x1003, r11}, 0x38) 2.504502332s ago: executing program 0 (id=2123): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'wg1\x00', 0x0}) setsockopt$inet6_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f00000001c0)=[@sack_perm, @sack_perm, @mss={0x2, 0x3}, @timestamp, @window={0x3, 0x20, 0x3100}, @window={0x3, 0xf001, 0x9}, @mss={0x2, 0x795d}, @window={0x3, 0x8, 0x4}, @sack_perm, @sack_perm], 0xa) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000000)=0xf3e, 0x4) sendto$packet(r0, &(0x7f0000000240)='\x00', 0x1, 0x800, &(0x7f0000000080)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfc}}, 0x14) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000240), 0x488401, 0x0) ioctl$TCSBRKP(r2, 0x5425, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c6a7be57822013db999a640d02d2245ee4ad7539144477ce6c2555bfb1d0c5e8cac020a36d828f16af7ac616b1dac9883c0e391c377644bf95e9a229ad045843a8f44d14ea1af5a89cfef4c23b54cdff7de01cf", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800900010069706970000000000c0002800500090089000000"], 0x3c}}, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TIOCSETD(r4, 0x5423, &(0x7f00000000c0)=0xe) ioctl$TCSETSW2(r4, 0x5408, &(0x7f0000000040)={0x300, 0x0, 0x0, 0xfffffffe, 0x0, "2cf155f1d8b4d0441f0246e09537aa82dc1ecf", 0x2}) ioctl$TIOCGPGRP(r4, 0x5437, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000840)='memory.events.local\x00', 0x275a, 0x0) bind$netlink(r3, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbff, 0x80}, 0xc) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r5, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) ftruncate(r5, 0x3) 2.131688206s ago: executing program 0 (id=2124): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0xa, 0x2, 0x0) connect$inet6(r1, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) mq_unlink(&(0x7f0000000180)='\x00') recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000990000000d"], 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000500000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r6}, 0x10) request_key(&(0x7f0000000000)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x1, 0xc}, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x40, r8, 0x709, 0x0, 0x3, {0x2e}, [{@pci={{0x8}, {0x11}}, {0xd}}]}, 0x40}}, 0x0) r9 = mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) r10 = userfaultfd(0x80801) ioctl$UFFDIO_API(r10, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x500}) ioctl$UFFDIO_REGISTER(r10, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000ffa000/0x3000)=nil, 0x3000}, 0x1}) syz_memcpy_off$KVM_EXIT_HYPERCALL(r9, 0x20, &(0x7f0000000000)="0900bf65653f47f4020000008bd458d1e7cbdaf300000f34e7e4165f081ae36850f6d15c3e681411f7a496c0da04003c242f5bedaf6bec340dee49474362b24cb800edc500", 0x0, 0x48) ioctl$UFFDIO_ZEROPAGE(r10, 0xc020aa04, &(0x7f0000000080)={{&(0x7f0000ffb000/0x1000)=nil, 0x1000}}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x39011}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ALL_SLAVES_ACTIVE={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2}, 0x0) 1.972606455s ago: executing program 4 (id=2125): writev(0xffffffffffffffff, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000340)="8a226ff432407a7f5fd09590d734f795e12e57ce9fed3f0300eb6368ed559a85603b0080", 0x24}], 0x2) syz_init_net_socket$rose(0xb, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x800007, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x2, 0x0, 0x0, 0x6}, 0x10}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000400)=0x7) r0 = getpid() r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01002abd7000fddbdf258c00000008000300", @ANYRES32=r3], 0x28}, 0x1, 0x0, 0x0, 0x93ddb44c57957314}, 0x810) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) syz_usb_connect(0x5, 0x0, 0x0, 0x0) openat$dsp(0xffffffffffffff9c, 0x0, 0x42, 0x0) r5 = fsopen(&(0x7f0000000180)='proc\x00', 0x1) fsconfig$FSCONFIG_CMD_CREATE(r5, 0x6, 0x0, 0x0, 0x0) r6 = fsmount(r5, 0x0, 0x1) fchdir(r6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xe8961000) r7 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'veth1_to_bridge\x00', 0x0}) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$nl_route_sched(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f00000001c0)=@getchain={0xd87, 0x11, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r8, {0xd, 0x10}, {0xfff1, 0xfff2}, {0xe, 0xe}}, [{0x8, 0xb, 0x7}]}, 0x2c}}, 0x40000) openat$uinput(0xffffffffffffff9c, &(0x7f0000000080), 0x802, 0x0) syz_io_uring_setup(0x5910, &(0x7f0000000200)={0x0, 0x0, 0x10, 0x1, 0x0, 0x0, r7}, &(0x7f0000000100), &(0x7f0000000000)) syz_io_uring_setup(0xa94, &(0x7f0000000280), &(0x7f00000003c0), &(0x7f00000005c0)) 1.256479636s ago: executing program 3 (id=2126): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x3000, 0x6, &(0x7f000027b000/0x3000)=nil) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) prlimit64(0x0, 0x0, &(0x7f0000000140)={0xa, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000200000000000000000000e7b6b04d6702b331779e95226bad05bc3c3bae0e0827e58188f47e9b1d8b601117c70d3d844c9a00"/81], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000280)='workqueue_activate_work\x00', r2}, 0x18) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$MAP_CREATE(0x2000000000000000, &(0x7f0000000b00)=ANY=[@ANYBLOB="0600000004000000be7000005c00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000200"/28], 0x48) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f00002e1000/0x2000)=nil, 0x2000, 0x4000, 0x2, &(0x7f00008cc000/0x4000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r5 = syz_create_resource$binfmt(&(0x7f0000001400)='./file0\x00') openat$binfmt(0xffffffffffffff9c, r5, 0x42, 0x1ff) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002040), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f00000003c0)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) syz_open_procfs(0x0, &(0x7f0000000700)='mounts\x00') 1.161334444s ago: executing program 0 (id=2127): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000300)={'veth0_to_bridge\x00', &(0x7f00000002c0)=@ethtool_cmd={0x4b, 0x9, 0x9, 0x6, 0x50, 0x1, 0x80, 0xa, 0x7f, 0x80, 0xc, 0x3, 0x7fff, 0x2, 0xf4, 0xfff, [0x2, 0xfff]}}) rename(&(0x7f0000001240)='./file0\x00', &(0x7f0000001280)='./file0\x00') ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600200008000300", @ANYRES32=r3, @ANYBLOB="080005"], 0x24}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000001200)={&(0x7f0000000000), 0xc, &(0x7f0000000040)={&(0x7f00000001c0)={0x1014, 0x3f, 0x1, 0x70bd25, 0x25dfdbfe, {0x15}, [@generic="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"]}, 0x1014}, 0x1, 0x0, 0x0, 0x4000}, 0x4c880) 923.602479ms ago: executing program 0 (id=2128): socket$alg(0x26, 0x5, 0x0) mmap$xdp(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x42031, 0xffffffffffffffff, 0x0) socket(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0}, 0x2020) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xc36e5000) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000000)=0x15) r4 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x0, 0x0) readv(r4, &(0x7f0000000640)=[{&(0x7f0000000340)=""/184, 0xb8}, {0x0}], 0x2) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r5, &(0x7f0000000000), 0x6) write$FUSE_INIT(r2, &(0x7f0000004200)={0x50, 0x0, r3, {0x7, 0x2b, 0x0, 0xa0031718561b10dc}}, 0x50) write$FUSE_BMAP(r1, &(0x7f0000000040)={0x18, 0x0, r3, {0xffff}}, 0x18) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) 620.652391ms ago: executing program 2 (id=2129): ioctl$IOMMU_IOAS_ALLOC(0xffffffffffffffff, 0x3b81, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) setrlimit(0xe, &(0x7f0000000000)={0x3986, 0x8}) r0 = gettid() timer_create(0x0, &(0x7f0000000040)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x3938700}}, 0x0) r1 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x502, 0x0) read$rfkill(r1, &(0x7f0000000080), 0xffffff1c) syz_usb_connect(0x5, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="120100024392d5204c05c3067aeb010203010902240001088770070904"], 0x0) 617.781201ms ago: executing program 0 (id=2130): r0 = socket$inet(0x2, 0x80001, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3f}}, 0x10) listen(r1, 0x3) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000280)=0x3, 0x4) bind$inet(r0, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) listen(r0, 0x3) syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000540)={{0x12, 0x1, 0x201, 0x0, 0x0, 0x0, 0x8, 0x1130, 0x3101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x1, 0x4, 0x10, 0x4, [{{0x9, 0x4, 0x0, 0xcf, 0x1, 0x3, 0x1, 0x1, 0xd9, {0x9, 0x21, 0x4, 0x9, 0x1, {0x22, 0x744}}, {{{0x9, 0x5, 0x81, 0x3, 0x10, 0x4, 0x3, 0x3}}}}}]}}]}}, &(0x7f0000000b40)={0x0, 0x0, 0x0, 0x0, 0x4, [{0x2, &(0x7f0000000740)=@string={0x2}}, {0xd2, &(0x7f00000007c0)=@string={0xd2, 0x3, "0b3bacfb1eb78c417316b41f47d893286ede6a4059e40317a8b7c6b23bf89a824efb58198e6317bbc44dad3ae66baede52790ee884a0952ad731111243b5bd3817e097ae92aa9360ac44a6f9fc5336b518b4947fbd2263332efec4dd8a75763bf8f96a77e395e997d44e75d9449f8e6499b731694a1a7f0e3c5368db1d5a82752841fd867ad62c56c5d80ae5b13d2130d27c9cc12c74f35a8d240c94c36e145e9a867e5ea7ce6237abf558c57dae5c25fbd2c33c27b72908ea93898e09b836c6b58f9d949382825f9d370ae280d8aeda"}}, {0x0, 0x0}, {0x0, 0x0}]}) 182.658372ms ago: executing program 4 (id=2131): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x8000000000000001, 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0x2, 0x2, {0x5, @vbi={0x0, 0x0, 0x4, 0x0, [], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) (fail_nth: 1) 0s ago: executing program 0 (id=2132): socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, 0x0, 0x0) ptrace$pokeuser(0x6, 0xffffffffffffffff, 0x8000000000000001, 0x7) connect$unix(0xffffffffffffffff, 0x0, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='sched_switch\x00', r3}, 0x10) keyctl$session_to_parent(0x12) keyctl$session_to_parent(0x12) ioctl$UFFDIO_REGISTER(0xffffffffffffffff, 0xc020aa00, &(0x7f0000000240)={{&(0x7f0000400000/0x1000)=nil, 0x20400000}, 0x1}) r4 = syz_open_dev$vbi(&(0x7f0000000000), 0x1, 0x2) r5 = fsopen(&(0x7f0000000200)='omfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000ac0)='gid', &(0x7f0000000440)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80Y\xc2\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\xf8\xc9@h\x01\xf5\xcb\x88\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9a\x84\'\xa3\xf1\xd9<\xb9k', 0x0) ioctl$VIDIOC_CREATE_BUFS(r4, 0xc100565c, &(0x7f00000013c0)={0x0, 0xffffffff, 0x2, {0x5, @vbi={0x0, 0x7, 0x4, 0x0, [0x1], [0x8200], 0x1}}}) ioctl$VIDIOC_QBUF(r4, 0xc058565d, &(0x7f0000000200)=@fd={0x0, 0x5, 0x4, 0x0, 0x0, {}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, "8000"}, 0x0, 0x2, {}, 0x20800}) kernel console output (not intermixed with test programs): clone lowerpath [ 480.055313][T11354] overlayfs: failed to clone upperpath [ 480.251715][ T5952] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-110 [ 480.262322][ T5952] zl10353_read_register: readreg error (reg=127, ret==-110) [ 480.262404][T11327] usb 3-1: dvb_usb_ce6230: I2C read not implemented [ 480.319380][T11347] wg1 speed is unknown, defaulting to 1000 [ 480.457823][ T5952] usb 3-1: USB disconnect, device number 62 [ 481.083083][T10058] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 481.247564][T10058] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 481.272928][T10058] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 481.326324][T10058] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 481.342609][T10058] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 481.353686][T10058] usb 2-1: config 0 descriptor?? [ 481.364993][T10058] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 481.379090][T10058] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 481.572350][T10058] usb 2-1: USB disconnect, device number 62 [ 481.729420][ T43] usb 4-1: USB disconnect, device number 67 [ 481.785129][T11386] netlink: 'syz.0.1493': attribute type 4 has an invalid length. [ 481.804350][T11386] netlink: 'syz.0.1493': attribute type 4 has an invalid length. [ 482.051787][T11393] syz.3.1494: attempt to access beyond end of device [ 482.051787][T11393] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 482.064973][T11393] MINIX-fs: unable to read superblock [ 482.788440][ T43] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 483.390346][ T43] usb 3-1: config 0 has an invalid interface number: 10 but max is 0 [ 483.409853][ T43] usb 3-1: config 0 has no interface number 0 [ 483.416423][ T43] usb 3-1: config 0 interface 10 has no altsetting 0 [ 483.430579][ T43] usb 3-1: New USB device found, idVendor=0c45, idProduct=62b3, bcdDevice=a2.72 [ 483.442516][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 483.455004][ T43] usb 3-1: Product: syz [ 483.459290][ T43] usb 3-1: Manufacturer: syz [ 483.465862][ T43] usb 3-1: SerialNumber: syz [ 483.575699][ T43] usb 3-1: config 0 descriptor?? [ 483.620542][ T43] gspca_main: gspca_sn9c20x-2.14.0 probing 0c45:62b3 [ 484.068296][T11391] CIFS: VFS: Malformed UNC in devname [ 484.078704][T11391] loop3: detected capacity change from 0 to 7 [ 484.089571][T11391] Dev loop3: unable to read RDB block 7 [ 484.098368][T11391] loop3: unable to read partition table [ 484.104401][T11391] loop3: partition table beyond EOD, truncated [ 484.128471][T11391] loop_reread_partitions: partition scan of loop3 (被x ) failed (rc=-5) [ 484.143203][ T43] gspca_sn9c20x: Write register 1000 failed -110 [ 484.188548][ T43] gspca_sn9c20x: Device initialization failed [ 484.228392][ T43] gspca_sn9c20x 3-1:0.10: probe with driver gspca_sn9c20x failed with error -110 [ 484.277130][ T43] usb 3-1: USB disconnect, device number 63 [ 484.316129][ T30] audit: type=1400 audit(1753416873.078:727): avc: denied { map } for pid=11420 comm="syz.3.1503" path="socket:[30565]" dev="sockfs" ino=30565 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 485.043296][ T30] audit: type=1400 audit(1753416873.798:728): avc: denied { write } for pid=11433 comm="syz.3.1506" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 485.093040][ T5905] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 485.232511][T11436] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=11436 comm=syz.3.1507 [ 485.274475][ T5905] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 485.296592][ T5905] usb 3-1: config 0 has no interfaces? [ 485.312544][ T5905] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 485.350458][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 485.417104][ T5905] usb 3-1: config 0 descriptor?? [ 485.577196][T11452] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1511'. [ 485.643311][ T43] usb 4-1: new high-speed USB device number 68 using dummy_hcd [ 486.216985][ T30] audit: type=1400 audit(1753416874.868:729): avc: denied { setopt } for pid=11431 comm="syz.2.1505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 486.276362][ T43] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 486.286810][ T43] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 486.672740][ T43] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 486.683144][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 486.708084][ T43] usb 4-1: config 0 descriptor?? [ 486.719302][ T43] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 486.730184][ T43] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 487.091333][ T43] usb 4-1: USB disconnect, device number 68 [ 487.261619][ T5838] Bluetooth: hci0: unexpected event for opcode 0x0809 [ 487.363217][ T5918] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 487.527459][ T5918] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 487.545265][ T5918] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 487.569356][ T5918] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 487.584256][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 487.666267][ T5918] usb 2-1: Product: syz [ 487.677241][ T30] audit: type=1400 audit(1753416876.438:730): avc: denied { accept } for pid=11484 comm="syz.0.1522" path="socket:[30640]" dev="sockfs" ino=30640 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_route_socket permissive=1 [ 487.705059][T11464] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 487.717962][ T5918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 487.720589][T11487] netlink: 'syz.3.1523': attribute type 21 has an invalid length. [ 488.351584][T11489] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 488.400931][T10058] usb 3-1: USB disconnect, device number 64 [ 488.409460][ T5838] Bluetooth: hci4: command 0x0c1a tx timeout [ 488.893224][T11501] vivid-004: ================= START STATUS ================= [ 488.902461][T11501] vivid-004: Radio HW Seek Mode: Bounded [ 488.909823][T11501] vivid-004: Radio Programmable HW Seek: false [ 488.916285][T11501] vivid-004: RDS Rx I/O Mode: Block I/O [ 488.922015][T11501] vivid-004: Generate RBDS Instead of RDS: false [ 488.929086][T11501] vivid-004: RDS Reception: true [ 488.939839][T11501] vivid-004: RDS Program Type: 0 inactive [ 488.947015][T11501] vivid-004: RDS PS Name: inactive [ 488.954327][T11501] vivid-004: RDS Radio Text: [ 488.986624][ T30] audit: type=1400 audit(1753416877.748:731): avc: denied { setopt } for pid=11497 comm="syz.0.1525" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 489.012436][T11501] inactive [ 489.017575][T11501] vivid-004: RDS Traffic Announcement: false inactive [ 489.063270][T11501] vivid-004: RDS Traffic Program: false inactive [ 489.070453][T11501] vivid-004: RDS Music: false inactive [ 489.502202][T11501] vivid-004: ================== END STATUS ================== [ 491.466191][ T43] usb 2-1: USB disconnect, device number 63 [ 491.635821][T11527] netlink: 'syz.1.1532': attribute type 2 has an invalid length. [ 491.941851][T11532] /dev/nullb0: Can't open blockdev [ 492.002972][ T43] usb 2-1: new full-speed USB device number 64 using dummy_hcd [ 492.768357][T11533] orangefs_mount: mount request failed with -4 [ 492.914998][ T43] usb 2-1: not running at top speed; connect to a high speed hub [ 492.923973][ T43] usb 2-1: config 1 has an invalid descriptor of length 226, skipping remainder of the config [ 492.948415][ T43] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 492.954714][ T30] audit: type=1400 audit(1753416881.698:732): avc: denied { read } for pid=11540 comm="syz.2.1536" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 493.008665][ T43] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 493.053107][ T5905] usb 4-1: new high-speed USB device number 69 using dummy_hcd [ 493.066815][ T43] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.113261][ T973] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 493.183116][ T43] usb 2-1: Product: syz [ 493.199749][ T43] usb 2-1: Manufacturer: syz [ 493.215659][ T5905] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 493.217892][ T43] usb 2-1: SerialNumber: syz [ 493.322984][ T973] usb 5-1: Using ep0 maxpacket: 8 [ 493.328350][ T5905] usb 4-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 493.349761][ T973] usb 5-1: config 11 has no interfaces? [ 493.463818][ T5905] usb 4-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 493.473190][ T973] usb 5-1: New USB device found, idVendor=0413, idProduct=6f01, bcdDevice=b1.f8 [ 493.482277][ T973] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 493.490499][ T973] usb 5-1: Product: syz [ 493.494782][ T5905] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.503640][ T973] usb 5-1: Manufacturer: syz [ 493.508346][ T973] usb 5-1: SerialNumber: syz [ 493.603070][ T5918] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 493.615210][T11527] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 493.630764][ T5905] usb 4-1: config 0 descriptor?? [ 493.631763][T11527] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 493.760312][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 493.770221][ T43] usb 2-1: 0:2 : does not exist [ 493.776956][ T5918] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 493.778971][ T5905] hdpvr 4-1:0.0: Could not find bulk-in endpoint [ 493.807116][ T5918] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 493.807423][ T5905] hdpvr 4-1:0.0: probe with driver hdpvr failed with error -12 [ 493.831530][ T973] usb 5-1: USB disconnect, device number 62 [ 493.840057][ T43] usb 2-1: USB disconnect, device number 64 [ 493.886061][ T5918] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 493.897169][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 493.909613][ T5918] usb 3-1: config 0 descriptor?? [ 493.926299][ T5918] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 493.932818][ T5918] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 493.986727][ T5905] usb 4-1: USB disconnect, device number 69 [ 494.137271][ T43] usb 3-1: USB disconnect, device number 65 [ 494.431303][T11553] binder: 11552:11553 ioctl c0306201 200000000080 returned -14 [ 495.428495][T11568] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.1545'. [ 495.438879][T11568] netlink: 4580 bytes leftover after parsing attributes in process `syz.1.1545'. [ 495.461863][ T30] audit: type=1400 audit(1753416884.218:733): avc: denied { getopt } for pid=11567 comm="syz.1.1545" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 495.483626][T11571] netlink: 'syz.2.1546': attribute type 1 has an invalid length. [ 495.491481][T11571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1546'. [ 495.563092][ T5905] usb 4-1: new high-speed USB device number 70 using dummy_hcd [ 495.815244][T11576] tipc: Started in network mode [ 495.820329][T11576] tipc: Node identity cedf68ee3e2, cluster identity 4711 [ 495.833175][T11576] tipc: Enabled bearer , priority 0 [ 495.849413][T11576] syzkaller0: entered promiscuous mode [ 495.873587][ T5905] usb 4-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 496.333601][T11576] syzkaller0: entered allmulticast mode [ 496.507710][ T5905] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.795464][ T5905] usb 4-1: Product: syz [ 496.799647][ T5905] usb 4-1: Manufacturer: syz [ 496.827909][T11576] syzkaller0: mtu less than device minimum [ 496.835064][ T5905] usb 4-1: SerialNumber: syz [ 496.845298][ T5892] tipc: Node number set to 4043270382 [ 496.865490][ T5905] usb 4-1: config 0 descriptor?? [ 496.876061][ T5905] i2c-tiny-usb 4-1:0.0: version 6d.cc found at bus 004 address 070 [ 496.893971][T11575] tipc: Resetting bearer [ 496.984177][T11575] tipc: Disabling bearer [ 497.285356][ T5905] (null): failure reading functionality [ 497.358577][ T5905] i2c i2c-1: connected i2c-tiny-usb device [ 497.892988][ T5905] usb 5-1: new high-speed USB device number 63 using dummy_hcd [ 498.168337][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 498.183147][ T5905] usb 5-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 498.686588][ T5905] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 498.698524][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 498.709585][ T5905] usb 5-1: config 0 descriptor?? [ 498.720175][ T5905] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 498.737222][ T5905] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 498.949686][ T5905] usb 5-1: USB disconnect, device number 63 [ 499.023437][ T10] usb 4-1: USB disconnect, device number 70 [ 499.273338][T11619] wg1 speed is unknown, defaulting to 1000 [ 501.323366][ T973] usb 4-1: new high-speed USB device number 71 using dummy_hcd [ 501.369015][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.377269][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.450546][T11661] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1567'. [ 501.643423][ T973] usb 4-1: Using ep0 maxpacket: 32 [ 501.655522][ T973] usb 4-1: New USB device found, idVendor=056a, idProduct=0026, bcdDevice= 0.00 [ 501.993083][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 502.098975][ T973] usb 4-1: config 0 descriptor?? [ 502.320867][T11667] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 502.338228][ T973] wacom 0003:056A:0026.001B: unknown main item tag 0x0 [ 502.347993][ T973] wacom 0003:056A:0026.001B: unknown main item tag 0x0 [ 502.348098][T11667] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 502.362992][ T973] wacom 0003:056A:0026.001B: unknown main item tag 0x0 [ 502.558285][ T43] usb 4-1: USB disconnect, device number 71 [ 502.734480][ T30] audit: type=1400 audit(1753416891.498:734): avc: denied { nlmsg_write } for pid=11668 comm="syz.0.1570" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 503.508096][ T973] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 503.625457][ T30] audit: type=1400 audit(1753416892.388:735): avc: denied { create } for pid=11682 comm="syz.3.1573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 503.694700][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 503.771233][ T973] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 503.801468][ T973] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 503.830644][ T973] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 503.859956][ T973] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 503.915054][ T973] usb 3-1: config 0 descriptor?? [ 503.940643][ T973] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 503.951177][T11692] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 503.987779][ T973] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 504.131114][ T10] usb 3-1: USB disconnect, device number 66 [ 504.171370][T11699] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1577'. [ 504.273511][ T973] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 505.352407][T11719] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:0 [ 505.430050][T11723] wg1 speed is unknown, defaulting to 1000 [ 506.620406][T11743] sg_write: data in/out 565044094/4056 bytes for SCSI command 0x36-- guessing data in; [ 506.620406][T11743] program syz.2.1586 not setting count and/or reply_len properly [ 506.957263][T11752] syz.3.1588: attempt to access beyond end of device [ 506.957263][T11752] nbd3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 507.180352][T11758] Cannot find del_set index 2 as target [ 507.191610][T11760] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1592'. [ 507.200966][T11760] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1592'. [ 508.083030][ T5905] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 508.275984][ T5918] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 508.292942][ T5905] usb 3-1: Using ep0 maxpacket: 8 [ 508.304690][ T5905] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 508.308052][ T30] audit: type=1326 audit(1753416897.068:736): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11769 comm="syz.3.1595" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fd82fd8e9a9 code=0x0 [ 508.318631][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 508.338980][ C1] vkms_vblank_simulate: vblank timer overrun [ 508.368317][ T5905] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 508.383276][ T5905] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 508.434421][ T5905] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 508.447155][ T5905] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 508.449630][T11775] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1597'. [ 508.465029][T11775] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1597'. [ 508.493326][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 508.512699][ T5918] usb 2-1: config 0 descriptor has 1 excess byte, ignoring [ 508.520896][ T5918] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 65516, setting to 1024 [ 508.533966][ T5918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 1024 [ 508.544160][ T5918] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x81 has invalid maxpacket 188 [ 508.566195][ T5918] usb 2-1: New USB device found, idVendor=04d8, idProduct=0a30, bcdDevice=ce.47 [ 508.575552][ T5918] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 508.588526][T11777] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1598'. [ 508.597827][T11777] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1598'. [ 508.627567][ T5918] usb 2-1: Product: syz [ 508.632825][ T5918] usb 2-1: Manufacturer: syz [ 508.642600][ T5918] usb 2-1: SerialNumber: syz [ 508.650062][ T5918] usb 2-1: config 0 descriptor?? [ 508.656057][T11766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 508.667393][T11766] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 508.700261][T11780] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1599'. [ 508.709657][T11780] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1599'. [ 508.738127][ T5905] usb 3-1: GET_CAPABILITIES returned 0 [ 508.741072][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 508.748223][ T5905] usbtmc 3-1:16.0: can't read capabilities [ 508.757460][ T5918] mcba_usb 2-1:0.0: Microchip CAN BUS Analyzer connected [ 508.764795][ C1] mcba_usb 2-1:0.0 can0: Tx URB aborted (-71) [ 508.929559][ T30] audit: type=1804 audit(1753416897.688:737): pid=11784 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.1602" name="/newroot/298/file0" dev="tmpfs" ino=1629 res=1 errno=0 [ 508.968071][T11784] netlink: 'syz.4.1602': attribute type 1 has an invalid length. [ 509.043003][T11784] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1602'. [ 509.165262][ T5905] usb 2-1: USB disconnect, device number 66 [ 509.197284][ T5905] mcba_usb 2-1:0.0 can0: device disconnected [ 509.351786][T11804] netlink: 5128 bytes leftover after parsing attributes in process `syz.4.1605'. [ 509.521482][T11808] ptrace attach of "./syz-executor exec"[5835] was attempted by "./syz-executor exec"[11808] [ 509.550414][ T30] audit: type=1400 audit(1753416898.308:738): avc: denied { mount } for pid=11757 comm="syz.2.1591" name="/" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 509.612988][ T10] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 509.933169][ T10] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 510.045680][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 510.173402][ T10] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 510.186019][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 510.208858][ T10] usb 5-1: SerialNumber: syz [ 510.455027][T11819] wg1 speed is unknown, defaulting to 1000 [ 510.635284][ T973] usb 4-1: new high-speed USB device number 72 using dummy_hcd [ 510.717075][ T5905] usb 3-1: USB disconnect, device number 67 [ 510.744769][ T10] usb 5-1: 0:2 : does not exist [ 510.789875][ T10] usb 5-1: USB disconnect, device number 64 [ 510.804739][T11825] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 510.872993][ T973] usb 4-1: device descriptor read/64, error -71 [ 511.196884][ T973] usb 4-1: new high-speed USB device number 73 using dummy_hcd [ 511.353159][ T973] usb 4-1: device descriptor read/64, error -71 [ 511.463228][ T43] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 511.473458][ T973] usb usb4-port1: attempt power cycle [ 511.623106][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 511.637135][ T43] usb 3-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 511.677963][ T43] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 511.713088][ T5905] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 511.734102][ T43] usb 3-1: New USB device found, idVendor=05ac, idProduct=020f, bcdDevice= 0.22 [ 511.764758][ T43] usb 3-1: New USB device strings: Mfr=1, Product=130, SerialNumber=131 [ 511.805740][ T43] usb 3-1: Product: syz [ 511.814772][ T43] usb 3-1: Manufacturer: syz [ 511.823121][ T973] usb 4-1: new high-speed USB device number 74 using dummy_hcd [ 511.830422][ T43] usb 3-1: SerialNumber: syz [ 511.851047][ T43] input: appletouch as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/input/input26 [ 511.863172][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 511.869290][ T973] usb 4-1: device descriptor read/8, error -71 [ 511.876794][ T5905] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 511.918211][ T5905] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 511.979108][ T5905] usb 5-1: config 0 has no interface number 0 [ 512.024972][ T5905] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 512.157358][ T5905] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 512.181827][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 512.183157][ T973] usb 4-1: new high-speed USB device number 75 using dummy_hcd [ 512.206607][ T5905] usb 5-1: Product: syz [ 512.211064][ T5905] usb 5-1: SerialNumber: syz [ 512.223302][ T5905] usb 5-1: config 0 descriptor?? [ 512.232365][ T5905] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 512.246284][ T973] usb 4-1: device descriptor read/8, error -71 [ 512.493405][ T973] usb usb4-port1: unable to enumerate USB device [ 513.333314][ T5918] usb 3-1: USB disconnect, device number 68 [ 513.352294][ T5918] appletouch 3-1:1.0: input: appletouch disconnected [ 513.391692][ T30] audit: type=1326 audit(1753416902.148:739): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82fd8e9a9 code=0x7ffc0000 [ 513.417981][ T30] audit: type=1326 audit(1753416902.148:740): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82fd8e9a9 code=0x7ffc0000 [ 513.447312][ T30] audit: type=1326 audit(1753416902.158:741): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fd82fd8e9a9 code=0x7ffc0000 [ 513.473257][ T30] audit: type=1326 audit(1753416902.158:742): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82fd8e9a9 code=0x7ffc0000 [ 513.499492][ T30] audit: type=1326 audit(1753416902.158:743): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=279 compat=0 ip=0x7fd82fd8e9a9 code=0x7ffc0000 [ 513.527529][ T30] audit: type=1326 audit(1753416902.158:744): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82fd8e9a9 code=0x7ffc0000 [ 513.554817][ T30] audit: type=1326 audit(1753416902.158:745): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=0 compat=0 ip=0x7fd82fd8e9a9 code=0x7ffc0000 [ 513.580421][ T30] audit: type=1326 audit(1753416902.158:746): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82fd8e9a9 code=0x7ffc0000 [ 513.604581][ T30] audit: type=1326 audit(1753416902.158:747): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11841 comm="syz.3.1615" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fd82fd8e9a9 code=0x7ffc0000 [ 513.913495][T11848] wg1 speed is unknown, defaulting to 1000 [ 514.583303][ T10] usb 5-1: USB disconnect, device number 65 [ 515.499345][ T30] audit: type=1400 audit(1753416904.138:748): avc: denied { getopt } for pid=11857 comm="syz.1.1619" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 515.806074][T11866] __nla_validate_parse: 2 callbacks suppressed [ 515.806087][T11866] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1620'. [ 516.862322][T11880] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1623'. [ 516.872754][T11880] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1623'. [ 518.244979][T11891] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1627'. [ 518.255192][T11891] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1627'. [ 518.633057][ T10] usb 5-1: new high-speed USB device number 66 using dummy_hcd [ 518.876727][ T10] usb 5-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 518.973279][ T10] usb 5-1: config 1 has an invalid descriptor of length 55, skipping remainder of the config [ 519.129570][ T5905] usb 3-1: new low-speed USB device number 69 using dummy_hcd [ 519.158847][ T10] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 519.294784][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 55, changing to 9 [ 519.381603][ T10] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 8496, setting to 1024 [ 519.393238][ T5905] usb 3-1: Invalid ep0 maxpacket: 32 [ 519.408230][ T10] usb 5-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 519.425624][ T10] usb 5-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 519.447635][ T10] usb 5-1: Product: syz [ 519.461049][ T10] usb 5-1: Manufacturer: syz [ 519.476933][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 519.487562][ T10] cdc_wdm 5-1:1.0: skipping garbage [ 519.496507][ T10] cdc_wdm 5-1:1.0: cdc-wdm0: USB WDM device [ 519.520305][ T10] cdc_wdm 5-1:1.0: Unknown control protocol [ 519.543698][ T5905] usb 3-1: new low-speed USB device number 70 using dummy_hcd [ 519.677447][T11908] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 519.703037][ T5905] usb 3-1: Invalid ep0 maxpacket: 32 [ 519.712007][ T5905] usb usb3-port1: attempt power cycle [ 519.718148][T11908] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 519.738781][ T10] usb 5-1: USB disconnect, device number 66 [ 519.779556][T11912] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 519.812985][T11912] CIFS: Unable to determine destination address [ 520.220005][T11927] netlink: 'syz.3.1633': attribute type 9 has an invalid length. [ 520.227369][ T5905] usb 3-1: new low-speed USB device number 71 using dummy_hcd [ 520.253157][T11927] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.1633'. [ 520.263259][ T5905] usb 3-1: Invalid ep0 maxpacket: 32 [ 520.403138][ T5905] usb 3-1: new low-speed USB device number 72 using dummy_hcd [ 520.769554][ T5905] usb 3-1: Invalid ep0 maxpacket: 32 [ 520.775431][ T5905] usb usb3-port1: unable to enumerate USB device [ 520.818402][T11930] 9pnet: Could not find request transport: ff [ 521.027333][T11938] wg1 speed is unknown, defaulting to 1000 [ 521.763029][ T10] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 521.805732][T11950] overlayfs: failed to resolve './file1': -2 [ 521.924025][ T10] usb 2-1: Using ep0 maxpacket: 8 [ 521.926618][ T5918] usb 5-1: new full-speed USB device number 67 using dummy_hcd [ 521.948861][ T10] usb 2-1: unable to get BOS descriptor or descriptor too short [ 521.958076][ T10] usb 2-1: config 17 has an invalid interface number: 8 but max is 1 [ 521.977108][ T10] usb 2-1: config 17 has 1 interface, different from the descriptor's value: 2 [ 521.987990][ T10] usb 2-1: config 17 has no interface number 0 [ 521.994494][ T10] usb 2-1: config 17 interface 8 altsetting 6 endpoint 0x3 has an invalid bInterval 0, changing to 7 [ 522.006569][ T10] usb 2-1: config 17 interface 8 has no altsetting 0 [ 522.017542][ T10] usb 2-1: New USB device found, idVendor=0763, idProduct=2001, bcdDevice=2c.ff [ 522.028394][ T10] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.036596][ T10] usb 2-1: Product: syz [ 522.073385][ T10] usb 2-1: Manufacturer: syz [ 522.078442][ T10] usb 2-1: SerialNumber: syz [ 522.140493][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 522.154987][ T5918] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 522.171301][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 522.192915][ T5918] usb 5-1: Product: syz [ 522.197218][ T5918] usb 5-1: Manufacturer: syz [ 522.204790][ T5918] usb 5-1: SerialNumber: syz [ 522.214955][ T5918] usb 5-1: config 0 descriptor?? [ 522.330117][ T10] usb 2-1: selecting invalid altsetting 0 [ 522.336056][ T10] usb 2-1: 8:6 : UAC_AS_GENERAL descriptor not found [ 522.343116][ T10] usb 2-1: selecting invalid altsetting 0 [ 522.355718][ T10] usb 2-1: USB disconnect, device number 67 [ 522.451090][ T5905] usb 5-1: USB disconnect, device number 67 [ 522.925995][T11975] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1652'. [ 523.436228][T11984] Device name not specified. [ 523.436228][T11984] [ 523.721124][T11991] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 523.733389][ T5918] usb 5-1: new high-speed USB device number 68 using dummy_hcd [ 523.886386][T11997] netlink: 'syz.0.1655': attribute type 9 has an invalid length. [ 523.903122][T11997] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.1655'. [ 523.926104][ T5918] usb 5-1: New USB device found, idVendor=2c42, idProduct=1709, bcdDevice=ca.b7 [ 523.937591][ T5918] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 523.960105][ T5918] usb 5-1: Product: syz [ 523.967805][ T5918] usb 5-1: Manufacturer: syz [ 523.972612][ T5918] usb 5-1: SerialNumber: syz [ 523.990231][ T5918] usb 5-1: config 0 descriptor?? [ 524.045277][T12002] 9pnet: Could not find request transport: ff [ 525.113341][ T5918] usb 5-1: f81604_read: reg: 105 failed: -EREMOTEIO [ 525.121681][T12015] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 525.132388][ T5918] f81604 5-1:0.0: Setting termination of CH#1 failed: -EREMOTEIO [ 525.153816][ T5918] f81604 5-1:0.0: probe with driver f81604 failed with error -121 [ 526.128505][ T5892] usb 5-1: USB disconnect, device number 68 [ 526.135718][ T30] audit: type=1400 audit(1753416914.908:749): avc: denied { unmount } for pid=5834 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 526.273277][T12036] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.326302][T12038] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 526.343532][T12036] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.547124][T12044] syz_tun: entered allmulticast mode [ 526.554021][ T30] audit: type=1326 audit(1753416915.268:750): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa38e9a9 code=0x7ffc0000 [ 526.582132][ T30] audit: type=1326 audit(1753416915.268:751): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7ffafa38e9a9 code=0x7ffc0000 [ 526.606088][ T5892] usb 5-1: new high-speed USB device number 69 using dummy_hcd [ 526.625800][ T30] audit: type=1326 audit(1753416915.268:752): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7ffafa38d310 code=0x7ffc0000 [ 526.656144][T12045] SELinux: failure in sel_netif_sid_slow(), invalid network interface (0) [ 526.665174][T12045] mroute: pending queue full, dropping entries [ 526.677089][ T30] audit: type=1326 audit(1753416915.268:753): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffafa38e5ab code=0x7ffc0000 [ 526.753263][ T5918] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 526.770200][ T30] audit: type=1326 audit(1753416915.268:754): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffafa38e5ab code=0x7ffc0000 [ 526.794093][ T5892] usb 5-1: Using ep0 maxpacket: 8 [ 526.803156][ T30] audit: type=1326 audit(1753416915.278:755): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffafa38e5ab code=0x7ffc0000 [ 526.828783][ T30] audit: type=1326 audit(1753416915.278:756): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffafa38e5ab code=0x7ffc0000 [ 526.852528][ T5892] usb 5-1: unable to get BOS descriptor or descriptor too short [ 526.862321][ T5892] usb 5-1: config 7 has an invalid interface number: 160 but max is 0 [ 526.871145][ T5892] usb 5-1: config 7 has no interface number 0 [ 526.880721][ T30] audit: type=1326 audit(1753416915.388:757): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffafa38e5ab code=0x7ffc0000 [ 526.907278][ T5892] usb 5-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=72.77 [ 526.918275][ T5892] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 526.926417][ T5892] usb 5-1: Product: syz [ 526.930830][ T5892] usb 5-1: Manufacturer: syz [ 526.935590][ T5918] usb 2-1: Using ep0 maxpacket: 16 [ 526.943018][ T5892] usb 5-1: SerialNumber: syz [ 527.012973][ T30] audit: type=1326 audit(1753416915.518:758): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12040 comm="syz.1.1670" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7ffafa38e5ab code=0x7ffc0000 [ 527.086263][ T5918] usb 2-1: config 0 has an invalid interface number: 126 but max is 0 [ 527.098819][ T5918] usb 2-1: config 0 has an invalid descriptor of length 252, skipping remainder of the config [ 527.130574][ T5918] usb 2-1: config 0 has no interface number 0 [ 527.142359][ T5918] usb 2-1: config 0 interface 126 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 527.178821][ T5918] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x87 has invalid maxpacket 34328, setting to 1024 [ 527.206509][ T5918] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0xA has invalid maxpacket 512, setting to 64 [ 527.246955][ T5918] usb 2-1: config 0 interface 126 altsetting 0 endpoint 0x4 has invalid wMaxPacketSize 0 [ 527.280192][ T5918] usb 2-1: config 0 interface 126 altsetting 0 bulk endpoint 0x4 has invalid maxpacket 0 [ 527.310621][ T5918] usb 2-1: config 0 interface 126 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 4 [ 527.365785][T12035] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 527.393594][T12035] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 527.410239][ T5918] usb 2-1: New USB device found, idVendor=0763, idProduct=1015, bcdDevice=56.88 [ 527.447609][ T5918] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 527.487201][ T5918] usb 2-1: config 0 descriptor?? [ 527.604605][T12042] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 527.619583][ T5918] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 527.711814][ T5918] snd-usb-audio 2-1:0.126: probe with driver snd-usb-audio failed with error -12 [ 527.769668][ T5892] cypress_m8 5-1:7.160: Nokia CA-42 V2 Adapter converter detected [ 527.778445][ T5892] nokiaca42v2 ttyUSB0: required endpoint is missing [ 527.811955][ T5892] usb 5-1: USB disconnect, device number 69 [ 527.825005][ T5892] cypress_m8 5-1:7.160: device disconnected [ 527.846209][T12059] netlink: 'syz.0.1674': attribute type 9 has an invalid length. [ 527.869514][T12059] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.1674'. [ 527.931963][T12059] 9pnet: Could not find request transport: ff [ 528.068501][T12065] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 528.108677][T12065] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1677'. [ 528.257366][ T5953] usb 2-1: USB disconnect, device number 68 [ 528.397511][T12075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 528.453019][ T5905] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 528.624143][ T5905] usb 3-1: config 0 has an invalid interface number: 133 but max is 0 [ 528.639261][ T5905] usb 3-1: config 0 has no interface number 0 [ 528.665718][ T5905] usb 3-1: New USB device found, idVendor=06cd, idProduct=0121, bcdDevice=dd.3d [ 528.675140][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 528.703017][ T5905] usb 3-1: Product: syz [ 528.707376][ T5905] usb 3-1: Manufacturer: syz [ 528.711987][ T5905] usb 3-1: SerialNumber: syz [ 528.825180][ T5905] usb 3-1: config 0 descriptor?? [ 529.075182][ T5905] keyspan 3-1:0.133: Keyspan 1 port adapter converter detected [ 529.110758][ T5905] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 81 [ 529.208205][ T5905] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 1 [ 529.235976][ T5905] keyspan 3-1:0.133: found no endpoint descriptor for endpoint 2 [ 529.268141][ T5905] usb 3-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 529.444771][T12092] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1686'. [ 529.462610][T12092] netlink: 204 bytes leftover after parsing attributes in process `syz.1.1686'. [ 530.063178][T12109] netlink: 63503 bytes leftover after parsing attributes in process `syz.0.1690'. [ 530.314580][T12112] /dev/nullb0: Can't open blockdev [ 530.491369][T12104] wg1 speed is unknown, defaulting to 1000 [ 530.827570][ T5953] usb 3-1: USB disconnect, device number 73 [ 530.876621][ T5953] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 530.903566][ T5953] keyspan 3-1:0.133: device disconnected [ 530.967808][T12118] netlink: 63503 bytes leftover after parsing attributes in process `syz.4.1692'. [ 531.863018][ T5905] usb 5-1: new high-speed USB device number 70 using dummy_hcd [ 532.035417][ T5905] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has an invalid bInterval 129, changing to 11 [ 532.063844][ T5905] usb 5-1: config 0 interface 0 altsetting 252 endpoint 0x81 has invalid wMaxPacketSize 0 [ 532.081574][ T5905] usb 5-1: config 0 interface 0 has no altsetting 0 [ 532.092637][ T5905] usb 5-1: New USB device found, idVendor=5543, idProduct=0064, bcdDevice= 0.00 [ 532.109368][ T5905] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 532.127632][ T5905] usb 5-1: config 0 descriptor?? [ 532.163083][ T5892] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 532.412964][ T5918] usb 4-1: new high-speed USB device number 76 using dummy_hcd [ 532.436609][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 532.593120][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 533.198132][ T5892] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 533.217526][ T5918] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 533.238796][ T5892] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 533.291734][ T5918] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 533.314029][ T5892] usb 3-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 533.326005][ T5918] usb 4-1: config 0 has no interface number 0 [ 533.332156][ T5918] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 533.348620][ T5892] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 533.359814][ T5892] usb 3-1: config 0 descriptor?? [ 533.372599][ T5892] hdpvr 3-1:0.0: Could not find bulk-in endpoint [ 533.396896][ T5918] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 533.413372][ T5905] usbhid 5-1:0.0: can't add hid device: -71 [ 533.414145][ T5892] hdpvr 3-1:0.0: probe with driver hdpvr failed with error -12 [ 533.419392][ T5905] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 533.439473][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 533.447133][T12148] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.456453][ T5918] usb 4-1: Product: syz [ 533.456479][ T5918] usb 4-1: SerialNumber: syz [ 533.458833][ T5918] usb 4-1: config 0 descriptor?? [ 533.477916][ T5918] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 533.499034][ T5905] usb 5-1: USB disconnect, device number 70 [ 533.578027][ T5918] usb 3-1: USB disconnect, device number 74 [ 533.702326][T12158] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 533.974286][ T5953] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 534.166207][ T5953] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 534.288238][ T5953] usb 2-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 534.368062][ T5953] usb 2-1: New USB device found, idVendor=1e7d, idProduct=2d50, bcdDevice= 0.00 [ 534.383612][ T5953] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 534.406167][ T5953] usb 2-1: config 0 descriptor?? [ 534.793770][ T973] usb 5-1: new high-speed USB device number 71 using dummy_hcd [ 535.071493][ T5953] kovaplus 0003:1E7D:2D50.001C: hidraw0: USB HID v0.00 Device [HID 1e7d:2d50] on usb-dummy_hcd.1-1/input0 [ 535.084192][ T973] usb 5-1: Using ep0 maxpacket: 16 [ 535.094283][ T973] usb 5-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 535.103766][ T973] usb 5-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 535.111936][ T973] usb 5-1: Product: syz [ 535.116355][ T973] usb 5-1: Manufacturer: syz [ 535.121554][ T973] usb 5-1: SerialNumber: syz [ 535.128832][ T973] usb 5-1: config 0 descriptor?? [ 535.446430][ T973] usb 4-1: USB disconnect, device number 76 [ 535.494933][ T10] usb 5-1: USB disconnect, device number 71 [ 535.734440][T12156] netlink: 'syz.1.1706': attribute type 1 has an invalid length. [ 536.455108][ T30] kauditd_printk_skb: 33 callbacks suppressed [ 536.455144][ T30] audit: type=1400 audit(1753416925.188:792): avc: denied { read } for pid=12176 comm="syz.3.1713" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 536.646636][T12156] 8021q: adding VLAN 0 to HW filter on device bond1 [ 537.490483][T12156] bond1: (slave gretap1): making interface the new active one [ 537.504959][T12156] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 537.666722][T12156] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 537.745089][ T5953] kovaplus 0003:1E7D:2D50.001C: couldn't init struct kovaplus_device [ 537.780793][ T5953] kovaplus 0003:1E7D:2D50.001C: couldn't install mouse [ 537.824026][ T5953] kovaplus 0003:1E7D:2D50.001C: probe with driver kovaplus failed with error -71 [ 537.876434][ T5953] usb 2-1: USB disconnect, device number 69 [ 538.507897][ T5953] usb 5-1: new high-speed USB device number 72 using dummy_hcd [ 538.524801][ T5918] usb 4-1: new high-speed USB device number 77 using dummy_hcd [ 538.692887][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 538.808443][ T5953] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 538.946672][ T5953] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 539.028976][ T5953] usb 5-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 539.048621][ T5953] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.077041][ T5953] usb 5-1: config 0 descriptor?? [ 539.095725][ T5918] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 539.099328][ T5953] hdpvr 5-1:0.0: Could not find bulk-in endpoint [ 539.117449][ T5953] hdpvr 5-1:0.0: probe with driver hdpvr failed with error -12 [ 539.123078][ T5918] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 539.135965][ T5918] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 539.145709][ T5918] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 539.164510][T12212] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 539.174741][ T5918] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 539.246877][ T30] audit: type=1400 audit(1753416927.998:793): avc: denied { map } for pid=12217 comm="syz.0.1725" path="socket:[34252]" dev="sockfs" ino=34252 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 539.289260][T12220] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1725'. [ 539.298827][T12218] netlink: 16402 bytes leftover after parsing attributes in process `syz.0.1725'. [ 539.324609][ T43] usb 5-1: USB disconnect, device number 72 [ 539.427949][T12223] netlink: 'syz.1.1726': attribute type 1 has an invalid length. [ 539.428925][ T5918] usb 4-1: USB disconnect, device number 77 [ 539.471282][T12223] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1726'. [ 540.189627][T12232] 9pnet_fd: Insufficient options for proto=fd [ 540.217153][T12236] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1729'. [ 540.701409][ T30] audit: type=1400 audit(1753416929.418:794): avc: denied { rename } for pid=12233 comm="syz.4.1730" name="#1c" dev="tmpfs" ino=1747 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 541.100463][ T43] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 541.300453][ T43] usb 3-1: Using ep0 maxpacket: 32 [ 541.344612][ T43] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 541.374745][T12246] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1732'. [ 541.485814][ T43] usb 3-1: config 0 has no interface number 0 [ 541.525932][T12247] overlayfs: failed to clone upperpath [ 541.541404][ T43] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 541.563557][ T43] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 541.572000][ T43] usb 3-1: Product: syz [ 541.576457][ T43] usb 3-1: Manufacturer: syz [ 541.581145][ T43] usb 3-1: SerialNumber: syz [ 541.606977][T12252] syz.3.1734: attempt to access beyond end of device [ 541.606977][T12252] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 541.620104][T12252] MINIX-fs: unable to read superblock [ 542.000425][ T43] usb 3-1: config 0 descriptor?? [ 542.022793][ T43] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 542.804010][ T43] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 542.822081][T12259] bridge1: entered promiscuous mode [ 542.993117][ C1] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 543.030039][ T43] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 543.030087][T12259] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1735'. [ 543.045610][ T43] usb 3-1: USB disconnect, device number 75 [ 543.076590][ T43] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 543.092933][T12259] netlink: 'syz.1.1735': attribute type 5 has an invalid length. [ 543.100724][T12259] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1735'. [ 543.248029][ T43] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 543.465768][T12259] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 256 - 0 [ 543.493502][ T43] quatech2 3-1:0.51: device disconnected [ 543.499293][T12259] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 256 - 0 [ 543.542751][T12259] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 256 - 0 [ 543.565597][T12259] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 256 - 0 [ 543.575792][T12259] geneve2: entered promiscuous mode [ 543.584703][T12259] geneve2: entered allmulticast mode [ 543.818279][T12274] veth0_vlan: entered allmulticast mode [ 544.113598][ T43] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 544.192985][ T5953] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 544.224382][T12281] netlink: 642 bytes leftover after parsing attributes in process `syz.0.1743'. [ 544.255688][T12285] wg1 speed is unknown, defaulting to 1000 [ 544.286183][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x7 has invalid wMaxPacketSize 0 [ 544.304948][ T43] usb 2-1: config 0 interface 0 altsetting 0 bulk endpoint 0x7 has invalid maxpacket 0 [ 544.322936][ T43] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 544.341653][ T43] usb 2-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 544.352901][ T43] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 544.373776][ T43] usb 2-1: config 0 descriptor?? [ 544.382979][ T5953] usb 3-1: Using ep0 maxpacket: 16 [ 544.383708][ T43] hdpvr 2-1:0.0: Could not find bulk-in endpoint [ 544.389895][ T5953] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 544.406207][ T43] hdpvr 2-1:0.0: probe with driver hdpvr failed with error -12 [ 544.423584][ T5953] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 544.443057][ T5953] usb 3-1: config 0 has no interface number 0 [ 544.456313][ T5953] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 544.485662][ T5953] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 544.495813][ T5953] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 544.527061][ T5953] usb 3-1: Product: syz [ 544.546342][ T5953] usb 3-1: SerialNumber: syz [ 544.565532][ T5953] usb 3-1: config 0 descriptor?? [ 544.591183][ T5953] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 544.605614][ T10] usb 2-1: USB disconnect, device number 70 [ 544.682983][ T973] usb 4-1: new high-speed USB device number 78 using dummy_hcd [ 544.974632][ T973] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 544.992960][ T973] usb 4-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 545.065464][ T43] usb 5-1: new high-speed USB device number 73 using dummy_hcd [ 545.072596][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 545.967549][ T973] usb 4-1: config 0 descriptor?? [ 546.242987][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 546.254323][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 546.273073][ T43] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 546.292899][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 12408, setting to 64 [ 546.301183][T12284] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 546.317594][ T43] usb 5-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 546.324888][T12284] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 546.332930][ T43] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 546.341533][ T43] usb 5-1: Product: syz [ 546.352923][ T43] usb 5-1: Manufacturer: syz [ 546.357568][ T43] usb 5-1: SerialNumber: syz [ 546.364907][ T43] usb 5-1: config 0 descriptor?? [ 546.370634][T12290] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 546.382248][ T43] port100 5-1:0.0: NFC: Could not find bulk-in or bulk-out endpoint [ 546.504160][T10058] usb 2-1: new high-speed USB device number 71 using dummy_hcd [ 546.636825][ T30] audit: type=1400 audit(1753416935.398:795): avc: denied { ioctl } for pid=12289 comm="syz.4.1745" path="socket:[33673]" dev="sockfs" ino=33673 ioctlcmd=0x4590 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 546.686150][T10058] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 546.704985][T10058] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 546.716508][T10058] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 546.726137][T10058] usb 2-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 546.734325][T10058] usb 2-1: Product: syz [ 546.754699][T12300] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 546.775194][T10058] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 546.942642][T12308] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1751'. [ 546.960595][T12308] bond0: Error: Cannot enslave bond to itself. [ 547.240800][ T973] usb 3-1: USB disconnect, device number 76 [ 548.066292][T10058] usb 4-1: USB disconnect, device number 78 [ 548.083270][T12323] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 548.169693][ T43] usb 5-1: USB disconnect, device number 73 [ 548.665202][ T6287] Bluetooth: hci5: Frame reassembly failed (-84) [ 548.979797][T12334] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1759'. [ 549.196974][ T30] audit: type=1400 audit(1753416937.928:796): avc: denied { read } for pid=12329 comm="syz.3.1759" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 550.005289][T12350] netlink: 'syz.2.1763': attribute type 11 has an invalid length. [ 550.013335][T12350] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1763'. [ 550.027048][T12350] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.035660][T12350] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.044238][T12350] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.052647][T12350] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 550.263648][T12359] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1766'. [ 550.273511][T12359] netlink: 'syz.0.1766': attribute type 2 has an invalid length. [ 550.293209][T12359] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1766'. [ 550.326096][ T5918] usb 2-1: USB disconnect, device number 71 [ 550.344018][T12359] netlink: 'syz.0.1766': attribute type 1 has an invalid length. [ 550.425887][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1767'. [ 550.436660][T12359] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=256 sclass=netlink_route_socket pid=12359 comm=syz.0.1766 [ 550.460506][T12359] netlink: 92 bytes leftover after parsing attributes in process `syz.0.1766'. [ 550.643047][ T5838] Bluetooth: hci5: Entering manufacturer mode failed (-110) [ 550.650938][ T5850] Bluetooth: hci5: command 0xfc11 tx timeout [ 552.378619][T12410] autofs: Unknown parameter './file0' [ 552.422743][T12413] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1779'. [ 552.564457][ T5850] Bluetooth: hci0: unexpected event for opcode 0x0803 [ 552.572002][ T30] audit: type=1326 audit(1753416941.338:797): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b558e9a9 code=0x7ffc0000 [ 552.677099][ T30] audit: type=1326 audit(1753416941.338:798): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b558e9a9 code=0x7ffc0000 [ 552.753852][ T5953] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 552.788187][ T30] audit: type=1326 audit(1753416941.368:799): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=13 compat=0 ip=0x7fa6b558e9a9 code=0x7ffc0000 [ 552.821880][ T30] audit: type=1326 audit(1753416941.368:800): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b558e9a9 code=0x7ffc0000 [ 552.852041][ T30] audit: type=1326 audit(1753416941.368:801): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b558e9a9 code=0x7ffc0000 [ 552.875459][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.882056][ T30] audit: type=1326 audit(1753416941.368:802): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=319 compat=0 ip=0x7fa6b558e9a9 code=0x7ffc0000 [ 552.905444][ C0] vkms_vblank_simulate: vblank timer overrun [ 552.939751][ T5953] usb 3-1: Using ep0 maxpacket: 32 [ 552.959009][ T5953] usb 3-1: config 1 interface 0 altsetting 88 bulk endpoint 0x3 has invalid maxpacket 96 [ 552.988502][ T30] audit: type=1326 audit(1753416941.368:803): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b558e9a9 code=0x7ffc0000 [ 553.017471][ T5953] usb 3-1: config 1 interface 0 has no altsetting 0 [ 553.024758][ T30] audit: type=1326 audit(1753416941.368:804): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b558e9a9 code=0x7ffc0000 [ 553.528347][ T30] audit: type=1326 audit(1753416941.368:805): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=285 compat=0 ip=0x7fa6b558e9a9 code=0x7ffc0000 [ 553.559279][ T30] audit: type=1326 audit(1753416941.378:806): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=12417 comm="syz.4.1781" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa6b558e9a9 code=0x7ffc0000 [ 553.775728][T12430] netlink: 'syz.4.1786': attribute type 1 has an invalid length. [ 553.783898][T12430] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1786'. [ 554.002458][T12443] overlayfs: failed to clone lowerpath [ 554.087102][T12445] netlink: 9696 bytes leftover after parsing attributes in process `syz.4.1793'. [ 554.179555][ T5918] usb 4-1: new high-speed USB device number 79 using dummy_hcd [ 554.362933][ T5918] usb 4-1: Using ep0 maxpacket: 16 [ 554.451749][ T5918] usb 4-1: config 0 has an invalid interface number: 214 but max is 0 [ 554.475456][ T5918] usb 4-1: config 0 has no interface number 0 [ 554.481943][ T5918] usb 4-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 554.519575][ T5918] usb 4-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 554.528968][ T5918] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.539935][ T5918] usb 4-1: Product: syz [ 554.559413][ T5918] usb 4-1: Manufacturer: syz [ 554.565445][ T5918] usb 4-1: SerialNumber: syz [ 554.600525][ T5918] usb 4-1: config 0 descriptor?? [ 554.624316][T12445] team0 (unregistering): Port device team_slave_0 removed [ 554.659394][T12445] team0 (unregistering): Port device team_slave_1 removed [ 554.832756][T12439] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 554.871183][ T5918] usbtouchscreen 4-1:0.214: Failed to read FW rev: -71 [ 554.883041][ T5918] usbtouchscreen 4-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 554.926602][ T5918] usb 4-1: USB disconnect, device number 79 [ 555.117004][T11707] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.173850][T11707] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 555.275717][T11707] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.287020][T11707] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 555.435001][ T5953] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 555.444355][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.452366][ T5953] usb 3-1: Product: 髑ߕ잴劃讅꠶羃肿䠇ꥏ쬪癉駇觞러쥋좵쿙䞰㒃︸ݦ蓶㐸ыࣼ큪䈀掯 [ 555.562612][ T5953] usb 3-1: can't set config #1, error -71 [ 555.599108][ T5953] usb 3-1: USB disconnect, device number 77 [ 555.617489][T12459] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 555.621056][T11707] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 555.646458][T11707] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 556.220895][T11707] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 556.292808][T11707] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 256 - 0 [ 556.646008][ T5850] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 556.657522][ T5850] Bluetooth: hci0: Injecting HCI hardware error event [ 556.667931][ T5850] Bluetooth: hci0: hardware error 0x00 [ 556.686198][T12481] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 556.697450][T12481] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 556.706407][T12481] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 556.984082][T12481] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 556.997727][T12481] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 557.703689][T11707] bridge_slave_1: left allmulticast mode [ 557.795601][T11707] bridge_slave_1: left promiscuous mode [ 557.806538][T11707] bridge0: port 2(bridge_slave_1) entered disabled state [ 557.939117][T11707] bridge_slave_0: left allmulticast mode [ 557.964643][T11707] bridge_slave_0: left promiscuous mode [ 557.974899][T11707] bridge0: port 1(bridge_slave_0) entered disabled state [ 558.017407][ T30] kauditd_printk_skb: 7 callbacks suppressed [ 558.017426][ T30] audit: type=1400 audit(1753416946.778:814): avc: denied { getopt } for pid=12496 comm="syz.0.1808" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 558.081896][ T5953] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 558.273085][ T5953] usb 3-1: device descriptor read/64, error -71 [ 558.442613][T12507] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 558.533074][ T5953] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 558.584494][T11707] bond1 (unregistering): (slave gretap1): Releasing active interface [ 558.678375][ T5953] usb 3-1: device descriptor read/64, error -71 [ 558.713224][ T5850] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 558.793738][ T5953] usb usb3-port1: attempt power cycle [ 558.940172][T11707] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 558.951271][T11707] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 558.964571][T11707] bond0 (unregistering): Released all slaves [ 559.133075][ T5953] usb 3-1: new high-speed USB device number 80 using dummy_hcd [ 559.178879][T11707] bond1 (unregistering): Released all slaves [ 559.193006][ T5850] Bluetooth: hci1: command tx timeout [ 559.203347][ T5953] usb 3-1: device descriptor read/8, error -71 [ 559.205946][T12499] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1810'. [ 559.218898][T12499] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1810'. [ 559.308490][T12479] wg1 speed is unknown, defaulting to 1000 [ 559.419218][T11707] tipc: Left network mode [ 559.534006][ T5953] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 559.556534][ T5953] usb 3-1: device descriptor read/8, error -71 [ 559.578227][T12523] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1816'. [ 559.673884][ T5953] usb usb3-port1: unable to enumerate USB device [ 559.703203][ T43] usb 5-1: new high-speed USB device number 74 using dummy_hcd [ 559.756590][T11707] hsr_slave_0: left promiscuous mode [ 559.767563][T11707] hsr_slave_1: left promiscuous mode [ 559.776640][T11707] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.784790][T11707] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.793410][T11707] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.801015][T11707] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.809116][T11707] batman_adv: batadv0: Interface deactivated: ipvlan2 [ 559.816165][T11707] batman_adv: batadv0: Removing interface: ipvlan2 [ 559.923037][ T43] usb 5-1: Using ep0 maxpacket: 16 [ 559.926791][T11707] batman_adv: batadv0: Interface deactivated: ipvlan1 [ 559.935453][T11707] batman_adv: batadv0: Removing interface: ipvlan1 [ 559.936537][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 559.953636][ T43] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.227163][T11707] veth1_macvtap: left promiscuous mode [ 560.293494][T11707] veth0_macvtap: left promiscuous mode [ 560.345061][T11707] veth1_vlan: left promiscuous mode [ 560.383202][ T43] usb 5-1: New USB device found, idVendor=044f, idProduct=b323, bcdDevice= 0.00 [ 560.392297][ T43] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.398720][T11707] veth0_vlan: left promiscuous mode [ 560.413812][ T43] usb 5-1: config 0 descriptor?? [ 560.722679][T12540] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 560.822295][T12543] netlink: 'syz.2.1823': attribute type 1 has an invalid length. [ 560.829329][ T30] audit: type=1400 audit(1753416949.578:815): avc: denied { write } for pid=12542 comm="syz.2.1823" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 560.855762][ T43] thrustmaster 0003:044F:B323.001D: unknown main item tag 0x0 [ 560.867858][ T43] thrustmaster 0003:044F:B323.001D: hidraw0: USB HID v0.00 Device [HID 044f:b323] on usb-dummy_hcd.4-1/input0 [ 560.880349][ T43] thrustmaster 0003:044F:B323.001D: no inputs found [ 561.097647][ T43] usb 5-1: USB disconnect, device number 74 [ 561.212170][T11707] team0 (unregistering): Port device team_slave_1 removed [ 561.267535][T11707] team0 (unregistering): Port device team_slave_0 removed [ 561.273036][ T5850] Bluetooth: hci1: command tx timeout [ 562.190000][T12479] chnl_net:caif_netlink_parms(): no params data found [ 562.203723][T12537] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1821'. [ 562.213176][T12537] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1821'. [ 562.251462][T12543] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 562.427007][T12546] gretap1: entered promiscuous mode [ 562.843549][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.092733][ T30] audit: type=1400 audit(1753416951.848:816): avc: denied { firmware_load } for pid=11700 comm="kworker/u8:1" path="/lib/firmware/regulatory.db" dev="sda1" ino=448 scontext=system_u:system_r:kernel_t tcontext=system_u:object_r:lib_t tclass=system permissive=1 [ 563.353108][ T5850] Bluetooth: hci1: command tx timeout [ 563.675172][T12479] bridge0: port 1(bridge_slave_0) entered blocking state [ 563.688376][T12479] bridge0: port 1(bridge_slave_0) entered disabled state [ 563.696405][T12479] bridge_slave_0: entered allmulticast mode [ 563.710918][T12479] bridge_slave_0: entered promiscuous mode [ 563.724487][T12479] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.036402][T12479] bridge0: port 2(bridge_slave_1) entered disabled state [ 564.043712][T12479] bridge_slave_1: entered allmulticast mode [ 564.051158][T12479] bridge_slave_1: entered promiscuous mode [ 564.078709][T11707] IPVS: stop unused estimator thread 0... [ 564.095665][T12479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 564.108820][T12479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 564.150783][T12479] team0: Port device team_slave_0 added [ 564.160037][T12479] team0: Port device team_slave_1 added [ 564.200662][T12479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 564.212480][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.243797][T12479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 564.256902][T12479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 564.264261][T12479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 564.290389][T12479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 564.341670][T12479] hsr_slave_0: entered promiscuous mode [ 564.349236][T12479] hsr_slave_1: entered promiscuous mode [ 564.359233][T12479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.367188][T12479] Cannot create hsr debugfs directory [ 564.615040][T12479] 8021q: adding VLAN 0 to HW filter on device bond0 [ 564.639062][T12479] 8021q: adding VLAN 0 to HW filter on device team0 [ 564.656520][ T6287] bridge0: port 1(bridge_slave_0) entered blocking state [ 564.665072][ T6287] bridge0: port 1(bridge_slave_0) entered forwarding state [ 564.700492][ T6287] bridge0: port 2(bridge_slave_1) entered blocking state [ 564.707646][ T6287] bridge0: port 2(bridge_slave_1) entered forwarding state [ 564.742176][T12603] xt_HMARK: spi-set and port-set can't be combined [ 564.750674][T12603] trusted_key: encrypted key: instantiation of keys using provided decrypted data is disabled since CONFIG_USER_DECRYPTED_DATA is set to false [ 564.856497][T12606] netlink: 240 bytes leftover after parsing attributes in process `syz.0.1838'. [ 565.000487][T12479] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 565.419136][T12479] veth0_vlan: entered promiscuous mode [ 565.463077][ T5850] Bluetooth: hci1: command tx timeout [ 565.553937][T12479] veth1_vlan: entered promiscuous mode [ 565.645943][T12479] veth0_macvtap: entered promiscuous mode [ 565.656339][T12479] veth1_macvtap: entered promiscuous mode [ 565.700176][T12479] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 565.734206][T12479] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 565.753638][T12570] Bluetooth: hci2: Opcode 0x0c1a failed: -110 [ 565.759823][ T5850] Bluetooth: hci2: command 0x0c1a tx timeout [ 566.008422][T12570] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 566.014951][T12570] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 566.022770][T12570] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 566.037909][T12570] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 566.046002][T12570] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 566.056337][T12570] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 566.379385][ T5953] usb 5-1: new high-speed USB device number 75 using dummy_hcd [ 566.570343][ T6289] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.587779][ T6289] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.649630][ T6287] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 566.675327][ T5918] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 566.684659][ T6287] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 566.835738][ T30] audit: type=1400 audit(1753416955.588:817): avc: denied { mounton } for pid=12479 comm="syz-executor" path="/root/syzkaller.w8kHEN/syz-tmp/newroot/proc/sys/fs/binfmt_misc" dev="proc" ino=35506 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysctl_fs_t tclass=dir permissive=1 [ 566.906929][ T30] audit: type=1400 audit(1753416955.658:818): avc: denied { mount } for pid=12479 comm="syz-executor" name="/" dev="gadgetfs" ino=6620 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 566.933886][ T30] audit: type=1400 audit(1753416955.668:819): avc: denied { mounton } for pid=12479 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 566.960236][ T5918] usb 3-1: Using ep0 maxpacket: 16 [ 566.972618][ T5918] usb 3-1: config 0 has an invalid interface number: 8 but max is 0 [ 566.988389][ T5918] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 566.999631][ T5918] usb 3-1: config 0 has no interface number 0 [ 567.009030][ T5918] usb 3-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 567.027539][ T5918] usb 3-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 567.037056][ T5918] usb 3-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 567.045456][ T5918] usb 3-1: Product: syz [ 567.049749][ T5918] usb 3-1: SerialNumber: syz [ 567.057001][ T5918] usb 3-1: config 0 descriptor?? [ 567.107609][ T5918] usbhid 3-1:0.8: couldn't find an input interrupt endpoint [ 567.179727][T12638] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1844'. [ 567.639655][ T973] usb 3-1: USB disconnect, device number 82 [ 567.919966][ T5850] Bluetooth: hci3: command 0x0405 tx timeout [ 568.185681][T12481] Bluetooth: hci1: command 0x0c1a tx timeout [ 568.192006][T12481] Bluetooth: hci4: command 0x0c1a tx timeout [ 569.333397][T12665] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.263917][ T5850] Bluetooth: hci4: command 0x0c1a tx timeout [ 570.270000][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 570.480381][T12675] create_pit_timer: 6 callbacks suppressed [ 570.480401][T12675] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 570.515661][T12675] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 570.529531][T12675] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 570.585295][T12675] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 570.596911][T12675] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 570.605404][T12675] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 570.617672][T12675] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 570.625737][T12675] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 570.637383][T12675] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 570.704775][ T10] usb 3-1: new full-speed USB device number 83 using dummy_hcd [ 570.907618][ T10] usb 3-1: config 0 has an invalid descriptor of length 44, skipping remainder of the config [ 570.939516][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 50343, setting to 64 [ 570.958849][ T10] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 570.981868][ T10] usb 3-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 570.992889][ T10] usb 3-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 571.001020][ T10] usb 3-1: Manufacturer: syz [ 571.064413][ T10] usb 3-1: config 0 descriptor?? [ 571.080835][T12670] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 571.308059][T10058] usb 3-1: USB disconnect, device number 83 [ 571.547182][T12705] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1860'. [ 572.313020][ T5850] Bluetooth: hci1: command 0x0c1a tx timeout [ 573.258104][ T30] audit: type=1400 audit(1753416962.008:820): avc: denied { listen } for pid=12724 comm="syz.0.1865" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 573.882914][ T5918] usb 5-1: new high-speed USB device number 76 using dummy_hcd [ 573.991393][T12760] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1875'. [ 574.023156][ T5918] usb 5-1: device descriptor read/64, error -71 [ 574.263308][ T5918] usb 5-1: new high-speed USB device number 77 using dummy_hcd [ 574.583404][ T5918] usb 5-1: device descriptor read/64, error -71 [ 574.821005][ T5918] usb usb5-port1: attempt power cycle [ 574.843449][ T43] Process accounting resumed [ 575.169728][ T30] audit: type=1400 audit(1753416963.928:821): avc: denied { accept } for pid=12770 comm="syz.5.1878" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 575.183257][T12774] netlink: 'syz.2.1879': attribute type 5 has an invalid length. [ 575.193678][T12773] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1878'. [ 575.313094][ T5918] usb 5-1: new high-speed USB device number 78 using dummy_hcd [ 575.380326][ T5918] usb 5-1: device descriptor read/8, error -71 [ 575.447332][T12778] netlink: 'syz.5.1878': attribute type 1 has an invalid length. [ 575.541174][T12778] netlink: 17 bytes leftover after parsing attributes in process `syz.5.1878'. [ 575.561967][T12781] SELinux: failed to load policy [ 575.632952][ T5918] usb 5-1: new high-speed USB device number 79 using dummy_hcd [ 575.665216][ T5918] usb 5-1: device descriptor read/8, error -71 [ 576.095325][ T5918] usb usb5-port1: unable to enumerate USB device [ 576.323220][T12786] mmap: syz.5.1882 (12786): VmData 37523456 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 576.940452][T12797] syzkaller1: entered promiscuous mode [ 576.946140][T12797] syzkaller1: entered allmulticast mode [ 577.374805][ T30] audit: type=1400 audit(1753416965.668:822): avc: denied { bind } for pid=12792 comm="syz.5.1885" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 577.965625][ T30] audit: type=1400 audit(1753416966.728:823): avc: denied { listen } for pid=12803 comm="syz.0.1888" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 578.816434][ T5918] usb 4-1: new high-speed USB device number 80 using dummy_hcd [ 579.050875][ T30] audit: type=1400 audit(1753416967.618:824): avc: denied { listen } for pid=12815 comm="syz.4.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 580.032873][ T5918] usb 4-1: device descriptor read/64, error -71 [ 580.098953][T12826] netlink: 'syz.5.1891': attribute type 1 has an invalid length. [ 580.117990][T12826] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1891'. [ 580.549065][T12818] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 580.587827][T12818] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 580.615385][T12818] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 580.724520][T12818] kvm: requested 53638 ns i8254 timer period limited to 200000 ns [ 580.729294][ T5918] usb 4-1: new high-speed USB device number 81 using dummy_hcd [ 580.766059][T12818] kvm: requested 170133 ns i8254 timer period limited to 200000 ns [ 580.799128][T12818] kvm: requested 2514 ns i8254 timer period limited to 200000 ns [ 580.827905][T12818] kvm: requested 3352 ns i8254 timer period limited to 200000 ns [ 580.847152][T12818] kvm: requested 1676 ns i8254 timer period limited to 200000 ns [ 580.863043][ T5918] usb 4-1: device descriptor read/64, error -71 [ 580.895927][T12818] kvm: requested 838 ns i8254 timer period limited to 200000 ns [ 580.983431][ T5918] usb usb4-port1: attempt power cycle [ 581.767393][T12845] program syz.3.1898 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 581.872547][T12845] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 582.519321][T12836] netlink: 'syz.5.1897': attribute type 1 has an invalid length. [ 582.691509][T12836] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1897'. [ 583.549821][T12866] FAULT_INJECTION: forcing a failure. [ 583.549821][T12866] name failslab, interval 1, probability 0, space 0, times 0 [ 583.610299][T12866] CPU: 1 UID: 0 PID: 12866 Comm: syz.4.1905 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 583.610335][T12866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 583.610348][T12866] Call Trace: [ 583.610356][T12866] [ 583.610365][T12866] dump_stack_lvl+0x16c/0x1f0 [ 583.610391][T12866] should_fail_ex+0x512/0x640 [ 583.610420][T12866] ? __kmalloc_node_noprof+0xc5/0x500 [ 583.610453][T12866] should_failslab+0xc2/0x120 [ 583.610474][T12866] __kmalloc_node_noprof+0xd8/0x500 [ 583.610504][T12866] ? alloc_slab_obj_exts+0x41/0xa0 [ 583.610542][T12866] alloc_slab_obj_exts+0x41/0xa0 [ 583.610567][T12866] __memcg_slab_post_alloc_hook+0x255/0x960 [ 583.610597][T12866] ? kasan_save_track+0x14/0x30 [ 583.610628][T12866] kmem_cache_alloc_node_noprof+0x312/0x3b0 [ 583.610658][T12866] ? __alloc_skb+0x2b2/0x380 [ 583.610692][T12866] __alloc_skb+0x2b2/0x380 [ 583.610721][T12866] ? __pfx___alloc_skb+0x10/0x10 [ 583.610751][T12866] ? __lock_acquire+0x622/0x1c90 [ 583.610776][T12866] alloc_skb_with_frags+0xe0/0x860 [ 583.610805][T12866] sock_alloc_send_pskb+0x7fb/0x990 [ 583.610835][T12866] ? avc_has_perm_noaudit+0x117/0x3b0 [ 583.610866][T12866] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 583.610893][T12866] ? selinux_socket_getpeersec_dgram+0x1a4/0x370 [ 583.610922][T12866] ? __pfx_selinux_socket_getpeersec_dgram+0x10/0x10 [ 583.610949][T12866] ? avc_has_perm+0x11a/0x1c0 [ 583.610972][T12866] ? __pfx_avc_has_perm+0x10/0x10 [ 583.611001][T12866] unix_dgram_sendmsg+0x3e9/0x17a0 [ 583.611036][T12866] ? __pfx_sock_has_perm+0x10/0x10 [ 583.611064][T12866] ? __pfx_unix_dgram_sendmsg+0x10/0x10 [ 583.611091][T12866] ? __pfx_tomoyo_socket_sendmsg_permission+0x10/0x10 [ 583.611119][T12866] ? __import_iovec+0x1dd/0x650 [ 583.611145][T12866] unix_seqpacket_sendmsg+0x12a/0x1c0 [ 583.611177][T12866] ____sys_sendmsg+0xa98/0xc70 [ 583.611202][T12866] ? copy_msghdr_from_user+0x10a/0x160 [ 583.611222][T12866] ? __pfx_____sys_sendmsg+0x10/0x10 [ 583.611251][T12866] ? __pfx__kstrtoull+0x10/0x10 [ 583.611281][T12866] ___sys_sendmsg+0x134/0x1d0 [ 583.611303][T12866] ? __pfx____sys_sendmsg+0x10/0x10 [ 583.611337][T12866] ? find_held_lock+0x2b/0x80 [ 583.611380][T12866] __sys_sendmmsg+0x200/0x420 [ 583.611404][T12866] ? __pfx___sys_sendmmsg+0x10/0x10 [ 583.611434][T12866] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 583.611468][T12866] ? fput+0x70/0xf0 [ 583.611489][T12866] ? ksys_write+0x1ac/0x250 [ 583.611520][T12866] ? __pfx_ksys_write+0x10/0x10 [ 583.611552][T12866] __x64_sys_sendmmsg+0x9c/0x100 [ 583.611571][T12866] ? lockdep_hardirqs_on+0x7c/0x110 [ 583.611601][T12866] do_syscall_64+0xcd/0x4c0 [ 583.611623][T12866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 583.611644][T12866] RIP: 0033:0x7fa6b558e9a9 [ 583.611661][T12866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 583.611681][T12866] RSP: 002b:00007fa6b64d7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 583.611701][T12866] RAX: ffffffffffffffda RBX: 00007fa6b57b5fa0 RCX: 00007fa6b558e9a9 [ 583.611715][T12866] RDX: 0400000000000159 RSI: 0000200000001c00 RDI: 0000000000000003 [ 583.611728][T12866] RBP: 00007fa6b64d7090 R08: 0000000000000000 R09: 0000000000000000 [ 583.611741][T12866] R10: 0000000000040840 R11: 0000000000000246 R12: 0000000000000001 [ 583.611753][T12866] R13: 0000000000000000 R14: 00007fa6b57b5fa0 R15: 00007fffe2d29f78 [ 583.611781][T12866] [ 583.953788][ T30] audit: type=1400 audit(1753416972.378:825): avc: denied { unmount } for pid=5833 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 584.383125][ T5953] usb 6-1: new low-speed USB device number 2 using dummy_hcd [ 584.452960][ T10] usb 4-1: new high-speed USB device number 83 using dummy_hcd [ 584.544825][ T5953] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 584.559653][ T5953] usb 6-1: config 0 interface 0 altsetting 6 endpoint 0x81 has invalid maxpacket 35300, setting to 8 [ 584.571127][ T5953] usb 6-1: config 0 interface 0 has no altsetting 0 [ 584.587991][ T5953] usb 6-1: New USB device found, idVendor=0f30, idProduct=0111, bcdDevice= 0.00 [ 584.601975][ T5953] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 584.618719][ T5953] usb 6-1: config 0 descriptor?? [ 584.629065][T12870] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 584.633120][ T10] usb 4-1: Using ep0 maxpacket: 8 [ 584.753074][ T973] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 584.766063][ T10] usb 4-1: New USB device found, idVendor=15c2, idProduct=0043, bcdDevice= 2.c9 [ 584.777674][ T10] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 584.786700][ T10] usb 4-1: Product: syz [ 584.791084][ T10] usb 4-1: Manufacturer: syz [ 584.800868][ T10] usb 4-1: SerialNumber: syz [ 584.810444][ T10] usb 4-1: config 0 descriptor?? [ 584.822332][ T10] imon:imon_find_endpoints: no valid input (IR) endpoint found [ 584.822784][T12886] wg1 speed is unknown, defaulting to 1000 [ 584.840608][ T10] imon 4-1:0.0: unable to initialize intf0, err -19 [ 584.848427][ T10] imon:imon_probe: failed to initialize context! [ 584.858651][ T10] imon 4-1:0.0: unable to register, err -19 [ 584.893091][ T973] usb 3-1: device descriptor read/64, error -71 [ 585.071908][ T9] usb 4-1: USB disconnect, device number 83 [ 585.118469][ T5953] pantherlord 0003:0F30:0111.001E: unknown main item tag 0x0 [ 585.142221][ T5953] pantherlord 0003:0F30:0111.001E: unknown main item tag 0x0 [ 585.149840][ T973] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 585.163322][ T5953] pantherlord 0003:0F30:0111.001E: unknown main item tag 0x0 [ 585.171470][ T5953] pantherlord 0003:0F30:0111.001E: unknown main item tag 0x0 [ 585.182808][ T5953] pantherlord 0003:0F30:0111.001E: unknown main item tag 0x0 [ 585.190376][ T5953] pantherlord 0003:0F30:0111.001E: unknown main item tag 0x0 [ 585.198321][ T5953] pantherlord 0003:0F30:0111.001E: unknown main item tag 0x0 [ 585.206073][ T5953] pantherlord 0003:0F30:0111.001E: unknown main item tag 0x0 [ 585.218984][ T5953] pantherlord 0003:0F30:0111.001E: hidraw0: USB HID v0.00 Device [HID 0f30:0111] on usb-dummy_hcd.5-1/input0 [ 585.241109][ T5953] pantherlord 0003:0F30:0111.001E: no output reports found [ 585.302999][ T973] usb 3-1: device descriptor read/64, error -71 [ 585.328776][ T5953] usb 6-1: USB disconnect, device number 2 [ 585.413162][ T973] usb usb3-port1: attempt power cycle [ 585.756738][ T973] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 585.785012][ T973] usb 3-1: device descriptor read/8, error -71 [ 585.875410][T12904] netlink: 'syz.4.1914': attribute type 9 has an invalid length. [ 585.883405][T12904] netlink: 211988 bytes leftover after parsing attributes in process `syz.4.1914'. [ 586.023257][ T973] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 586.126107][ T973] usb 3-1: device descriptor read/8, error -71 [ 586.231538][T12904] 9pnet: Could not find request transport: ff [ 586.303605][ T973] usb usb3-port1: unable to enumerate USB device [ 586.713518][T12919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1917'. [ 586.731331][T12919] bridge_slave_0: left allmulticast mode [ 586.737198][T12919] bridge_slave_0: left promiscuous mode [ 586.743147][T12919] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.859016][T12919] bridge_slave_1: left allmulticast mode [ 586.865108][T12919] bridge_slave_1: left promiscuous mode [ 586.871051][T12919] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.987972][T12923] /dev/nullb0: Can't open blockdev [ 587.130941][T12919] bond0: (slave bond_slave_0): Releasing backup interface [ 587.200205][T12919] bond0: (slave bond_slave_1): Releasing backup interface [ 587.215430][T12919] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.232568][T12919] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.252278][T12919] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.260550][T12919] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.288103][T12929] /dev/nullb0: Can't open blockdev [ 587.301843][ T30] audit: type=1400 audit(1753416976.068:826): avc: denied { read write } for pid=12928 comm="syz.3.1921" name="file0" dev="tmpfs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 587.326995][ T30] audit: type=1400 audit(1753416976.068:827): avc: denied { open } for pid=12928 comm="syz.3.1921" path="/408/file0" dev="tmpfs" ino=2175 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 587.385721][ T30] audit: type=1400 audit(1753416976.078:828): avc: denied { ioctl } for pid=12928 comm="syz.3.1921" path="/408/file0" dev="tmpfs" ino=2175 ioctlcmd=0x5451 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 587.438157][T12919] bond0: (slave wlan1): Releasing backup interface [ 587.673245][T10058] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 587.855231][T10058] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 587.880456][T10058] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 587.892600][T10058] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 587.917669][T10058] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 587.927688][T10058] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 587.933005][ T5953] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 587.936058][T10058] usb 6-1: Product: syz [ 587.949092][T12937] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1926'. [ 587.973123][T10058] usb 6-1: Manufacturer: syz [ 587.983613][T10058] usb 6-1: SerialNumber: syz [ 588.011389][T12940] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=2048 sclass=netlink_tcpdiag_socket pid=12940 comm=syz.3.1926 [ 588.122969][ T5953] usb 3-1: Using ep0 maxpacket: 8 [ 588.131639][ T5953] usb 3-1: config 1 interface 0 altsetting 7 endpoint 0x81 has an invalid bInterval 135, changing to 11 [ 588.145081][ T5953] usb 3-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 588.186592][ T5953] usb 3-1: config 1 interface 0 has no altsetting 0 [ 588.216802][ T5953] usb 3-1: New USB device found, idVendor=04f2, idProduct=1236, bcdDevice= 0.40 [ 588.226530][ T5953] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 588.245881][ T5953] usb 3-1: Product: Ђ [ 588.256882][ T5953] usb 3-1: SerialNumber: ш [ 588.478365][T12933] IPVS: set_ctl: invalid protocol: 123 100.1.1.2:20004 [ 588.494385][ T5953] usbhid 3-1:1.0: can't add hid device: -71 [ 588.502398][ T5953] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 588.517877][ T5953] usb 3-1: USB disconnect, device number 88 [ 588.627244][T10058] usb 6-1: 0:2 : does not exist [ 588.649495][T10058] usb 6-1: USB disconnect, device number 3 [ 588.841843][T12954] netlink: 'syz.3.1928': attribute type 9 has an invalid length. [ 588.849728][T12954] netlink: 211988 bytes leftover after parsing attributes in process `syz.3.1928'. [ 588.903017][T12954] 9pnet: Could not find request transport: ff [ 588.949931][T12957] netlink: 'syz.0.1929': attribute type 4 has an invalid length. [ 588.964228][T12957] netlink: 'syz.0.1929': attribute type 4 has an invalid length. [ 589.067446][T12960] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1930'. [ 589.142175][T12962] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 589.653981][ T9] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 589.793581][ T9] usb 6-1: device descriptor read/64, error -71 [ 589.892913][ T5918] usb 5-1: new high-speed USB device number 80 using dummy_hcd [ 590.054958][ T5918] usb 5-1: Using ep0 maxpacket: 16 [ 590.062923][ T9] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 590.075252][ T5918] usb 5-1: config 0 has an invalid interface number: 8 but max is 0 [ 590.093401][ T5953] usb 4-1: new high-speed USB device number 84 using dummy_hcd [ 590.094351][ T5918] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.133188][ T5918] usb 5-1: config 0 has no interface number 0 [ 590.149094][ T5918] usb 5-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.178551][ T5918] usb 5-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 590.188460][ T5918] usb 5-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 590.197813][ T5918] usb 5-1: Product: syz [ 590.202410][ T5918] usb 5-1: SerialNumber: syz [ 590.210540][ T5918] usb 5-1: config 0 descriptor?? [ 590.219099][ T5918] usbhid 5-1:0.8: couldn't find an input interrupt endpoint [ 590.223134][ T9] usb 6-1: device descriptor read/64, error -71 [ 590.262933][ T5953] usb 4-1: Using ep0 maxpacket: 16 [ 590.272610][ T5953] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 590.288216][ T5953] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 590.298411][ T5953] usb 4-1: config 0 has no interface number 0 [ 590.308174][ T5953] usb 4-1: config 0 interface 8 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 590.325582][ T5953] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 590.334934][ T5953] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 590.345282][ T9] usb usb6-port1: attempt power cycle [ 590.350916][ T5953] usb 4-1: Product: syz [ 590.358596][ T5953] usb 4-1: SerialNumber: syz [ 590.369703][ T5953] usb 4-1: config 0 descriptor?? [ 590.379722][ T5953] usbhid 4-1:0.8: couldn't find an input interrupt endpoint [ 590.473034][ T30] audit: type=1400 audit(1753416979.208:829): avc: denied { read append } for pid=12985 comm="syz.2.1941" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 590.497503][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.564817][ T30] audit: type=1400 audit(1753416979.218:830): avc: denied { open } for pid=12985 comm="syz.2.1941" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 590.592485][ T30] audit: type=1400 audit(1753416979.218:831): avc: denied { ioctl } for pid=12985 comm="syz.2.1941" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 ioctlcmd=0x9439 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 590.622567][ T30] audit: type=1400 audit(1753416979.218:832): avc: denied { map } for pid=12985 comm="syz.2.1941" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 590.646684][ C0] vkms_vblank_simulate: vblank timer overrun [ 590.782491][ T9] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 590.803584][ T9] usb 6-1: device descriptor read/8, error -71 [ 591.193770][ T9] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 591.306622][ T9] usb 6-1: device descriptor read/8, error -71 [ 591.436393][ T9] usb usb6-port1: unable to enumerate USB device [ 591.596919][ T30] audit: type=1400 audit(1753416980.358:833): avc: denied { sendto } for pid=6289 comm="kworker/u8:14" saddr=fe80::1b daddr=ff02::2 netif=teql0 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:node_t tclass=node permissive=1 [ 591.886275][T13003] netlink: 'syz.0.1945': attribute type 9 has an invalid length. [ 591.894390][T13003] netlink: 211988 bytes leftover after parsing attributes in process `syz.0.1945'. [ 591.998222][T13003] 9pnet: Could not find request transport: ff [ 592.695431][ T5918] usb 5-1: USB disconnect, device number 80 [ 593.235118][T10058] usb 4-1: USB disconnect, device number 84 [ 593.546273][ T30] audit: type=1800 audit(1753416982.308:834): pid=13018 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=set_data cause=unavailable-hash-algorithm comm="syz.3.1950" name="/newroot/415/file0" dev="tmpfs" ino=2213 res=0 errno=0 [ 593.633448][T13024] syz.4.1949: attempt to access beyond end of device [ 593.633448][T13024] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 593.647196][T13024] MINIX-fs: unable to read superblock [ 594.234651][ T30] audit: type=1400 audit(1753416982.988:835): avc: denied { accept } for pid=13034 comm="syz.3.1953" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 594.463016][T10058] usb 4-1: new high-speed USB device number 85 using dummy_hcd [ 595.163028][ T973] usb 5-1: new high-speed USB device number 81 using dummy_hcd [ 595.196012][T10058] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 595.304950][T10058] usb 4-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 595.314395][T10058] usb 4-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 595.322660][T10058] usb 4-1: Product: syz [ 595.330667][T10058] usb 4-1: Manufacturer: syz [ 595.337654][T10058] usb 4-1: SerialNumber: syz [ 595.347501][T10058] usb 4-1: config 0 descriptor?? [ 595.427541][ T973] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 595.435432][T10058] snd-usb-audio 4-1:0.0: probe with driver snd-usb-audio failed with error -22 [ 595.523096][ T973] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 595.571660][ T973] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 595.740571][ T973] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 595.748785][ T973] usb 5-1: SerialNumber: syz [ 595.796678][T13051] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=13051 comm=syz.5.1959 [ 595.876594][T10058] usb 4-1: USB disconnect, device number 85 [ 595.997867][ T30] audit: type=1400 audit(1753416984.758:836): avc: denied { getopt } for pid=13036 comm="syz.4.1954" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 596.022143][ T5850] Bluetooth: hci3: unexpected event for opcode 0x0c03 [ 596.044916][ T973] usb 5-1: 0:2 : does not exist [ 596.049908][ T973] usb 5-1: unit 5: unexpected type 0x0a [ 596.078759][T13060] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1961'. [ 596.078775][ T973] usb 5-1: USB disconnect, device number 81 [ 597.031526][T13070] TCP: TCP_TX_DELAY enabled [ 597.107325][ T43] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 597.348539][ T43] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 597.364610][ T43] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 597.378411][ T43] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 597.390122][ T43] usb 3-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 597.398412][ T43] usb 3-1: Product: syz [ 597.406429][T13066] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 597.417343][ T43] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 597.450109][ T973] usb 5-1: new high-speed USB device number 82 using dummy_hcd [ 597.617786][ T973] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 597.629438][ T973] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 597.657168][ T973] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 597.768485][ T973] usb 5-1: New USB device strings: Mfr=0, Product=13, SerialNumber=0 [ 597.776759][ T973] usb 5-1: Product: syz [ 597.786073][T13069] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 597.799079][ T973] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 598.030306][T13095] netlink: 'syz.5.1969': attribute type 2 has an invalid length. [ 599.354439][T13107] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 599.658867][T13112] netlink: 'syz.3.1973': attribute type 21 has an invalid length. [ 599.839495][T13112] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1973'. [ 600.176261][T13117] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1975'. [ 600.384025][ T5953] usb 3-1: USB disconnect, device number 89 [ 600.483987][ T973] usb 5-1: USB disconnect, device number 82 [ 600.862639][T13142] netlink: 'syz.5.1979': attribute type 5 has an invalid length. [ 601.072611][T13148] SELinux: policydb magic number 0x3eec5ae3 does not match expected magic number 0xf97cff8c [ 601.083547][T13148] SELinux: failed to load policy [ 601.153137][ T43] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 601.541782][ T43] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 601.591442][ T43] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 601.626552][ T43] usb 6-1: New USB device found, idVendor=2040, idProduct=4900, bcdDevice=4d.8b [ 601.636665][ T43] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 601.726489][ T43] usb 6-1: config 0 descriptor?? [ 602.027330][ T5953] usb 6-1: USB disconnect, device number 8 [ 602.056047][T13153] wg1 speed is unknown, defaulting to 1000 [ 603.393139][ T973] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 604.103097][ T973] usb 6-1: Using ep0 maxpacket: 32 [ 604.124821][ T973] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 604.134597][ T973] usb 6-1: config 0 has no interface number 0 [ 604.142758][T13201] xt_hashlimit: max too large, truncated to 1048576 [ 604.143916][ T973] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 604.158870][ T973] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 604.168125][ T973] usb 6-1: Product: syz [ 604.169275][T13201] ip6t_rpfilter: only valid in 'raw' or 'mangle' table, not '' [ 604.172417][ T973] usb 6-1: Manufacturer: syz [ 604.209943][ T973] usb 6-1: SerialNumber: syz [ 604.273678][ T973] usb 6-1: config 0 descriptor?? [ 604.283347][ T973] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 604.414226][ T5953] hid-generic 0000:0000:0000.001F: unknown main item tag 0x0 [ 604.466775][ T5953] hid-generic 0000:0000:0000.001F: hidraw0: HID v0.00 Device [syz1] on syz0 [ 604.494129][ T973] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 604.528305][ T973] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 605.016876][T13222] CIFS: Unable to determine destination address [ 605.025240][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 61 [ 605.890134][T13235] syz.4.2003: attempt to access beyond end of device [ 605.890134][T13235] nbd4: rw=0, sector=2, nr_sectors = 2 limit=0 [ 605.980331][T13235] MINIX-fs: unable to read superblock [ 606.395901][T13238] fuse: Bad value for 'fd' [ 606.456142][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 606.494736][T10058] usb 6-1: USB disconnect, device number 9 [ 606.510669][T10058] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 606.531167][T10058] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 606.543234][T13238] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2007'. [ 606.557871][T10058] quatech2 6-1:0.51: device disconnected [ 607.431013][T13252] netlink: 'syz.5.2008': attribute type 2 has an invalid length. [ 608.214673][ T30] audit: type=1326 audit(1753416996.968:837): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905a18e9a9 code=0x7ffc0000 [ 608.310544][ T30] audit: type=1326 audit(1753416996.978:838): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=103 compat=0 ip=0x7f905a18e9a9 code=0x7ffc0000 [ 608.378280][T13266] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=30122 sclass=netlink_route_socket pid=13266 comm=syz.0.2013 [ 608.399805][ T6289] Bluetooth: (null): Invalid header checksum [ 608.412994][ T30] audit: type=1400 audit(1753416997.048:839): avc: denied { bind } for pid=13258 comm="syz.0.2013" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 608.443113][ T6289] Bluetooth: (null): Invalid header checksum [ 608.495172][ T6289] Bluetooth: (null): Invalid header checksum [ 608.515902][ T30] audit: type=1326 audit(1753416997.278:840): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905a18e9a9 code=0x7ffc0000 [ 608.539891][T10058] usb 4-1: new high-speed USB device number 86 using dummy_hcd [ 608.578978][ T30] audit: type=1326 audit(1753416997.318:841): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13258 comm="syz.0.2013" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f905a18e9a9 code=0x7ffc0000 [ 608.611149][T11702] Bluetooth: (null): Invalid header checksum [ 608.853680][T10058] usb 4-1: Using ep0 maxpacket: 16 [ 608.863760][T10058] usb 4-1: config 0 has no interfaces? [ 608.879165][T10058] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 608.891822][ T6289] Bluetooth: (null): Invalid header checksum [ 608.908126][T10058] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 608.909383][ T6289] Bluetooth: (null): Invalid header checksum [ 608.918227][T10058] usb 4-1: Manufacturer: syz [ 609.236862][T13273] netlink: 'syz.4.2016': attribute type 2 has an invalid length. [ 611.029529][ T1162] Bluetooth: (null): Invalid header checksum [ 611.044192][ T1162] Bluetooth: (null): Invalid header checksum [ 611.054105][ T1162] Bluetooth: (null): Invalid header checksum [ 611.061137][ T1162] Bluetooth: (null): Invalid header checksum [ 611.069788][ T1162] Bluetooth: (null): Invalid header checksum [ 611.082514][ T1162] Bluetooth: (null): Invalid header checksum [ 611.091748][T10058] usb 4-1: config 0 descriptor?? [ 611.119613][ T1162] Bluetooth: (null): Invalid header checksum [ 611.134787][ T1162] Bluetooth: (null): Invalid header checksum [ 611.159662][ T1162] Bluetooth: (null): Invalid header checksum [ 611.171988][ T1162] Bluetooth: (null): Invalid header checksum [ 611.179398][ T1162] Bluetooth: (null): Invalid header checksum [ 611.185637][ T1162] Bluetooth: (null): Invalid header checksum [ 611.192069][ T1162] Bluetooth: (null): Invalid header checksum [ 611.198469][ T1162] Bluetooth: (null): Invalid header checksum [ 611.204986][ T1162] Bluetooth: (null): Invalid header checksum [ 611.211309][ T1162] Bluetooth: (null): Invalid header checksum [ 611.217741][ T1162] Bluetooth: (null): Invalid header checksum [ 611.224040][ T1162] Bluetooth: (null): Invalid header checksum [ 611.230356][ T1162] Bluetooth: (null): Invalid header checksum [ 611.236836][ T1162] Bluetooth: (null): Invalid header checksum [ 611.274055][ T9] usb 4-1: USB disconnect, device number 86 [ 611.619969][T13282] netlink: 'syz.0.2018': attribute type 2 has an invalid length. [ 614.471296][ T9] usb 5-1: new high-speed USB device number 83 using dummy_hcd [ 614.926203][ T9] usb 5-1: Using ep0 maxpacket: 32 [ 614.938314][ T9] usb 5-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 614.947731][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 614.965527][ T9] usb 5-1: config 0 descriptor?? [ 615.013715][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 615.062412][T13309] netlink: 'syz.3.2027': attribute type 21 has an invalid length. [ 615.221286][T13315] netlink: 'syz.5.2031': attribute type 1 has an invalid length. [ 615.240853][T13315] netlink: 216 bytes leftover after parsing attributes in process `syz.5.2031'. [ 615.431976][T13291] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 615.454545][T13291] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 615.482617][ T30] audit: type=1400 audit(1753417004.238:842): avc: denied { create } for pid=13290 comm="syz.4.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 615.522800][ T30] audit: type=1400 audit(1753417004.268:843): avc: denied { getopt } for pid=13290 comm="syz.4.2024" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 615.826280][T13334] netlink: 'syz.3.2035': attribute type 1 has an invalid length. [ 616.351911][ T9] gspca_vc032x: reg_w err -71 [ 616.356882][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.362188][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.367554][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.373265][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.378669][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.384690][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.390040][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.402939][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.412965][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.418303][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.489027][T13326] pim6reg: entered allmulticast mode [ 616.495657][T13326] pim6reg: left allmulticast mode [ 616.513261][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.518651][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.524123][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.529488][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.538190][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.558188][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.567506][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.582520][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 616.588602][ T9] gspca_vc032x: Unknown sensor... [ 616.593937][ T9] vc032x 5-1:0.0: probe with driver vc032x failed with error -22 [ 616.604327][ T9] usb 5-1: USB disconnect, device number 83 [ 618.444542][ T30] audit: type=1400 audit(1753417007.198:844): avc: denied { accept } for pid=13347 comm="syz.3.2039" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 618.489179][T13350] overlayfs: failed to clone upperpath [ 618.682277][ T43] IPVS: starting estimator thread 0... [ 618.697112][T13357] tipc: Started in network mode [ 618.702028][T13357] tipc: Node identity ac1414aa, cluster identity 4711 [ 618.718023][T13357] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 618.725624][T13357] tipc: Enabled bearer , priority 10 [ 618.733325][T13357] sctp: [Deprecated]: syz.5.2041 (pid 13357) Use of int in max_burst socket option. [ 618.733325][T13357] Use struct sctp_assoc_value instead [ 618.793089][T13358] IPVS: using max 39 ests per chain, 93600 per kthread [ 618.853388][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 618.950264][T13365] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2045'. [ 618.963096][ T43] usb 4-1: new high-speed USB device number 87 using dummy_hcd [ 619.002948][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 619.142980][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 619.282969][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 619.365772][ T43] usb 4-1: Using ep0 maxpacket: 8 [ 619.397871][ T43] usb 4-1: config 0 has an invalid interface number: 55 but max is 0 [ 619.421130][ T43] usb 4-1: config 0 has no interface number 0 [ 619.427390][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 619.562955][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 619.673453][ T43] usb 4-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 619.702964][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 619.722954][ T43] usb 4-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 619.763430][ T43] usb 4-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 619.805233][ T43] usb 4-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 619.853028][ T5918] tipc: Node number set to 2886997162 [ 619.872892][ T43] usb 4-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 619.892251][ T43] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 619.924909][ T43] usb 4-1: config 0 descriptor?? [ 619.934537][T13373] fuse: Unknown parameter '00000000000000000000004' [ 619.961573][ T43] ldusb 4-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 619.984486][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 620.252979][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 620.797921][T13383] xt_CT: No such helper "snmp" [ 620.808799][ T30] audit: type=1400 audit(1753417009.568:845): avc: denied { ioctl } for pid=13359 comm="syz.3.2042" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x937a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 622.582670][ T30] audit: type=1400 audit(1753417011.338:846): avc: denied { read } for pid=13414 comm="syz.5.2059" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 622.895852][T13429] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2064'. [ 623.912970][ C1] net_ratelimit: 3 callbacks suppressed [ 623.912994][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 624.235521][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 624.952965][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 625.905560][T13455] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 625.992977][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 626.724717][T13458] overlayfs: failed to clone upperpath [ 626.892743][T13466] fuse: Bad value for 'fd' [ 626.982323][T13463] netlink: 'syz.5.2073': attribute type 1 has an invalid length. [ 626.990352][T13463] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2073'. [ 627.033006][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 627.340367][ T43] usb 4-1: USB disconnect, device number 87 [ 627.353240][ T43] ldusb 4-1:0.55: LD USB Device #0 now disconnected [ 628.083192][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 628.132724][T13482] netlink: 'syz.5.2080': attribute type 10 has an invalid length. [ 628.224142][T13482] team0: Device hsr_slave_0 failed to register rx_handler [ 628.852267][T13496] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 628.951524][T13464] infiniband syz2: set down [ 628.988047][T13464] infiniband syz2: added syzkaller0 [ 629.018598][T13464] syz2: rxe_create_cq: returned err = -12 [ 629.033022][T13464] infiniband syz2: Couldn't create ib_mad CQ [ 629.036789][T13503] 9pnet_fd: Insufficient options for proto=fd [ 629.045595][T13464] infiniband syz2: Couldn't open port 1 [ 629.104811][T13464] RDS/IB: syz2: added [ 629.113148][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 629.115823][T13464] smc: adding ib device syz2 with port count 1 [ 629.163232][T13507] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2088'. [ 629.175528][T13464] smc: ib device syz2 port 1 has pnetid [ 629.328605][T13511] binder: BINDER_SET_CONTEXT_MGR already set [ 629.335316][T13511] binder: 13510:13511 ioctl 4018620d 200000000040 returned -16 [ 630.153317][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 630.310183][ T30] audit: type=1400 audit(1753417019.068:847): avc: denied { ioctl } for pid=13519 comm="syz.5.2093" path="socket:[39653]" dev="sockfs" ino=39653 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 630.618583][T13524] netlink: 'syz.5.2095': attribute type 1 has an invalid length. [ 630.721473][T13527] syz.3.2091: attempt to access beyond end of device [ 630.721473][T13527] nbd3: rw=0, sector=2, nr_sectors = 2 limit=0 [ 630.734448][T13527] MINIX-fs: unable to read superblock [ 630.889456][T13529] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 630.949663][T13529] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 631.031907][T13530] gretap1: entered promiscuous mode [ 631.177469][T13532] Process accounting resumed [ 631.193060][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 631.574952][T13538] wg1 speed is unknown, defaulting to 1000 [ 631.613936][ T30] audit: type=1400 audit(1753417020.378:848): avc: denied { create } for pid=13537 comm="syz.3.2101" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 632.232956][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 633.082997][ T973] usb 4-1: new high-speed USB device number 88 using dummy_hcd [ 633.272932][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 633.320079][T13568] netlink: 'syz.5.2103': attribute type 1 has an invalid length. [ 633.328222][T13568] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2103'. [ 633.658657][ T973] usb 4-1: config 0 has an invalid interface number: 156 but max is 0 [ 633.693039][ T973] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 633.816342][ T973] usb 4-1: config 0 has no interface number 0 [ 633.824839][ T973] usb 4-1: config 0 interface 156 altsetting 0 has an endpoint descriptor with address 0xFD, changing to 0x8D [ 633.939023][ T973] usb 4-1: config 0 interface 156 altsetting 0 endpoint 0x8D has invalid wMaxPacketSize 0 [ 633.949085][ T973] usb 4-1: config 0 interface 156 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 0 [ 633.963016][ T973] usb 4-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 633.972181][ T973] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 633.990323][ T973] usb 4-1: config 0 descriptor?? [ 634.010269][ T973] gspca_main: spca561-2.14.0 probing abcd:cdee [ 634.238925][T11702] smc: removing ib device syz2 [ 634.312949][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 634.573731][ T9] usb 6-1: new full-speed USB device number 10 using dummy_hcd [ 634.605849][T13583] syz.2.2108: attempt to access beyond end of device [ 634.605849][T13583] nbd2: rw=0, sector=2, nr_sectors = 2 limit=0 [ 634.619246][T13583] MINIX-fs: unable to read superblock [ 634.709690][ T973] spca561 4-1:0.156: probe with driver spca561 failed with error -22 [ 634.738598][ T973] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 634.748092][ T973] usb 4-1: MIDIStreaming interface descriptor not found [ 634.877527][ T9] usb 6-1: config 54 has an invalid descriptor of length 0, skipping remainder of the config [ 634.946072][ T9] usb 6-1: New USB device found, idVendor=15f4, idProduct=0015, bcdDevice=d1.6e [ 634.982443][ T9] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 635.011597][ T9] usb 6-1: Product: syz [ 635.028621][ T9] usb 6-1: Manufacturer: syz [ 635.039283][ T9] usb 6-1: SerialNumber: syz [ 635.096689][ T9] dvb-usb: found a 'Hanftek UMT-010 DVB-T USB2.0' in warm state. [ 635.156230][ T9] dvb-usb: bulk message failed: -22 (3/0) [ 635.195508][ T9] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 635.230427][ T9] dvb-usb: Hanftek UMT-010 DVB-T USB2.0 error while loading driver (-19) [ 635.249362][ T9] dvb_usb_umt_010 6-1:54.0: probe with driver dvb_usb_umt_010 failed with error -22 [ 635.297976][ T9] usb 6-1: USB disconnect, device number 10 [ 635.352927][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 635.414156][ T5953] usb 4-1: USB disconnect, device number 88 [ 636.392961][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 637.377652][ T30] audit: type=1326 audit(1753417026.138:849): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13610 comm="syz.0.2116" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f905a18e9a9 code=0x0 [ 637.432993][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 637.958140][ T30] audit: type=1400 audit(1753417026.688:850): avc: denied { ioctl } for pid=13618 comm="syz.5.2118" path="socket:[39841]" dev="sockfs" ino=39841 ioctlcmd=0x8b36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 638.472933][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 638.806371][T13642] tmpfs: Bad value for 'mpol' [ 639.443227][T13648] 8021q: adding VLAN 0 to HW filter on device bond3 [ 639.512972][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 639.897075][T13651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2125'. [ 640.554400][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 641.075369][T13669] FAULT_INJECTION: forcing a failure. [ 641.075369][T13669] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 641.077351][T13669] [ 641.077362][T13669] ====================================================== [ 641.077370][T13669] WARNING: possible circular locking dependency detected [ 641.077379][T13669] 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 Not tainted [ 641.077392][T13669] ------------------------------------------------------ [ 641.077399][T13669] syz.4.2131/13669 is trying to acquire lock: [ 641.077410][T13669] ffffffff8e4d2380 (console_owner){-.-.}-{0:0}, at: console_lock_spinning_enable+0x9f/0xd0 [ 641.077462][T13669] [ 641.077462][T13669] but task is already holding lock: [ 641.077468][T13669] ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 641.077515][T13669] [ 641.077515][T13669] which lock already depends on the new lock. [ 641.077515][T13669] [ 641.077522][T13669] [ 641.077522][T13669] the existing dependency chain (in reverse order) is: [ 641.077529][T13669] [ 641.077529][T13669] -> #4 (&rq->__lock){-.-.}-{2:2}: [ 641.077554][T13669] _raw_spin_lock_nested+0x31/0x40 [ 641.077581][T13669] raw_spin_rq_lock_nested+0x29/0x130 [ 641.077603][T13669] task_rq_lock+0xcf/0x490 [ 641.077625][T13669] cgroup_move_task+0x81/0x2a0 [ 641.077651][T13669] css_set_move_task+0x288/0x5f0 [ 641.077669][T13669] cgroup_post_fork+0x201/0x9e0 [ 641.077691][T13669] copy_process+0x5c82/0x7650 [ 641.077715][T13669] kernel_clone+0xfc/0x960 [ 641.077739][T13669] user_mode_thread+0xc7/0x110 [ 641.077762][T13669] rest_init+0x23/0x2b0 [ 641.077783][T13669] start_kernel+0x3ee/0x4d0 [ 641.077800][T13669] x86_64_start_reservations+0x18/0x30 [ 641.077817][T13669] x86_64_start_kernel+0x130/0x190 [ 641.077834][T13669] common_startup_64+0x13e/0x148 [ 641.077853][T13669] [ 641.077853][T13669] -> #3 (&p->pi_lock){-.-.}-{2:2}: [ 641.077878][T13669] _raw_spin_lock_irqsave+0x3a/0x60 [ 641.077904][T13669] try_to_wake_up+0xb2/0x1680 [ 641.077925][T13669] __wake_up_common+0x135/0x1f0 [ 641.077942][T13669] __wake_up+0x31/0x60 [ 641.077966][T13669] tty_port_default_wakeup+0x2a/0x40 [ 641.077987][T13669] serial8250_tx_chars+0x68e/0x860 [ 641.078008][T13669] serial8250_handle_irq+0x761/0xcb0 [ 641.078030][T13669] serial8250_default_handle_irq+0x9a/0x210 [ 641.078052][T13669] serial8250_interrupt+0x103/0x210 [ 641.078081][T13669] __handle_irq_event_percpu+0x229/0x7d0 [ 641.078105][T13669] handle_irq_event+0xab/0x1e0 [ 641.078126][T13669] handle_edge_irq+0x28e/0xab0 [ 641.078147][T13669] __common_interrupt+0xdf/0x250 [ 641.078169][T13669] common_interrupt+0xba/0xe0 [ 641.078191][T13669] asm_common_interrupt+0x26/0x40 [ 641.078210][T13669] pv_native_safe_halt+0xf/0x20 [ 641.078236][T13669] default_idle+0x13/0x20 [ 641.078255][T13669] default_idle_call+0x6d/0xb0 [ 641.078275][T13669] do_idle+0x391/0x510 [ 641.078297][T13669] cpu_startup_entry+0x4f/0x60 [ 641.078320][T13669] start_secondary+0x21d/0x2b0 [ 641.078344][T13669] common_startup_64+0x13e/0x148 [ 641.078362][T13669] [ 641.078362][T13669] -> #2 (&tty->write_wait){-...}-{3:3}: [ 641.078387][T13669] _raw_spin_lock_irqsave+0x3a/0x60 [ 641.078412][T13669] __wake_up+0x1c/0x60 [ 641.078435][T13669] tty_port_default_wakeup+0x2a/0x40 [ 641.078455][T13669] serial8250_tx_chars+0x68e/0x860 [ 641.078475][T13669] serial8250_handle_irq+0x761/0xcb0 [ 641.078496][T13669] serial8250_default_handle_irq+0x9a/0x210 [ 641.078519][T13669] serial8250_interrupt+0x103/0x210 [ 641.078542][T13669] __handle_irq_event_percpu+0x229/0x7d0 [ 641.078565][T13669] handle_irq_event+0xab/0x1e0 [ 641.078586][T13669] handle_edge_irq+0x28e/0xab0 [ 641.078607][T13669] __common_interrupt+0xdf/0x250 [ 641.078629][T13669] common_interrupt+0xba/0xe0 [ 641.078651][T13669] asm_common_interrupt+0x26/0x40 [ 641.078668][T13669] pv_native_safe_halt+0xf/0x20 [ 641.078695][T13669] default_idle+0x13/0x20 [ 641.078713][T13669] default_idle_call+0x6d/0xb0 [ 641.078733][T13669] do_idle+0x391/0x510 [ 641.078754][T13669] cpu_startup_entry+0x4f/0x60 [ 641.078777][T13669] start_secondary+0x21d/0x2b0 [ 641.078801][T13669] common_startup_64+0x13e/0x148 [ 641.078818][T13669] [ 641.078818][T13669] -> #1 (&port_lock_key){-.-.}-{3:3}: [ 641.078842][T13669] _raw_spin_lock_irqsave+0x3a/0x60 [ 641.078868][T13669] serial8250_console_write+0x181/0x1890 [ 641.078891][T13669] console_flush_all+0x801/0xc60 [ 641.078913][T13669] console_unlock+0xd8/0x210 [ 641.078933][T13669] vprintk_emit+0x418/0x6d0 [ 641.078955][T13669] _printk+0xc7/0x100 [ 641.078970][T13669] register_console+0xc2d/0x11b0 [ 641.078993][T13669] univ8250_console_init+0x5f/0x90 [ 641.079011][T13669] console_init+0x14f/0x680 [ 641.079028][T13669] start_kernel+0x29f/0x4d0 [ 641.079044][T13669] x86_64_start_reservations+0x18/0x30 [ 641.079066][T13669] x86_64_start_kernel+0x130/0x190 [ 641.079083][T13669] common_startup_64+0x13e/0x148 [ 641.079101][T13669] [ 641.079101][T13669] -> #0 (console_owner){-.-.}-{0:0}: [ 641.079125][T13669] __lock_acquire+0x126f/0x1c90 [ 641.079142][T13669] lock_acquire+0x179/0x350 [ 641.079158][T13669] console_lock_spinning_enable+0xb0/0xd0 [ 641.079179][T13669] console_flush_all+0x7aa/0xc60 [ 641.079201][T13669] console_unlock+0xd8/0x210 [ 641.079222][T13669] vprintk_emit+0x418/0x6d0 [ 641.079244][T13669] _printk+0xc7/0x100 [ 641.079260][T13669] should_fail_ex+0x4e7/0x640 [ 641.079287][T13669] strncpy_from_user+0x3b/0x2e0 [ 641.079312][T13669] strncpy_from_user_nofault+0x7f/0x180 [ 641.079331][T13669] bpf_probe_read_user_str+0x26/0x70 [ 641.079358][T13669] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 641.079374][T13669] bpf_trace_run4+0x249/0x5a0 [ 641.079392][T13669] __bpf_trace_sched_switch+0x145/0x190 [ 641.079415][T13669] __traceiter_sched_switch+0x6c/0xc0 [ 641.079435][T13669] __schedule+0x1bee/0x5dd0 [ 641.079460][T13669] preempt_schedule_irq+0x51/0x90 [ 641.079487][T13669] irqentry_exit+0x36/0x90 [ 641.079503][T13669] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 641.079522][T13669] vfs_write+0x384/0x1150 [ 641.079547][T13669] ksys_write+0x12a/0x250 [ 641.079571][T13669] do_syscall_64+0xcd/0x4c0 [ 641.079588][T13669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.079607][T13669] [ 641.079607][T13669] other info that might help us debug this: [ 641.079607][T13669] [ 641.079613][T13669] Chain exists of: [ 641.079613][T13669] console_owner --> &p->pi_lock --> &rq->__lock [ 641.079613][T13669] [ 641.079640][T13669] Possible unsafe locking scenario: [ 641.079640][T13669] [ 641.079646][T13669] CPU0 CPU1 [ 641.079652][T13669] ---- ---- [ 641.079657][T13669] lock(&rq->__lock); [ 641.079669][T13669] lock(&p->pi_lock); [ 641.079682][T13669] lock(&rq->__lock); [ 641.079695][T13669] lock(console_owner); [ 641.079707][T13669] [ 641.079707][T13669] *** DEADLOCK *** [ 641.079707][T13669] [ 641.079712][T13669] 6 locks held by syz.4.2131/13669: [ 641.079723][T13669] #0: ffff88807935d0b8 (&f->f_pos_lock){+.+.}-{4:4}, at: fdget_pos+0x2a2/0x370 [ 641.079767][T13669] #1: ffff888056a84428 (sb_writers#3){.+.+}-{0:0}, at: ksys_write+0x12a/0x250 [ 641.079822][T13669] #2: ffff8880b843a2d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x7e/0x130 [ 641.079870][T13669] #3: ffffffff8e5c4e00 (rcu_read_lock){....}-{1:3}, at: bpf_trace_run4+0x1cf/0x5a0 [ 641.079914][T13669] #4: ffffffff8e5b27c0 (console_lock){+.+.}-{0:0}, at: _printk+0xc7/0x100 [ 641.079957][T13669] #5: ffffffff8e5b2830 (console_srcu){....}-{0:0}, at: console_flush_all+0x158/0xc60 [ 641.080004][T13669] [ 641.080004][T13669] stack backtrace: [ 641.080014][T13669] CPU: 0 UID: 0 PID: 13669 Comm: syz.4.2131 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 641.080039][T13669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 641.080052][T13669] Call Trace: [ 641.080058][T13669] [ 641.080085][T13669] dump_stack_lvl+0x116/0x1f0 [ 641.080105][T13669] print_circular_bug+0x275/0x350 [ 641.080135][T13669] check_noncircular+0x14c/0x170 [ 641.080167][T13669] __lock_acquire+0x126f/0x1c90 [ 641.080191][T13669] lock_acquire+0x179/0x350 [ 641.080208][T13669] ? console_lock_spinning_enable+0x9f/0xd0 [ 641.080233][T13669] ? console_lock_spinning_enable+0x88/0xd0 [ 641.080260][T13669] console_lock_spinning_enable+0xb0/0xd0 [ 641.080283][T13669] ? console_lock_spinning_enable+0x9f/0xd0 [ 641.080306][T13669] console_flush_all+0x7aa/0xc60 [ 641.080333][T13669] ? __pfx_console_flush_all+0x10/0x10 [ 641.080360][T13669] ? is_printk_cpu_sync_owner+0x32/0x40 [ 641.080389][T13669] console_unlock+0xd8/0x210 [ 641.080412][T13669] ? __pfx_console_unlock+0x10/0x10 [ 641.080434][T13669] ? do_raw_spin_unlock+0xf0/0x230 [ 641.080458][T13669] ? _printk+0xc7/0x100 [ 641.080476][T13669] ? __down_trylock_console_sem+0xb0/0x140 [ 641.080497][T13669] vprintk_emit+0x418/0x6d0 [ 641.080522][T13669] ? __pfx_vprintk_emit+0x10/0x10 [ 641.080545][T13669] ? do_user_addr_fault+0x927/0x1370 [ 641.080575][T13669] ? rcu_is_watching+0x12/0xc0 [ 641.080601][T13669] _printk+0xc7/0x100 [ 641.080618][T13669] ? __pfx__printk+0x10/0x10 [ 641.080639][T13669] ? __pfx____ratelimit+0x10/0x10 [ 641.080666][T13669] ? __lock_acquire+0x622/0x1c90 [ 641.080687][T13669] should_fail_ex+0x4e7/0x640 [ 641.080714][T13669] ? lock_acquire+0x179/0x350 [ 641.080733][T13669] strncpy_from_user+0x3b/0x2e0 [ 641.080758][T13669] ? lock_acquire+0x179/0x350 [ 641.080777][T13669] strncpy_from_user_nofault+0x7f/0x180 [ 641.080799][T13669] bpf_probe_read_user_str+0x26/0x70 [ 641.080826][T13669] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 641.080842][T13669] bpf_trace_run4+0x249/0x5a0 [ 641.080862][T13669] ? __pfx_bpf_trace_run4+0x10/0x10 [ 641.080884][T13669] ? __lock_acquire+0xb8a/0x1c90 [ 641.080904][T13669] ? __lock_acquire+0xb8a/0x1c90 [ 641.080923][T13669] __bpf_trace_sched_switch+0x145/0x190 [ 641.080947][T13669] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 641.080974][T13669] ? plist_check_prev_next+0x12a/0x1a0 [ 641.081000][T13669] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 641.081026][T13669] __traceiter_sched_switch+0x6c/0xc0 [ 641.081047][T13669] ? set_next_task_rt+0x403/0x6a0 [ 641.081080][T13669] __schedule+0x1bee/0x5dd0 [ 641.081115][T13669] ? __pfx___schedule+0x10/0x10 [ 641.081147][T13669] ? mark_held_locks+0x49/0x80 [ 641.081177][T13669] preempt_schedule_irq+0x51/0x90 [ 641.081206][T13669] irqentry_exit+0x36/0x90 [ 641.081223][T13669] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 641.081243][T13669] RIP: 0010:vfs_write+0x384/0x1150 [ 641.081271][T13669] Code: 24 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 9d 0c 00 00 49 8b 5c 24 28 48 8b b4 24 60 01 00 00 <48> 8d bb 28 04 00 00 e8 e0 a6 65 ff bf 01 00 00 00 e8 d6 95 56 ff [ 641.081291][T13669] RSP: 0018:ffffc90003dcfd28 EFLAGS: 00000246 [ 641.081306][T13669] RAX: dffffc0000000000 RBX: ffff888056a84000 RCX: ffffffff8232dbf7 [ 641.081321][T13669] RDX: 1ffff1100fc5e8b8 RSI: ffffffff8232ef1a RDI: ffff88807e2f45c0 [ 641.081335][T13669] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000008000 [ 641.081348][T13669] R10: 0000000000008000 R11: 0000000000000001 R12: ffff88807e2f4598 [ 641.081361][T13669] R13: ffff88807e2f4598 R14: 0000000000000000 R15: 1ffff920007b9faf [ 641.081379][T13669] ? vfs_write+0x347/0x1150 [ 641.081404][T13669] ? ksys_write+0x12a/0x250 [ 641.081433][T13669] ? vfs_write+0x357/0x1150 [ 641.081461][T13669] ? __pfx___mutex_lock+0x10/0x10 [ 641.081481][T13669] ? __pfx_vfs_write+0x10/0x10 [ 641.081507][T13669] ? lockdep_hardirqs_on+0x7c/0x110 [ 641.081544][T13669] ksys_write+0x12a/0x250 [ 641.081570][T13669] ? __pfx_ksys_write+0x10/0x10 [ 641.081602][T13669] do_syscall_64+0xcd/0x4c0 [ 641.081622][T13669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 641.081642][T13669] RIP: 0033:0x7fa6b558d45f [ 641.081657][T13669] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 641.081676][T13669] RSP: 002b:00007fa6b6495030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 641.081694][T13669] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007fa6b558d45f [ 641.081707][T13669] RDX: 0000000000000001 RSI: 00007fa6b6495090 RDI: 0000000000000009 [ 641.081720][T13669] RBP: 00007fa6b6495090 R08: 0000000000000000 R09: 00007fa6b6494df7 [ 641.081733][T13669] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 641.081745][T13669] R13: 0000000000000000 R14: 00007fa6b57b6160 R15: 00007fffe2d29f78 [ 641.081765][T13669] [ 642.323959][T13669] CPU: 0 UID: 0 PID: 13669 Comm: syz.4.2131 Not tainted 6.16.0-rc7-syzkaller-00034-g25fae0b93d1d #0 PREEMPT(full) [ 642.323978][T13669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 642.323986][T13669] Call Trace: [ 642.323992][T13669] [ 642.323999][T13669] dump_stack_lvl+0x116/0x1f0 [ 642.324016][T13669] should_fail_ex+0x512/0x640 [ 642.324034][T13669] ? lock_acquire+0x179/0x350 [ 642.324045][T13669] strncpy_from_user+0x3b/0x2e0 [ 642.324060][T13669] ? lock_acquire+0x179/0x350 [ 642.324071][T13669] strncpy_from_user_nofault+0x7f/0x180 [ 642.324084][T13669] bpf_probe_read_user_str+0x26/0x70 [ 642.324101][T13669] bpf_prog_bc7c5c6b9645592f+0x3e/0x44 [ 642.324110][T13669] bpf_trace_run4+0x249/0x5a0 [ 642.324122][T13669] ? __pfx_bpf_trace_run4+0x10/0x10 [ 642.324133][T13669] ? __lock_acquire+0xb8a/0x1c90 [ 642.324144][T13669] ? __lock_acquire+0xb8a/0x1c90 [ 642.324154][T13669] __bpf_trace_sched_switch+0x145/0x190 [ 642.324169][T13669] ? __pfx___bpf_trace_sched_switch+0x10/0x10 [ 642.324183][T13669] ? plist_check_prev_next+0x12a/0x1a0 [ 642.324198][T13669] ? tracing_record_taskinfo_sched_switch+0x54/0x400 [ 642.324213][T13669] __traceiter_sched_switch+0x6c/0xc0 [ 642.324225][T13669] ? set_next_task_rt+0x403/0x6a0 [ 642.324242][T13669] __schedule+0x1bee/0x5dd0 [ 642.324263][T13669] ? __pfx___schedule+0x10/0x10 [ 642.324281][T13669] ? mark_held_locks+0x49/0x80 [ 642.324298][T13669] preempt_schedule_irq+0x51/0x90 [ 642.324315][T13669] irqentry_exit+0x36/0x90 [ 642.324324][T13669] asm_sysvec_reschedule_ipi+0x1a/0x20 [ 642.324338][T13669] RIP: 0010:vfs_write+0x384/0x1150 [ 642.324355][T13669] Code: 24 28 48 b8 00 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 0f 85 9d 0c 00 00 49 8b 5c 24 28 48 8b b4 24 60 01 00 00 <48> 8d bb 28 04 00 00 e8 e0 a6 65 ff bf 01 00 00 00 e8 d6 95 56 ff [ 642.324366][T13669] RSP: 0018:ffffc90003dcfd28 EFLAGS: 00000246 [ 642.324376][T13669] RAX: dffffc0000000000 RBX: ffff888056a84000 RCX: ffffffff8232dbf7 [ 642.324383][T13669] RDX: 1ffff1100fc5e8b8 RSI: ffffffff8232ef1a RDI: ffff88807e2f45c0 [ 642.324391][T13669] RBP: 0000000000000001 R08: 0000000000000003 R09: 0000000000008000 [ 642.324397][T13669] R10: 0000000000008000 R11: 0000000000000001 R12: ffff88807e2f4598 [ 642.324404][T13669] R13: ffff88807e2f4598 R14: 0000000000000000 R15: 1ffff920007b9faf [ 642.324413][T13669] ? vfs_write+0x347/0x1150 [ 642.324428][T13669] ? ksys_write+0x12a/0x250 [ 642.324444][T13669] ? vfs_write+0x357/0x1150 [ 642.324460][T13669] ? __pfx___mutex_lock+0x10/0x10 [ 642.324471][T13669] ? __pfx_vfs_write+0x10/0x10 [ 642.324486][T13669] ? lockdep_hardirqs_on+0x7c/0x110 [ 642.324507][T13669] ksys_write+0x12a/0x250 [ 642.324522][T13669] ? __pfx_ksys_write+0x10/0x10 [ 642.324539][T13669] do_syscall_64+0xcd/0x4c0 [ 642.324551][T13669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.324562][T13669] RIP: 0033:0x7fa6b558d45f [ 642.324572][T13669] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 f9 92 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 4c 93 02 00 48 [ 642.324582][T13669] RSP: 002b:00007fa6b6495030 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 642.324592][T13669] RAX: ffffffffffffffda RBX: 0000000000000009 RCX: 00007fa6b558d45f [ 642.324599][T13669] RDX: 0000000000000001 RSI: 00007fa6b6495090 RDI: 0000000000000009 [ 642.324606][T13669] RBP: 00007fa6b6495090 R08: 0000000000000000 R09: 00007fa6b6494df7 [ 642.324613][T13669] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 642.324620][T13669] R13: 0000000000000000 R14: 00007fa6b57b6160 R15: 00007fffe2d29f78 [ 642.324630][T13669] [ 642.328000][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 643.352931][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 644.395008][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 645.432945][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 646.474457][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 647.512913][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 648.554649][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 649.592935][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 650.634569][ C1] IPVS: sed: UDP 224.0.0.2:0 - no destination available