last executing test programs: 4m11.020789051s ago: executing program 3 (id=251): r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan0\x00'}) syz_open_dev$usbfs(0x0, 0x74, 0x101301) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x88, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) io_submit(0x0, 0x2, &(0x7f0000000400)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x1, 0xffffffffffffffff, &(0x7f00000004c0)="376ad38386af873cda69f74419eac89e3c224d1b894236ac246e7367f7d86ce9f44d40b685b8674252e81873d426a876be2c3db0c42a5b930a0ed53fdf303080915bf049fccc72fe21a9ca47c16c40dbcf0920ef9185b3e0e9e0060d6503e5ff7567512602e6c6efb5c96979f442ec0e95ebdec177371a12c22ea2f52c6b4272e1e27526314e64acc8229bacb869faa863008c9793dba2ab2a3669b0eb8a2a01d7a3008bb14587815a156096e1bee4a91362c582d2d43d2989c7b0f312731057c336d524fffc9e5fcf9c93a75c4ef16b", 0xd0, 0x5, 0x0, 0x0, r0}, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x3, 0xe63, r0, &(0x7f00000005c0)="47b276182556198127d7f9d1857d1875380efc6d5c436977bb999384a9578ea369670cfb4f63a0defaa9bcd682c0a50190d6f2bb14c2c595af59a21643c0065a694a32b599f0546ad1f8fd065b20dbeffaa2b9b095d74992c9af3c8416c4f4a0d2bfc2ab5b87d467ea215dfb7fb99cc358811fb2cfd2f0927bcbec90065f3dce591e87bf74d8522edebccc825103", 0x8e, 0x6, 0x0, 0x1}]) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) ioctl$IOCTL_CONFIG_SYS_RESOURCE_PARAMETERS(0xffffffffffffffff, 0x40096100, 0x0) syz_io_uring_setup(0x7adc, &(0x7f0000000240)={0x0, 0x408c, 0x4, 0x0, 0x81}, &(0x7f00000002c0), &(0x7f0000000300)) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sm3\x00'}, 0x58) r6 = accept4(r5, 0x0, 0x0, 0x0) sendmsg$kcm(r6, &(0x7f0000001880)={0x0, 0x0, &(0x7f0000001600)=[{&(0x7f00000003c0)="93e24a327200"/17, 0x11}, {&(0x7f0000000440)="bcc9b1590200de9e5de63a46ef5d84ff3ca4f7cfd6c5bd0380b5408b61548ab173f26bd12d5f6a4606c67a52f258e7756a7e36bce705c4354564268813be3162244a146c5405f2ab59095babd7559589b1ba33374687a36402408e79ab988edef88fc338", 0x64}, {&(0x7f0000001680)="094fb143daa9baa36aaa2c", 0xb}], 0x3}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x0, 0x0, 0xebf7, 0x181, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) io_uring_enter(0xffffffffffffffff, 0x0, 0x2, 0xf, &(0x7f0000000000)={[0x7]}, 0x8) r7 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) mq_unlink(&(0x7f0000000040)='\x7f+\x04\x94NjN|\xe6\xa5\xe32\xde\xbb\x1a\xff\xa8\xdeJ\xd4gy\nZeW\x83\xf80\xfa\xb6\x83sP\xb7\xd7\x887\f\xb81\xa8\x92\ne\xfd\x89\x88J\x9b\xedpq\xf2\xb4\x84\xc8\x03\xf7\x14sawo\x8b\xb3J\xaa\x850.W\xd3\xe2\xf5\xf1\xf8\xc2~V\\\xe9\xa8[\x9f\x8d*\xe1\xa3\xe5*\xd1\xf2\xb8\'R\xaaW\x03V>-\x01\xc9\x1d75\xba\x03r\x99\x82\x13\v\xc9Z\xe3\xfaL\x05\xf8\x8b\x10\x06\xc8\v1DW\xc7n\x1f\xe1\xb4\xd0\x11\xf3\x14\xbe\xf5\xc0\b\x1f\xb8\v\xdc5d5\x95\x99N^\x8f\xd2\xf4b~c\x0f\xbe,\f\xa9\x06\x92R\xe1w\"\xd9\xa0^|\x90\v\xdfe\x03\xcf\n\xcb>\xd0\x04D-\x8d\x7fs\xdcq\xe5\xc7\xbeqR\x8e\xb2o\xf8\x15\xbd\xdcK\x8d\b\b}\x1c\x9e\x95f\xf1\xc1\xff\xe3\xac\xfe0\x1a\xcd\xfc\b}\x96p\xb8C\xa9\xda\xfc\xf9\x84\xff5\xdcB\b\xe5\x03<\xc4nc\xc9\xe6\xaa\r\x8b\xca\x1f\x82\xa0\xdd`t\xbe\x91\xea:\xec\xdd\xed[\x9d\xa1\xff\x8f\x85b\xa3\xbb\xa6\xc4\xbb\x92\xc0\xa3\xe1\xed@\xd6a\x05\xb9\x13O\x84\x0ea,j\xce\xaew\xcf\xa4E\xe4a\xf3w\xe7\xf5dG\x8d\x15I\xfc\xdak\xb0c!\x1a\t$\x8a\xbe\x14\x0eK\xa2\x94,:\xa6\xd6\xc017uZ\xba\x0f+\xc4X,~\x8fW\x84\xe0T\xfdF\x05Q\f\xf0\t\x9a\xa4\x1e`\x9d\bv\xc3T\xe8`\t\xa0\x93]J\xe0j2\x93I\xad\x1d\x00\xb1\xe5\x17\xb8\xc3%P\x89I=\x89d\x17\fM\xba\a\xea\x04\xe3hQS\xe0\xd0\xeb\xfa\xaa\x93z!\xf6\xd0y\xb2') sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x952f, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x558}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 4m8.683286052s ago: executing program 3 (id=256): r0 = io_uring_setup(0x66a, &(0x7f0000000000)) r1 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r1, 0xaf01, 0x0) r2 = eventfd(0x0) ioctl$VHOST_SET_LOG_FD(r1, 0x4004af07, &(0x7f0000000240)=r2) close_range(r0, 0xffffffffffffffff, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000ec0)={'batadv0\x00', 0x0}) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000440)={0x1c, r5, 0x303, 0x0, 0x0, {0xa}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x1c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000680)=ANY=[@ANYBLOB="240000003e00010600"], 0x24}], 0x1}, 0x0) 4m8.5035402s ago: executing program 3 (id=258): ioprio_set$pid(0x1, 0x0, 0x0) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000040)=0x1f00, 0x12) r1 = openat$ptp0(0xffffffffffffff9c, &(0x7f00000001c0), 0x7024c1, 0x0) read$ptp(r1, &(0x7f0000000000)=""/14, 0xe) 4m8.442162751s ago: executing program 3 (id=259): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000640)=[@in6={0xa, 0x4e21, 0x8, @private0, 0x20000}]}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x71, &(0x7f0000000500)={r4, 0x40}, 0x8) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000300)) syz_usb_connect(0x5, 0x7f, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x9b, 0xc7, 0x39, 0x10, 0xbda, 0x8191, 0x7a45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x6d, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x99, 0x5f, 0x2, 0xff, 0xff, 0xff, 0x0, [@generic={0x49, 0x21, "c4610e7d365ff7f92fc7e6f5bdbee804a7eeae17d83fba3e490b0d79635d02bbe88e1634ad297d0bcffc123327f4768eb1468440a1d5084ceb31a80a1ef768a09f302c7be18160"}], [{{0x9, 0x5, 0xb, 0x8, 0x20, 0x6, 0xe, 0x8}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x9, 0x0, 0x1}}]}}]}}]}}, 0x0) 4m6.866909783s ago: executing program 3 (id=265): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='net/udp\x00') preadv(r0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) r1 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=@newtfilter={0x24, 0x2c, 0x200, 0x70bd26, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0xb}, {0xf, 0x7}, {0x5, 0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="1802000001000000000000000000000085000000870000001801000020696e2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000170000009500"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x1}, {}, {0x6}}, [@filter_kind_options=@f_basic={{0xa}, {0x20, 0x2, [@TCA_BASIC_EMATCHES={0x1c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_META={0xc, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x3}}}]}]}]}}]}, 0x50}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = creat(&(0x7f0000000400)='./bus\x00', 0x0) r6 = open(&(0x7f0000000100)='./bus\x00', 0x0, 0x0) write$binfmt_elf64(r5, &(0x7f00000002c0)=ANY=[], 0x76) dup3(r6, r5, 0x0) write$binfmt_elf64(r5, &(0x7f0000000580)=ANY=[@ANYBLOB="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"/2590], 0xa1e) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$PIO_UNIMAP(r7, 0x4b52, &(0x7f0000000040)={0x0, 0x0}) r8 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r8, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000001c0)='freezer.self_freezing\x00', 0x0, 0x0) syz_usb_control_io$hid(r8, 0x0, &(0x7f0000000140)={0x2c, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r8, 0x0, 0x0) 4m3.218718027s ago: executing program 3 (id=271): ftruncate(0xffffffffffffffff, 0x7fffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x2000000000000048, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0xfdef, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') preadv(r4, &(0x7f0000001100)=[{&(0x7f0000000800)=""/92, 0x5c}, {0x0}, {0x0}], 0x3, 0x8000012e, 0x81) fchdir(0xffffffffffffffff) creat(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'virt_wifi0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@delqdisc={0x154, 0x25, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x10}, {0x8}, {0x2, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6, 0x3, 0x81, 0x1, 0x7, 0x3, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0x3, 0x2, 0x6, 0xd, 0x1, 0xa, 0x9, 0x1}}, {0x6, 0x2, [0x10]}}, {{0x1c, 0x1, {0xe, 0x0, 0x8, 0xfffffff9, 0x0, 0x10001, 0x0, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x1, 0x7, 0x81, 0x7, 0x1, 0x80, 0x1, 0x6}}, {0x10, 0x2, [0x8, 0x1, 0x397, 0x1, 0x4, 0x0]}}, {{0x1c, 0x1, {0xfd, 0x6, 0x7, 0xeea0, 0x0, 0x9, 0x10, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x7f, 0x1, 0x8, 0x7c, 0x2, 0xa584, 0x5, 0x6}}, {0x10, 0x2, [0x5, 0x6, 0x94a, 0x5, 0x8, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x154}}, 0x20011010) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)='{', 0x1, 0x8040, 0x0, 0x0) 3m47.783378109s ago: executing program 32 (id=271): ftruncate(0xffffffffffffffff, 0x7fffffffffffffff) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x200007fd, &(0x7f0000000300)={0x2, 0x4e23, @local}, 0x10) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0x6, 0x2000000000000048, &(0x7f0000000240)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x2d, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00', 0x0}) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000000c0)={r0, r1, 0x25, 0x0, @val=@kprobe_multi=@syms={0x0, 0x0, 0x0}}, 0x40) syz_emit_ethernet(0xfdef, 0x0, 0x0) r2 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x10008, 0x8b}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = syz_open_procfs(0x0, &(0x7f00000001c0)='net/dev_mcast\x00') preadv(r4, &(0x7f0000001100)=[{&(0x7f0000000800)=""/92, 0x5c}, {0x0}, {0x0}], 0x3, 0x8000012e, 0x81) fchdir(0xffffffffffffffff) creat(&(0x7f0000000dc0)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000280)=ANY=[@ANYRESOCT=r2], 0x0) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000c80)={'virt_wifi0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@delqdisc={0x154, 0x25, 0x200, 0x70bd2b, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x9, 0x10}, {0x8}, {0x2, 0x5}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x7}, @qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8, 0x1, 0x7}, @TCA_HHF_ADMIT_BYTES={0x8, 0x5, 0x7}]}}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}, @TCA_STAB={0xec, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x6, 0x3, 0x81, 0x1, 0x7, 0x3, 0x1}}, {0x6, 0x2, [0x8000]}}, {{0x1c, 0x1, {0x3, 0x2, 0x6, 0xd, 0x1, 0xa, 0x9, 0x1}}, {0x6, 0x2, [0x10]}}, {{0x1c, 0x1, {0xe, 0x0, 0x8, 0xfffffff9, 0x0, 0x10001, 0x0, 0x1}}, {0x6, 0x2, [0x4]}}, {{0x1c, 0x1, {0x1, 0x7, 0x81, 0x7, 0x1, 0x80, 0x1, 0x6}}, {0x10, 0x2, [0x8, 0x1, 0x397, 0x1, 0x4, 0x0]}}, {{0x1c, 0x1, {0xfd, 0x6, 0x7, 0xeea0, 0x0, 0x9, 0x10, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x7f, 0x1, 0x8, 0x7c, 0x2, 0xa584, 0x5, 0x6}}, {0x10, 0x2, [0x5, 0x6, 0x94a, 0x5, 0x8, 0x7]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x9}]}, 0x154}}, 0x20011010) sendto$inet(0xffffffffffffffff, &(0x7f0000000180)='{', 0x1, 0x8040, 0x0, 0x0) 1m13.361993287s ago: executing program 1 (id=1278): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x8912, &(0x7f0000000040)={'wg2\x00', @random="09a18a4ffcab"}) 1m12.258102045s ago: executing program 1 (id=1285): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x4801}) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r1, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) 1m11.952033594s ago: executing program 1 (id=1295): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000008c0)={0x0, &(0x7f0000000880)=""/27, 0x0, 0xfffffffffffffde5, 0x1, 0xfffff806, 0x10000, @value}, 0x28) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000340)={r1, 0x58, &(0x7f00000008c0)}, 0x10) 1m11.827858194s ago: executing program 1 (id=1301): lsetxattr$system_posix_acl(0x0, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000ddffffff850000002d00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0x17, &(0x7f0000000c80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000180100002020001000000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000780)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="5aee41dea43e9eee28e622e563a3", 0x0, 0x3000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800}, 0x50) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41000, 0x57, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0xa) sendmsg$NFNL_MSG_CTHELPER_GET(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x854}, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0x2, 0x0, 0x0) mknod(&(0x7f0000002800)='./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x200, 0x40000000) bind$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) connect$inet(0xffffffffffffffff, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r6 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg(r6, &(0x7f0000001500), 0x588, 0x0) 1m8.177916313s ago: executing program 1 (id=1310): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xffffffff}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r3, 0x4018620d, &(0x7f0000000100)) r4 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40086602, &(0x7f0000000200)=0x10) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'sha1-generic\x00'}, 0x58) r5 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000180)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f00000003c0)={0x8, 0x0, &(0x7f0000000300)=[@acquire], 0x0, 0x0, 0x0}) ioctl$BINDER_WRITE_READ(r5, 0xc0306201, &(0x7f0000000480)={0x20, 0x0, &(0x7f0000000000)=[@request_death, @clear_death], 0x0, 0x0, 0x0}) r6 = openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) lseek(r6, 0x851, 0x0) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) r8 = dup(r7) write$UHID_INPUT(r8, &(0x7f0000001040)={0x9b, {"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", 0xfffffffffffffebd}}, 0x1006) 1m6.728157736s ago: executing program 1 (id=1312): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYBLOB="da"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) bind$packet(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) 51.396752806s ago: executing program 33 (id=1312): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r0, 0x660c) ioctl$PPPIOCSACTIVE(r0, 0x40107446, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r1 = syz_usb_connect(0x0, 0x3f, &(0x7f0000000080)=ANY=[@ANYBLOB="11010000733336088dee1adb23610000000109022d0001100000000904000003fe03010009cd8d1f000200000009050502000000001009058b1e20"], 0x0) r2 = accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000000)) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'team_slave_0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYRES32=r4, @ANYBLOB="da"], 0x20}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0}}, 0x0) bind$packet(r2, 0x0, 0x0) syz_usb_control_io(r1, 0x0, &(0x7f0000000300)={0x84, &(0x7f0000001a80)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r6 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x32) ioctl$FS_IOC_GETVERSION(r6, 0xc0145b0e, &(0x7f0000000040)) 11.924034627s ago: executing program 2 (id=1493): openat$sequencer(0xffffffffffffff9c, &(0x7f0000000080), 0x44e81, 0x64) 11.608153131s ago: executing program 0 (id=1495): socket$inet6(0xa, 0x6, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000900)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 11.607619499s ago: executing program 2 (id=1496): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000011c0)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0), 0x0, 0x20000040, 0x0, 0x0) close_range(r1, r0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) read(r1, &(0x7f0000000580)=""/215, 0xd7) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESDEC=r5, @ANYRES16], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, 0x0, 0x0) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)) r8 = syz_usb_connect(0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r6], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) 10.035194711s ago: executing program 0 (id=1501): pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000003c0)=[{&(0x7f00000000c0)="17e4f3ca3c05", 0x2b}, {&(0x7f0000000200)="abc46908b3df918fe61946b2a7d85cf473884b91c53b94d51db7a5918ed07847c392ee17a23d6fea6e8d3c0f5e15638daf629312107876c7f31ade70432bc5b43f642876bf7e04c45086b9b3695182eeff8243f87f8966baec1a670803eb8ca6b37342f9ea242f21e5726b6c501808457f85459c91ff1116eae79e54b5ec3544ebbb18ee617231e4bdb87424814565dfb6ebe0", 0x93}, {&(0x7f0000000580)="db56b84884ffc02c06bd0f01587a681de55a4df7714790716dddfa75831670014c811bd064f615db698adab368dafbf134b3d26a38503c3fe8a7c5ece07759b81233530ed432985e4feebb5d4ca49dcb8c490c015acacef99f7da736180800000000000000ba12b327f6b79ea0d90605040d84453eff84443a09ab5eeba1586f85c1e383f8095573726b1bf117d96c91d1349f4951ead7fd07838ce689e171c4bda933d8fc5c35ce2fcbc1c5bae12537482f023984c435e056b2e8a6613a841360d40172a17e494ae06d5af1305ffa1eb9cbcedd90b7de636015883d0d3473c4bdfd1f", 0xe0}, {&(0x7f0000000140)="d80a642bc17284b8945c0c21fcd2df4e9cf2a68e854560584ed04f62aebae0dab1e7c4", 0x2a}, {&(0x7f00000004c0)="67df3baec1ce766316819b76b14295d4f969f2095747039d8a9e01159fc171d6ab964bc50f5d66ab6bcdefa298582348a01ac90b6ecd3001c769cf58704f758dae3ecd02919b7e1eebc643c57afec3b45811ab935a8f893220c7329def2702370b371c3966c553ce13a625dfddbe8bc98f220a9ff6ac6a09165c1273ac580916e65995994307bb637dba5994702e22a333a3d48507689db92142d492c5ca788f11ff4a5c51adfcec8f7e15467d446025f37f9c", 0xb3}, {&(0x7f00000002c0)="2b4f2c23cd72e5f8c27c5125a38cc74027abf1994ab65ba7ca4e64b9ab8b357454e5abb6d754f1318dd05531dce7560e6e7d95526c4358848e67345b32b86de0ff15be80ddf3dab5b55443991f2b4d7276d4d6334a4385a70581c45a6926fc7874e38018387a2d6195df3281ba32a96811d4e9e40b1cf5b927", 0x2a}], 0x6, 0x8) r2 = socket$inet(0x2, 0x3, 0x7f) bind$inet(r2, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$inet_int(r2, 0x0, 0x3, &(0x7f0000000080)=0xfffffffa, 0x4) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @multicast1}, 0x10) splice(r0, 0x0, r2, 0x0, 0x8000, 0x0) (fail_nth: 4) 9.889697963s ago: executing program 0 (id=1502): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000011c0)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="e732b35c1122781dd2982fbee8092c3d5327a27bd8fc25a31c11efd0e42ff819f414d7e601bb486bb76da6e79f127c14a93d44fc278ec91bffb82c91f2571ec8227536eaf44c79d5aca05bf283201d6288dd8536fc6bd146ff5e905fed3d", 0x5e, 0x20000040, 0x0, 0x0) close_range(r1, r0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) read(r1, &(0x7f0000000580)=""/215, 0xd7) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESDEC=r5, @ANYRES16], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, 0x0, 0x0) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)) r8 = syz_usb_connect(0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r6], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) 8.56599797s ago: executing program 4 (id=1507): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) preadv(0xffffffffffffffff, &(0x7f0000000040)=[{&(0x7f0000000200)=""/218, 0xda}], 0x1, 0xffff, 0x0) (async) ioctl$SNDRV_SEQ_IOCTL_CLIENT_ID(r2, 0x40505331, &(0x7f0000000040)) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=@newtfilter={0x3c, 0x2c, 0xd27, 0x0, 0xfffffffe, {0x0, 0x0, 0x0, r1, {0xfffa, 0x4}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8100}]}}]}, 0x3c}}, 0x20000000) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 8.563501295s ago: executing program 2 (id=1508): close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x2) openat$pfkey(0xffffffffffffff9c, &(0x7f0000000000), 0x228440, 0x0) openat$dlm_monitor(0xffffffffffffff9c, &(0x7f000000a1c0), 0xa0801, 0x0) syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) socket$inet(0x2b, 0x801, 0x0) socket$inet_udp(0x2, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) openat$adsp1(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) pselect6(0x40, &(0x7f0000000480)={0xe0ff, 0x0, 0x2, 0x4}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x0, 0x0) 8.399926492s ago: executing program 4 (id=1509): r0 = syz_open_dev$evdev(&(0x7f0000000080), 0x72, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket(0x1, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000200)={0xffffffffffffffff, &(0x7f0000000100), &(0x7f00000001c0)=@tcp=r5}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000180)={0xffffffffffffffff, &(0x7f00000002c0)="e93dfad447b7a23a1dd340ac837b0263b0b97ab1c47d7a8219b0b1cdbdeaade2fa", &(0x7f0000000140)=@tcp6=r5, 0x1}, 0x20) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='blkio.bfq.time\x00', 0x0, 0x0) getsockopt$sock_buf(r4, 0x1, 0x1c, 0x0, &(0x7f0000000100)) r6 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ffc}]}) socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r7, 0x5411, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb0100180000100000000018000000180000000200000000000000010000040002000000"], 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IMADDTIMER(r8, 0x80044940, &(0x7f0000000140)=0xf4240) ioctl$IMADDTIMER(r8, 0x80044940, &(0x7f0000000180)=0xf4240) close_range(r6, 0xffffffffffffffff, 0x0) ioctl$EVIOCSFF(r0, 0x40304580, &(0x7f0000000180)={0x51, 0xfffe, 0x0, {0x7}, {}, @period={0x5c, 0x45, 0x10, 0x5, 0xa5, {0x6, 0xfffd, 0x4, 0x53b}, 0x0, 0x0}}) 8.399265343s ago: executing program 2 (id=1510): r0 = syz_usb_connect(0x6, 0xe1b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001b00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x7f, 0x1, 0x8, 0x3, 0x3, 0x5, 0x1f7, 0x40, 0x2dc, 0x0, 0x3, 0x38, 0x1, 0x8, 0x6, 0x6c95}, [{0x7, 0x4, 0xec8, 0xfffffffffffffff7, 0x401, 0x5, 0xfff, 0xad82}], "4b8c147d662d1abaf0342d684737a74c38d2749339ee8ee4f334fa29e852fc6e55a8a041dc047efffc86291e0a28072307d852a2f9f2bdcb06dda9407e6d04c5289f89dacde80f038f92eadb50d0e78f6bb85d3305feea420d922809d364596f6fa42cb6f88c1d6cdcdbd9e122c5cc65509baca18223155e3a95c6de4ee63471650e33052ba5e9992c8af482d80171f160d7349df55db5c1a1a9b260f30000000000000000c20a8b69162b1816a5880ee6b085c7c974dcdbf27e326176ae4cecfc6430e9cde523ee37c73bc212be9bea7731fd817ff5a6606a3e7f0fc150c460f8b86b3e061feabc81acf866010665414e396bccb6efd3d8c72c7c5bf7b04420748ab7a47564fd35fd221199f0eda94c7bae39b7ef0210a874d0b50ab09f6d5a6e6e17aa1f1f005b8544821230a3745def74a63e03204fe91a6f2ccacde31e311028a434889fc179dd77020905b46dc522ffa1865acd20ced512252f77b953fb3294c978cb96c09a7eb28f86c94267f0acb88337256b965bd34e64ef0a1a84a57a828f2d8e1fcde39a3cdbfaee6bd06cf8f88f39", ['\x00', '\x00', '\x00', '\x00']}, 0x60c) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x69) accept$alg(r6, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb049968b0a77337115cb5e534ae803e71246f423229019cd0a4c30767456f86dba221625a099049e4b3b794f467613"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {0xffffffffffffffff, 0x3401}, {r4, 0x42a2}, {r5, 0x1203}, {r4, 0xc024}], 0x5, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 7.333643931s ago: executing program 4 (id=1511): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000002240)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r4}, 0x10) r5 = syz_open_dev$usbfs(&(0x7f0000000080), 0x74, 0x101301) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r5, 0xc0105512, &(0x7f0000000040)=@usbdevfs_connect) socket$unix(0x1, 0x0, 0x0) r6 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_inet_SIOCSIFDSTADDR(r6, 0x8918, 0x0) rt_sigaction(0x0, 0x0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000003f80)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000003f40)={&(0x7f0000003040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a140c00000c0a00050000000000000000020000022c0403806401008060010b80400001800700010072740000340002800800014000000000080001400000000a080002400000000008000240000000050800024000000003080002400000000048000180080001006c6f67003c00028008000640000000000a0002402d2628275d00000006000140000700000800054000000d14110002406e65742f7564706c69746536000000006c0001800a00010072616e67650000005c000280080002400000000144000480300002800800034000000009080003400000000908000340000000050900020073797a310000000008000340000000020f000100a741c55c7fc0bdd2c2883d00040004800800024000000001240001800b0001007470726f787900001400028008000340000000080800014000000001100001800c0001006e6f747261636b00140001800d00010073796e70726f78790000000014000180090001007866726d00000000040002800c00018008000100667764005c010080040007800900090073797a3000000000040007800c0004400000000000000006fd000640fcbb68a128cf04519a1cfe7566564c94f408648cca9e4b69959a89f66b96f3bf01bc1d3cbfce98fee59b0148e5cdaf19b9392c1de2b112b484b4d4c0ca83bff43d087fc0557b6a907ee74a8bcdcbbc51d23bd0f1e35d44765efb5511076a9cf65f0389874274a3dfc235d5dfd8bc701a35e0b5233490b70b41439c90b6e098aecb2a956ffc64367ae84d4759d71150ceaa01adbf95ead03bad065568749c9879987f575541bd373c0b87fc7f6f05fe5d35e6d9308d279f9a67c0115da27ff3587c796e5b33e5a98f67b82d213c52b498f870afba271eb896770dfdd80f0ea916db73c17c2479c83cf1b100000008000340000000000c00044000000000000000070c00044000000000000000090c00044000000000000000000c0004400000000000000007680100800c0005400000000000000008f4000180f0000100e4a7881586d5f82fcbcc05b254695e6c6b0b9663043718acfc0fa35a86015901d12b5dbe3d6c3177fdaba69acd7bdcf130f1fa38374a9801b7f9587b1a14206a0f36fa411c3bf0622531a6873d1a64fdf7404cb367f728cce934bd8f0052c067332c9d7027d4074a30d6e8337e2fb154441b50ee219e2e32797f8d3a85f5f368d0c879f1bd5c7595438bf6c3d2de4a6349adb67ee0994f5de50ebb4f7d53cb49eb482ca1fe9afc2ccd26968a701349d716481df829d82001bce1a6007009b9d182f7af152879217d534044526041f3336bb12a2f22b3e2178fbfa7accaba2381c9dbe85689408baf0f6ce3080c000540000000000000007f040002802e0006401fe757bb66fe79b895a756c5939043ce9b5866dddea97e1ac5095f72e06548aca97b4b737d61e096a584000004000780200002801c00028008000180ffffffff080003400000000108000180ffffffff08000440000000010900020073797a3000000000c0070380100000800900090073797a3200000000600400807c020a805800010090d89c50a644799ced4378f1a19401258b2556ee875ce5cfa8d26d80983e57a87861aad0095bfe1dba4c314b32e1b8bbd90ba78612183ae9e8df590070f2b9d99fdef3ad0b2e4aa26872ab5aeade9e7c266ae0e13800028008000180fffffffd0900020073797a30000000000900020073797a31000000000900020073797a32000000000800034000000007580001004cfd3f1337b83fa5709f88e65c0232f3f0e94f0a64b36c85645370638949682a22ebbe8bcbf347d99be38b7d92dd4448ea70926167ef2b3c0e7154b5ef8e2ae0c159809fad90c632380e27b802f9367c88877fdff00001006b06f8b49ed97bb1daf185d4131457545c73dbc1c5e2b1d1d8f3ba2e647be1d7b7e07b0e00cce71fce4996e0ec1fd8e9c8c6daa2c8b7865ab74673027491199285de518d92cdf6bfde35b41bfb78d1c64fafd9b223fcbc10d9aff1dfc28b359d00afe54fae15a717f887604c2b97b37dbdbb1dfe2bc91ee974570d7b97746eafe60ad8b23baa6b92d2e51e66dfaa24f25db7659c3cc69555027307616e9298666bb9d60440bfccd7d84242a914401d556d66aa1726b4c401d24f67ba5e70e5a7722122e1694698367f621f1786cb53d5595dc08db01339b8855c5d76a57a72ab636f17c05a2cf801bb916c2d2400028008000180ffffffff0900020073797a30000000000900020073797a30000000007c0001003487543095e98358249c0fba47f77d09be7960e9322d2871e1353bd54d1bb1dc6ac39d1984a659e001b295f3bb4e9b7ff7bb69104deb756a62d86ce4b7e2a6420f02d901ee4aae39dba3e41ed69b9218441292c5799296cfaf21b9176ca8668b24226f41a322da2115a1c50f5d5f81fc971eaea1985e0c430900090073797a3100000000a8000a801400028008000180fffffffc08000340000000002c00028008000340fffffb520900020073797a310000000008000340000000020900020073797a300000000064000280080003400000020008000180fffffffc0900020073797a31000000000900020073797a310000000008000180fffffffd0800034000000006080003400000000108000340000080010900020073797a32000000000900020073797a32000000000900090073797a30000000001c01018036000100b509d5b2c13a8415b8a604bf7a83c0beae13445aeed927f5fa0ed08fdc76b514cf3b2c87829b495c122d6c5b0ee86d3f61850000df000100b6b5328f41be9a8875839e1926a71cceef09ab70e69bc83e8059465387ea227ad9bb9c23a291f67c2eca92780ace798226d21e5bd742dbffd5f535131d46d9a3963944ec8e473cfdae2b6c44cf1f948cc97c9e7d5cfa97a448bda78d079cf10aaf0398edb31f8e10722d43ccf4ec74cce7c152c692e428c903bbed4094e85758f957f2cfb7b82b9a96a4bfc723cb5943ea20619c4d20d2d92f0dabb531fc5febf1b40b3d9b631d4d56be7439a35e9ecdce838617cc2c90b3a67de69835b9b2b17e71b8e40437f396212919f46fbf2c6a43b7a76f1e197394b8116600040002804c0300800900090073797a3100000000d4000b80240001800b0001007470726f7879000014000280080003400000000008000340000000144000018011000100666c6f775f6f66666c6f616400000000280002800900010073797a31000000000900010073797a32000000000900010073797a320000000044000180090001007866726d00000000340002800800044000000006050003000000000008000240000000050800014000000016050003000100000008000240000000050c00018008000100666962001c0001800b00010064796e73657400000c00028008000240000000036802028024000100acbaf4936b7b5981dfccffcb9cedc6a50cfab337816e3a29c04b956643c802abd8000100d112dcc1a765b18262168f24f7f40acf9df3924a7781c2384a14a787929e98c58e212afab28e0546dc2e2c682857957f015b4431a2ff1549587c25bb6b2168e7bd38886e8dec4390ba6906f2658d5f460bbe94008b8a2b6b4aa8cc72b0cd29ad0897d2b4cb1c59e4b972adce86076e64a96daae7463d10001fe7a5ee5851b40c64a62616a23507e984f35d07245676c06701f0259888c8e847eff38dadda9e8356c0e81071542ffaa81ff736d7ccc02881e8d9488fed9145e2b453f2374dbf0447851f750ea2a732b45a0f84d89e3769595964a938000100b2a451f074a37bb670be6f65555b7d864976beb081ac0f41d937c556be6ba47ed0a79157f6489105830336b6c8df15227e7b751acc000100b35c70ee1ec533dd7ab5684472fc926018fa08d90476a45b2d108430fb47d3dc792447e94a1322c28952708aeec087ae7459a7856771f0ba747c87b33ff9e5b8e7b4aa08aa61e6c86ca60dd15ff51839c21e5e7360fd0ceb2c9e127dcff7facbb676082cb081d30a861d14f014f1b6c21a218f524aa89cbd808c4eb310bc7a6c567475ed2fb8aad7220f735a2d73926d8074f6fafea4cf858ad3609a0dae79d7fcfbffba3a37447978bcc3cf3c8d78622500caba50479621082a8bbe0e8f384ad18740ffc77dfd0d0c00028008000180fffffffe5800028008000180fffffffd0900020073797a32000000000800034000000400080003400000000908000180fffffffb08000340000000090900020073797a320000000008000180000000010900020073797a31000000002c000000080a010200000000000000000a0000060900010073797a31000000000900020073797a300000000030010000050a010100000000000000000300000a62000c00fd80f6203af7f90fec2770846fb24054d0827c026c15a6744930e063b69b6524ebd519e8f00d15a02b61beb8a98ec50cf175e180070644a3637eb930368f34f181d99ee3f4981d62e2c55f3dae54a5a5849b43d3d23da52a592c2f9bb82f000079000c006607e1bf8cf355beb486fda907279ca13ef6892ce681ea131b910784478760304d2f54333cbc87c012d41790c89b08c94be219026fb4d4105383a5303f37d3993b846613a445961315b2d25ece7106ed5c0366aa0f95999dd2aab132981080e39a2d7de7b0174bff0bc6cfd0446f5a440f88d7ab0d000000280008800c00024000000000000080000c00014000000000000000400c0001400000000000000003080007006e6174000900030073797a3100000000140000001100010000000000000000000000000a"], 0xd98}, 0x1, 0x0, 0x0, 0x20000800}, 0x2200c0c0) socket$igmp(0x2, 0x3, 0x2) r7 = syz_open_procfs(0x0, &(0x7f0000000100)='net/udplite6\x00') r8 = fanotify_init(0x0, 0x0) readv(r8, &(0x7f00000001c0)=[{&(0x7f0000000040)=""/175, 0xaf}], 0x1) fanotify_mark(r8, 0x1, 0x40001019, r7, 0x0) read$FUSE(r7, &(0x7f0000000200)={0x2020}, 0x2020) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000300)) 7.137588388s ago: executing program 6 (id=1512): close(0xffffffffffffffff) r0 = syz_usb_connect$hid(0x1, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x9da, 0x22b, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x5, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}}}]}}]}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SDTEFACILITIES(r3, 0x89eb, &(0x7f0000000040)={0xfff, 0x7042, 0x0, 0xc, 0x0, 0x21, 0x29, "7a676df28400000000000000000000e0004000", "00fca32b582176fe01000000c666e72bb60348a8"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = syz_io_uring_setup(0x1c40, &(0x7f0000000180)={0x0, 0x1aa8, 0x40, 0x2, 0x352}, &(0x7f0000000040), &(0x7f0000000240)) io_uring_register$IORING_UNREGISTER_PBUF_RING(r4, 0x17, &(0x7f0000000280)={0x0}, 0x1) syz_usb_control_io(r0, &(0x7f00000004c0)={0x2c, &(0x7f0000000240)={0x0, 0x0, 0x7, {0x7, 0x0, "c2817842c4"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x0) 6.205202788s ago: executing program 0 (id=1513): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x6, &(0x7f0000000140)={0x7d, {{0x29, 0x0, 0x2000000, @rand_addr=' \x01\x00', 0x5}}}, 0x88) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) mount$fuse(0x0, 0x0, 0x0, 0x0, 0x0) syz_emit_vhci(&(0x7f0000000240)=ANY=[@ANYBLOB="040e047f2d20"], 0x7) r4 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_DEL_RULE(r4, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x4008000}, 0x50) mkdir(0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x0) r5 = syz_open_dev$sndpcmc(&(0x7f0000000180), 0x0, 0x840) r6 = syz_open_dev$ttys(0xc, 0x2, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000000)=0x15) ioctl$TCFLSH(r6, 0x40384708, 0x20000000) close_range(r5, 0xffffffffffffffff, 0x0) 6.191117627s ago: executing program 4 (id=1514): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400100001800010600000000000000001c140000fe0000010000000005001a"], 0x140}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_OKEY={0x8, 0x5, 0xfffffffe}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r2 = syz_open_dev$video(&(0x7f0000000000), 0x6, 0x2600) ioctl$VIDIOC_ENUMAUDOUT(r2, 0xc0345642, &(0x7f0000000180)={0x7, "936022e2b11ea9f0b420ab880e8e883a582f0ea729437a268feb41c1b7044bff", 0x2}) syz_usb_connect(0x0, 0x24, &(0x7f0000000500)={{0x12, 0x1, 0x0, 0xa9, 0xde, 0xa6, 0x10, 0x2040, 0xd854, 0x8238, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x7c, 0xe3, 0x92}}]}}]}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000480)={'wlan1\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) r6 = socket$phonet_pipe(0x23, 0x5, 0x2) setsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f0000000600)=0x10000, 0x4) write$binfmt_aout(r5, &(0x7f0000000300)=ANY=[], 0x113) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000005, 0x12, r5, 0x0) ioctl$PPPIOCGNPMODE(r5, 0xc008744c, &(0x7f00000001c0)={0x802b, 0x1}) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1590}]]}, 0x24}}, 0x0) arch_prctl$ARCH_SHSTK_ENABLE(0x5001, 0x3) syz_usb_connect$uac1(0x4, 0xc2, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x0, 0x0, 0x0, 0x20, 0x1d6b, 0x101, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0xb0, 0x3, 0x1, 0x1, 0xc0, 0x8, {{0x9, 0x4, 0x0, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, {{0xa, 0x24, 0x1, 0xc, 0x2}, [@output_terminal={0x9, 0x24, 0x3, 0x4, 0x305, 0x1, 0x3, 0x1}, @extension_unit={0x8, 0x24, 0x8, 0x2, 0x6, 0x5, '\r'}, @input_terminal={0xc, 0x24, 0x2, 0x5, 0x546c632c3df3a4ea, 0x6, 0x81, 0x7, 0x6, 0x80}]}}, {}, {0x9, 0x4, 0x1, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_i_discrete={0x8, 0x24, 0x2, 0x1, 0x9, 0x4, 0x1, 0xd}, @format_type_i_discrete={0xb, 0x24, 0x2, 0x1, 0xff, 0x3, 0x5, 0xe, "19c15f"}, @format_type_i_discrete={0x11, 0x24, 0x2, 0x1, 0x6, 0x3, 0x9, 0x4, "5a96a16732cd877928"}]}, {{0x9, 0x5, 0x1, 0x9, 0x400, 0xf, 0x8, 0x3, {0x7, 0x25, 0x1, 0x41, 0x6, 0x7}}}}, {}, {0x9, 0x4, 0x2, 0x1, 0x1, 0x1, 0x2, 0x0, 0x0, {[@format_type_ii_discrete={0x10, 0x24, 0x2, 0x2, 0xd, 0x2, 0xc8, "137a33a94cc9c9"}]}, {{0x9, 0x5, 0x82, 0x9, 0x8, 0x6, 0xfa, 0x7, {0x7, 0x25, 0x1, 0x80, 0x81, 0x7}}}}}}}]}}, &(0x7f00000004c0)={0xa, &(0x7f00000003c0)={0xa, 0x6, 0x110, 0x84, 0x8, 0x4, 0x8, 0xc7}, 0x19, &(0x7f0000000400)={0x5, 0xf, 0x19, 0x1, [@ss_container_id={0x14, 0x10, 0x4, 0xc0, "ea30e3916d521609000a98feda15f97a"}]}}) syz_usb_connect$uac1(0x0, 0x0, 0x0, &(0x7f0000000440)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x200, 0x5, 0xcf, 0x72, 0x20, 0x2}, 0x0, 0x0, 0x2, [{0xeb, &(0x7f0000000240)=@string={0xeb, 0x3, "44acc36fc64ed00ebe6ace6f280427204b95fa6daeaa9e02a8c0aa7edd41ec1cdc3d5e93bb4e9b64a215bc39e6c154c578f5bf33016e2bb039a06c3e5d8d8733b9ed9d3d2a3aac3f12d6ffc1e3ca3c41cd235c9bad62e52d84011e153db27661576d2bdb3ee43f5d9178af272e222c27b37cf46d7d8944e29e010051365d71018f292c41eb8ad4bdb6493ada3229265670a4013a43c6699e534d22b76277257434c62b9f2347e3299e4199c51844fed6b5deb095957325eca9da2e2eb2acb12eb117938498a00009e4d7c2026ea4f8a04f1397e09e4a9916018383141bbbf075b1cf33a09e725504c9"}}, {0x69, &(0x7f0000000340)=@string={0x69, 0x3, "44bebbf0b44d2150c7ab191e2e46997d2db7df29122b31a7231d1bdefc8905e738377f315f2ec4c37eb695070fca77df6a9bddcc07a91bd719d4e52ab033de5ed4e83ed5f1d205dc1516b0c7f4301bf7f7ca2654b45e7a6fff736f57e896474e163354bdbb2176"}}]}) 5.572188838s ago: executing program 5 (id=1516): r0 = syz_open_dev$video4linux(&(0x7f0000000000), 0x71, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0xc0585605, &(0x7f0000000680)={0x1, 0x0, {0x8, 0x4, 0x300a, 0x8, 0xb}}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000, @void, @value}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000006c0)=0x14) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000780)={&(0x7f0000000940)=ANY=[@ANYBLOB="9feb010018000000000000001000000010000000040000000400000000000001000000006c002507002e5f00c6d6aa707f7ccd4fd428534ab5e2abf1808e0e76cff29d"], &(0x7f0000000740)=""/41, 0x2c, 0x29, 0x0, 0x2, 0x0, @void, @value}, 0x28) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001440)={r4, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_PRI(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1e, r8, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x14, 0x18, {0x1, @link='syz1\x00'}}}}, 0x30}, 0x1, 0x0, 0x0, 0x20040040}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1e, 0xf, &(0x7f0000000380)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xf4}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='syzkaller\x00', 0xc0000, 0xca, &(0x7f0000000580)=""/202, 0x41000, 0x54, '\x00', r2, @sk_lookup=0x24, r3, 0x8, &(0x7f00000007c0)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000800)={0x3, 0x8, 0x1}, 0x10, r5, r1, 0x4, 0x0, &(0x7f0000000840)=[{0x2, 0x1, 0xb, 0x1}, {0x1, 0x2, 0xa, 0x5}, {0x5, 0x5, 0x7, 0x4}, {0x8, 0x5, 0x8, 0x8}], 0x10, 0x20cd, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0, r1, 0x0, 0x2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x8b}, 0x0) r9 = getpid() sched_setscheduler(r9, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r10, &(0x7f0000000000), 0x651, 0x0) mknod(&(0x7f0000000040)='./file0\x00', 0x8001420, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000080), 0x18) r11 = socket$inet6_icmp(0xa, 0x2, 0x3a) connect$inet6(r11, &(0x7f00000003c0)={0xa, 0x4e24, 0xc0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000240), 0x80000, 0x0) r12 = openat$snapshot(0xffffffffffffff9c, &(0x7f0000000280), 0x200a40, 0x0) fcntl$getownex(r12, 0x10, &(0x7f00000002c0)) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05400000000000000000010000000900010073797a300000000040000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000004c000000060a01040000000000000000010000002400048020000180080001006f736600140002800500020000000000080001400000001408000b40000000000900010073797a300000000014000000110001"], 0xd4}}, 0x0) sched_getaffinity(r9, 0x8, &(0x7f00000001c0)) 5.338982052s ago: executing program 2 (id=1517): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x71, &(0x7f0000000500)={r6, 0x40}, 0x8) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000300)) syz_usb_connect(0x5, 0x36, &(0x7f0000000180)={{0x12, 0x1, 0x200, 0x9b, 0xc7, 0x39, 0x10, 0xbda, 0x8191, 0x7a45, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x2, [{{0x9, 0x4, 0x99, 0x5f, 0x2, 0xff, 0xff, 0xff, 0x0, [], [{{0x9, 0x5, 0xb, 0x8, 0x20, 0x6, 0xe, 0x8}}, {{0x9, 0x5, 0x1, 0x3, 0x400, 0x9, 0x0, 0x1}}]}}]}}]}}, 0x0) 4.360989816s ago: executing program 0 (id=1518): r0 = openat$ptp0(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = dup(r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000400)=0x10) setsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x71, &(0x7f0000000500)={r6, 0x40}, 0x8) socket$netlink(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xfffffffe, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ioctl$PTP_EXTTS_REQUEST2(r1, 0xc0603d06, &(0x7f0000000300)) syz_usb_connect(0x5, 0x0, 0x0, 0x0) 3.914765404s ago: executing program 5 (id=1519): r0 = socket(0x10, 0x3, 0x0) write(r0, &(0x7f0000000040)="1400000052004f030e789e7e27286d000a4149f3", 0x14) recvmmsg(r0, &(0x7f0000005c80)=[{{0x0, 0x0, 0x0}}], 0x344, 0x10122, 0x0) (fail_nth: 10) 3.441156346s ago: executing program 5 (id=1520): r0 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000000)={0xffffffffffffffff}, 0x4) preadv(r0, &(0x7f00000004c0)=[{&(0x7f0000000040)=""/14, 0xe}, {&(0x7f0000000080)=""/145, 0x91}, {&(0x7f0000000140)=""/249, 0xf9}, {&(0x7f0000000240)=""/57, 0x39}, {&(0x7f0000000280)=""/137, 0x89}, {&(0x7f0000000340)=""/67, 0x43}, {&(0x7f00000003c0)=""/142, 0x8e}, {&(0x7f0000000480)=""/16, 0x10}], 0x8, 0x541, 0x1) 3.435588681s ago: executing program 6 (id=1521): socket$inet6(0xa, 0x6, 0x0) r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000d6cff0)=[@in={0x2, 0x4e20, @loopback}], 0x10) sendto$inet(r0, &(0x7f0000000280)='7', 0x1, 0x0, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000480), 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x10, &(0x7f0000000900)=[@in={0x2, 0x4e20, @loopback}]}, &(0x7f00000002c0)=0x10) 3.344031099s ago: executing program 5 (id=1522): socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000040), 0xc, 0x0}, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/stat\x00', 0x0, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r1, 0xae60) ioctl$KVM_CREATE_PIT2(r1, 0x4040ae77, &(0x7f0000000040)) ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_PIT(r1, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r2, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb, 0x0, 0xfffffffffffffffc], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r2, 0xae80, 0x0) 3.335300203s ago: executing program 6 (id=1523): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) syz_emit_ethernet(0x5e, &(0x7f00000002c0)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6006cbef00280000fe800000000000000000ffff0000003bd818300000000000000000000000000200020000000000000502000000000708"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x5, 0x0, 0x3, 0xff, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x29, 0x9, @dev, @remote}, "a60f94438a30e2ab"}}}}}, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_buf(r0, 0x0, 0x41, &(0x7f0000000180)=""/4096, &(0x7f0000001180)=0x28) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x0, 0x0}) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000400121001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000002000083850000007100000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_GETSTATE(r2, 0x4b65, 0x0) 3.295982595s ago: executing program 6 (id=1524): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x18) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0x3}, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x7fff}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f00000011c0)=0x1) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$EXT4_IOC_GROUP_EXTEND(0xffffffffffffffff, 0x40086607, &(0x7f0000000040)) socket$nl_netfilter(0x10, 0x3, 0xc) sendto$inet6(0xffffffffffffffff, &(0x7f00000003c0)="e732b35c1122781dd2982fbee8092c3d5327a27bd8fc25a31c11efd0e42ff819f414d7e601bb486bb76da6e79f127c14a93d44fc278ec91bffb82c91f2571ec8227536eaf44c79d5aca05bf283201d6288dd8536fc6bd146ff5e905fed3d", 0x5e, 0x20000040, 0x0, 0x0) close_range(r1, r0, 0x0) r3 = gettid() socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r4, 0x5452, &(0x7f0000000180)=0xffffffffffffffff) read(r1, &(0x7f0000000580)=""/215, 0xd7) rt_sigprocmask(0x0, &(0x7f0000000200)={[0xfffff7feffff7ffd]}, 0x0, 0x8) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x4, &(0x7f0000000280)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f00000000c0)=ANY=[@ANYRES8, @ANYRESDEC=r5, @ANYRES16], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r7}, 0x10) fcntl$setsig(r4, 0xa, 0x12) ppoll(&(0x7f0000000100)=[{r5}], 0x1, 0x0, 0x0, 0x0) dup2(r4, r5) fcntl$setown(r5, 0x8, r3) tkill(r3, 0x13) ioctl$sock_bt_hci(r0, 0x400448e7, &(0x7f0000000000)) r8 = syz_usb_connect(0x0, 0x81, &(0x7f0000000240)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r6], 0x0) syz_usb_control_io$uac1(r8, 0x0, 0x0) 2.830727201s ago: executing program 5 (id=1525): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x13, 0x0, 0x38) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) socket$netlink(0x10, 0x3, 0x15) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x1, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000005000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x23000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_io_uring_setup(0x82e, &(0x7f0000000300)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000080)=0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r9 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) syz_io_uring_submit(r7, r8, &(0x7f00000001c0)=@IORING_OP_RECVMSG={0xa, 0x20, 0x0, r9, 0x0, &(0x7f00000002c0)={0x0, 0x0, 0x0}}) io_uring_enter(r6, 0x5b43, 0x0, 0x0, 0x0, 0x0) r10 = syz_open_procfs(0x0, &(0x7f0000000040)='net/udplite\x00') r11 = syz_open_procfs(0x0, &(0x7f0000000500)='fdinfo\x00') getdents64(r11, &(0x7f0000000080)=""/38, 0x26) fchdir(r10) mount(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180)='erofs\x00', 0x0, 0x0) r12 = inotify_init1(0x0) fcntl$setown(r12, 0x8, 0xffffffffffffffff) ioctl$FS_IOC_GETVERSION(0xffffffffffffffff, 0x80087601, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 2.643835557s ago: executing program 4 (id=1526): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, 0x1, 0x7}, 0x0) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000fe05000000000000000000009500"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_switch\x00', r4, 0x0, 0x3}, 0x18) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r6 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x1ff, 0xa401) ioctl$USBDEVFS_ALLOC_STREAMS(r6, 0x8008551c, &(0x7f0000000280)=ANY=[]) socket$inet_udplite(0x2, 0x2, 0x88) r7 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r7, 0x1, &(0x7f0000000000)='source', &(0x7f0000000040)='c:::\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r7, 0x6, 0x0, 0x0, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000400), 0x400000, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1e, 0x8, &(0x7f0000006680)=ANY=[@ANYBLOB="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"/4281], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1000, @void, @value}, 0x94) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)=ANY=[@ANYRES32=r9], 0x20) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000100)=0x14) 965.236107ms ago: executing program 5 (id=1527): r0 = syz_usb_connect(0x6, 0xe1b, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) write$binfmt_elf64(0xffffffffffffffff, &(0x7f0000001b00)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x9, 0x7f, 0x1, 0x8, 0x3, 0x3, 0x5, 0x1f7, 0x40, 0x2dc, 0x0, 0x3, 0x38, 0x1, 0x8, 0x6, 0x6c95}, [{0x7, 0x4, 0xec8, 0xfffffffffffffff7, 0x401, 0x5, 0xfff, 0xad82}], "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", ['\x00', '\x00', '\x00', '\x00']}, 0x60c) syz_usb_control_io$hid(r0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x1, &(0x7f00000003c0)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x69) accept$alg(r6, 0x0, 0x0) ioctl$USBDEVFS_DISCSIGNAL(r5, 0x8010550e, &(0x7f0000000540)={0x80, &(0x7f0000000440)="63038050de6f5cf77e5ff9321eb3f355fe00ee0f06ba6efe220ad521b95bbdfc23c9fa94bcf993c9a64ec92bebde4ac30a4b503abc627a2d282d274734bbc4c68046b3cc5edb8b76edfbd645668104e70852d87d2d9c82191f62946db7724f19f01b7b095b30a746d566764b581f5b84b739608b176cb049968b0a77337115cb5e534ae803e71246f423229019cd0a4c30767456f86dba221625a099049e4b3b794f467613"}) ioctl$USBDEVFS_DISCONNECT_CLAIM(0xffffffffffffffff, 0x8108551b, &(0x7f0000002600)={0x0, 0x0, "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"}) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0x0, 0x148, 0x180, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x11}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'vlan0\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r7 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) poll(&(0x7f0000000380)=[{0xffffffffffffffff, 0x62a8}, {0xffffffffffffffff, 0x3401}, {r4, 0x42a2}, {r5, 0x1203}, {r4, 0xc024}], 0x5, 0xca) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f00000001c0)=0x1b) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$VHOST_SET_VRING_BASE(r7, 0xaf01, 0x0) socket$inet_udp(0x2, 0x2, 0x0) 790.813759ms ago: executing program 0 (id=1528): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x101900, 0x0) ioctl$TIOCMBIC(r0, 0x5417, 0x0) r1 = open(0x0, 0x0, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) inotify_init1(0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={0x98, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @broadcast}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x34, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MINIP={0x8, 0x1, @empty}, @CTA_NAT_V6_MAXIP={0x14, 0x5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @CTA_NAT_V6_MINIP={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x37}}]}]}, 0x98}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, 0x0, 0x2, 0x0) sendfile(r7, r7, 0x0, 0x3f) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000280)=ANY=[@ANYBLOB='fd=', @ANYRESHEX, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC]) mount$fuse(0x0, &(0x7f0000000100)='./file0\x00', &(0x7f0000000240), 0x200008, &(0x7f00000003c0)={{'fd', 0x3d, r1}, 0x2c, {'rootmode', 0x3d, 0x8000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@allow_other}]}}) sendmsg$IPCTNL_MSG_CT_DELETE(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x2, 0x1, 0x301}, 0x14}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x400000, 0x242, 0xa0e4b1dd5bf0483f}, 0x18) 234.243736ms ago: executing program 2 (id=1529): pipe(&(0x7f00000002c0)={0xffffffffffffffff}) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x810) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000100)=0x5) ioctl$VHOST_VSOCK_SET_RUNNING(0xffffffffffffffff, 0x4004af61, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0xb635773f06ebbeef, 0x8031, r0, 0x59cd0000) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x2400e002}, 0x20000010) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYRESDEC=r2, @ANYBLOB="b2833d1c192c261780b96439f82376bc19bc8f2972c557d3183f59964b2b8d3b3fc6d4e0fec99d0893ed296cd40d8304b97f74d0ab37042c05b5cd7a76a611a97904f8476de8b2d42c8cd033b9d8e367b550f5e45d0cefa60de428473c47a9b1eaca736853adfb359a9f5bd1e18a4ecd8d3a5102cdb9bab98f5f0479ef78501d3a"], 0x6) r6 = request_key(0x0, &(0x7f0000000d00)={'syz', 0x0}, &(0x7f0000000380)='G@\xf7\xff\xff\xff\xff\xff\xff\xff\xe3h;\x1d\xd3\xaa\x1a\x9c\xca+\xa2\f\xec\xdeq\xc8\xa2\xc0\xfb\xe7\x98\xa8\x94%\xeb8\xdc\xaf\x02\xe8\xb9g\xd9.k\\q5d\x7f\xaf\xa4\xacsl\xda\x8b\xfb\xdb\xde!\xe2@@G\vT\xa98\f\x1c\xc7D\x8b\xb3@\x96Z2\x1e\x13\x89\x80\xbf\x9f4\x17\xa8\xdd1\n\x05\x953\xd8)<\xcch{\xb3\xeed\xd2Kb\xf1\xdb<,]\x85\xd9}\xa9\xcdhz\xa7\xc5\x14\x8d\xe9R.\x7f\xa3\x9drc\x17\xa1\xe8\xae\x92\x92s\xc1\x98;\x04\xed\xd3\xf6:$n\x14V\xe7\x1c;\x15s\xb9\x82\xc1\fTP\xe5@\x86H\xdf\x93aB\xf2a&\x9c\tsV\"*\xc5\xa3\x0e(\xa6\b\xde\x19\xe8\xd1e\x01u?\xf9', 0xfffffffffffffffa) pipe(&(0x7f0000000340)={0xffffffffffffffff}) r8 = socket$inet_udp(0x2, 0x2, 0x0) close(r8) r9 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r9, 0x0, 0x0, 0x0, 0x0, 0x0) recvfrom$inet6(r9, &(0x7f0000000000)=""/45, 0x2d, 0x0, 0x0, 0x0) splice(r7, 0x0, r8, 0x0, 0x8001, 0x0) request_key(&(0x7f0000000a40)='dns_resolver\x00', &(0x7f0000000a80)={'syz', 0x3}, &(0x7f0000000ac0)='\x00', r6) syz_open_dev$sg(&(0x7f00000060c0), 0xfffffffffffffffd, 0x208180) syz_open_dev$swradio(&(0x7f0000000180), 0x0, 0x2) 136.697521ms ago: executing program 4 (id=1530): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x21, 0x30}, 0xc) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)=' ', 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000c80), 0x0, 0xbcff, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000080)={0x0, 0xfffffefc}, 0xc) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x19fff}], 0x1) close_range(r0, 0xffffffffffffffff, 0x0) 135.503077ms ago: executing program 6 (id=1531): rseq(&(0x7f00000004c0), 0x20, 0x0, 0x0) r0 = syz_io_uring_setup(0x9e, &(0x7f0000000640)={0x0, 0x4000000, 0x0, 0x0, 0x40000333}, &(0x7f00000006c0)=0x0, &(0x7f00000001c0)) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x24004000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv4_newaddr={0x34, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r4}, [@IFA_CACHEINFO={0x14, 0x6, {0x0, 0xf0000000}}, @IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, 0x34}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="70000000140009050000000000000000020100ff", @ANYRES32=r7, @ANYBLOB="1400060006000000000000f0000000000000000008000200ac1414aa08"], 0x70}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000d80)=@ipv4_newaddr={0x38, 0x14, 0x509, 0x0, 0x0, {0x2, 0x1, 0x0, 0xff, r10}, [@IFA_LOCAL={0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, @IFA_ADDRESS={0x8, 0x1, @local}, @IFA_BROADCAST={0x8, 0x4, @loopback}, @IFA_BROADCAST={0x8, 0x4, @multicast2}]}, 0x38}}, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) io_uring_enter(r0, 0x47ba, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 6 (id=1532): socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) socket$packet(0x11, 0x2, 0x300) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0xff, 0x3}, 0xfd}, 0x18) r2 = timerfd_create(0x0, 0x0) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000200)) timerfd_settime(r2, 0x3, &(0x7f0000000440)={{0x0, 0x989680}}, 0x0) clock_adjtime(0x0, &(0x7f0000000480)={0xd54, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000}) ioperm(0x0, 0x7, 0xfffffff7) acct(0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x3a, 0x40, 0x0, 0x0) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x80, 0x0) ioctl$TUNSETIFINDEX(r6, 0x400454da, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) syz_open_procfs(0x0, 0x0) r7 = syz_open_dev$vim2m(&(0x7f0000000080), 0x7e9, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r7, 0xc0405602, &(0x7f0000000100)={0x6, 0x1, 0x0, "abd657bebbdd23613cfda38214fc0e59299e701cef6329784aa62d2f521ee9cc"}) kernel console output (not intermixed with test programs): 7][ T7586] netlink: 20 bytes leftover after parsing attributes in process `syz.4.416'. [ 228.506543][ T5910] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 228.662678][ T5910] usb 3-1: Using ep0 maxpacket: 8 [ 228.670896][ T5910] usb 3-1: New USB device found, idVendor=046d, idProduct=0896, bcdDevice=3a.11 [ 228.680529][ T5910] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 229.307621][ T5910] usb 3-1: Product: syz [ 229.311817][ T5910] usb 3-1: Manufacturer: syz [ 229.316446][ T5910] usb 3-1: SerialNumber: syz [ 229.371497][ T5910] usb 3-1: config 0 descriptor?? [ 229.422727][ T5910] gspca_main: vc032x-2.14.0 probing 046d:0896 [ 230.931794][ T5910] gspca_vc032x: reg_w err -71 [ 230.942745][ T5910] vc032x 3-1:0.0: probe with driver vc032x failed with error -71 [ 230.954939][ T5910] usb 3-1: USB disconnect, device number 25 [ 232.364596][ T7632] No such timeout policy "syz0" [ 232.665682][ T29] audit: type=1400 audit(1730349029.437:391): avc: denied { relabelfrom } for pid=7635 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 232.685511][ T29] audit: type=1400 audit(1730349029.437:392): avc: denied { relabelto } for pid=7635 comm="syz.0.427" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 232.706520][ T7636] overlayfs: missing 'lowerdir' [ 232.808040][ T7646] No such timeout policy "syz0" [ 233.482127][ T7652] netlink: 96 bytes leftover after parsing attributes in process `syz.0.431'. [ 233.542284][ T29] audit: type=1400 audit(1730349030.307:393): avc: denied { mount } for pid=7651 comm="syz.0.431" name="/" dev="bpf" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 233.548286][ T7652] openvswitch: netlink: Actions may not be safe on all matching packets [ 233.727387][ T29] audit: type=1400 audit(1730349030.497:394): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bpf_t tclass=filesystem permissive=1 [ 234.624688][ T29] audit: type=1400 audit(1730349030.697:395): avc: denied { read } for pid=7655 comm="syz.5.432" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 236.409233][ T7675] No such timeout policy "syz0" [ 238.348173][ T5839] Bluetooth: hci2: unexpected event for opcode 0x202d [ 239.180868][ T7706] No such timeout policy "syz0" [ 239.808166][ T29] audit: type=1400 audit(1730349036.577:396): avc: denied { write } for pid=7711 comm="syz.2.444" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 242.620071][ T29] audit: type=1400 audit(1730349039.387:397): avc: denied { create } for pid=7735 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 242.774157][ T29] audit: type=1400 audit(1730349039.547:398): avc: denied { write } for pid=7735 comm="syz.4.450" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 245.133421][ T29] audit: type=1400 audit(1730349041.897:399): avc: denied { create } for pid=7757 comm="syz.0.454" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 245.876759][ T5834] usb 3-1: new high-speed USB device number 26 using dummy_hcd [ 246.302682][ T5834] usb 3-1: Using ep0 maxpacket: 8 [ 246.310931][ T5834] usb 3-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 246.337357][ T5834] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 246.402680][ T5834] usb 3-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 246.440915][ T5834] usb 3-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 246.527580][ T5834] usb 3-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 247.050630][ T5834] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 247.776107][ T5834] usb 3-1: GET_CAPABILITIES returned 0 [ 247.781615][ T5834] usbtmc 3-1:16.0: can't read capabilities [ 248.503789][ T5833] usb 3-1: USB disconnect, device number 26 [ 249.682763][ T29] audit: type=1400 audit(1730349046.397:400): avc: denied { write } for pid=7790 comm="syz.0.461" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 249.944360][ T7798] No such timeout policy "syz0" [ 250.042710][ T5910] usb 1-1: new full-speed USB device number 23 using dummy_hcd [ 251.504097][ T5839] Bluetooth: hci4: unexpected event for opcode 0x202d [ 251.541797][ T29] audit: type=1400 audit(1730349048.307:401): avc: denied { mount } for pid=7805 comm="syz.4.466" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 251.593322][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 251.617589][ T29] audit: type=1400 audit(1730349048.377:402): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 251.626386][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 251.710741][ T7812] vxfs: Unknown parameter '' [ 251.725695][ T5910] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid maxpacket 13155, setting to 64 [ 251.729717][ T29] audit: type=1400 audit(1730349048.497:403): avc: denied { getopt } for pid=7811 comm="syz.4.467" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 251.744410][ T5910] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 251.808578][ T29] audit: type=1400 audit(1730349048.547:404): avc: denied { ioctl } for pid=7811 comm="syz.4.467" path="socket:[14638]" dev="sockfs" ino=14638 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 251.902175][ T5910] usb 1-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 251.924162][ T5910] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.131630][ T5910] usb 1-1: Product: syz [ 252.531043][ T5910] usb 1-1: Manufacturer: syz [ 252.535813][ T5910] usb 1-1: SerialNumber: syz [ 252.681208][ T5910] usb 1-1: config 0 descriptor?? [ 253.855055][ T5910] usb 1-1: can't set config #0, error -71 [ 253.906536][ T5910] usb 1-1: USB disconnect, device number 23 [ 255.391438][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.397772][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 259.271670][ T29] audit: type=1400 audit(1730349056.037:405): avc: denied { map } for pid=7867 comm="syz.4.480" path="socket:[14715]" dev="sockfs" ino=14715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 259.878962][ T29] audit: type=1400 audit(1730349056.037:406): avc: denied { read accept } for pid=7867 comm="syz.4.480" path="socket:[14715]" dev="sockfs" ino=14715 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 261.091135][ T29] audit: type=1400 audit(1730349057.857:407): avc: denied { mount } for pid=7882 comm="syz.0.483" name="/" dev="configfs" ino=155 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 261.123404][ T7173] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 261.264254][ T29] audit: type=1400 audit(1730349057.947:408): avc: denied { unmount } for pid=5821 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 261.307642][ T29] audit: type=1400 audit(1730349058.077:409): avc: denied { read } for pid=7891 comm="syz.0.487" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 261.330946][ T29] audit: type=1400 audit(1730349058.107:410): avc: denied { open } for pid=7891 comm="syz.0.487" path="/dev/snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 262.505877][ T5834] usb 5-1: new high-speed USB device number 15 using dummy_hcd [ 262.513532][ T7173] usb 6-1: device descriptor read/64, error -71 [ 262.545712][ T7893] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 262.551802][ T7893] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 262.585341][ T7893] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 262.777630][ T7893] Bluetooth: hci4: Opcode 0x0406 failed: -4 [ 262.792676][ T5834] usb 5-1: Using ep0 maxpacket: 8 [ 262.805296][ T5834] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 262.818882][ T5834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 262.833107][ T7893] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 263.285887][ T5834] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 263.295860][ T5834] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 263.308864][ T5834] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 263.311117][ T7893] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 263.387290][ T5834] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 263.538317][ T7893] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 263.576448][ T7893] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 264.075241][ T5834] usb 5-1: usb_control_msg returned -32 [ 264.085078][ T5834] usbtmc 5-1:16.0: can't read capabilities [ 264.125091][ T5834] usb 5-1: USB disconnect, device number 15 [ 264.276955][ T7893] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 264.602772][ T5839] Bluetooth: hci4: command 0x0406 tx timeout [ 264.608897][ T5839] Bluetooth: hci1: command 0x0406 tx timeout [ 264.649908][ T29] audit: type=1400 audit(1730349061.417:411): avc: denied { write } for pid=7920 comm="syz.2.494" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 264.930679][ T7922] infiniband syz2: set active [ 264.935805][ T7922] infiniband syz2: added team_slave_1 [ 264.949590][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 265.339136][ T7922] RDS/IB: syz2: added [ 265.344269][ T7922] smc: adding ib device syz2 with port count 1 [ 265.443610][ T7922] smc: ib device syz2 port 1 has pnetid [ 266.046136][ T54] Bluetooth: hci5: command 0x0c1a tx timeout [ 267.205109][ T54] Bluetooth: hci1: command 0x0406 tx timeout [ 267.212193][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 267.218428][ T54] Bluetooth: hci2: command 0x0406 tx timeout [ 268.572711][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 269.103060][ T29] audit: type=1400 audit(1730349065.877:412): avc: denied { setopt } for pid=7973 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 269.117537][ T7974] ipt_REJECT: TCP_RESET invalid for non-tcp [ 269.136031][ T29] audit: type=1400 audit(1730349065.887:413): avc: denied { bind } for pid=7973 comm="syz.1.505" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 269.243033][ T5833] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 269.352612][ T8] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 269.392614][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 269.426532][ T5833] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 269.439999][ T5833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 269.485628][ T5833] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 269.496426][ T8] usb 3-1: device descriptor read/64, error -71 [ 269.525167][ T5833] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 269.797630][ T5833] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 269.814292][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 269.918985][ T8] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 269.970847][ T29] audit: type=1800 audit(1730349066.737:414): pid=7986 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.508" name="/" dev="9p" ino=2 res=0 errno=0 [ 270.263171][ T5833] usb 6-1: usb_control_msg returned -32 [ 270.269116][ T5833] usbtmc 6-1:16.0: can't read capabilities [ 270.454777][ T7979] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.507'. [ 270.473918][ T5833] usb 6-1: USB disconnect, device number 7 [ 270.483838][ T8] usb 3-1: device descriptor read/64, error -71 [ 270.665746][ T8] usb usb3-port1: attempt power cycle [ 270.671551][ T5839] Bluetooth: hci5: command 0x0c1a tx timeout [ 271.111309][ T8] usb 3-1: new high-speed USB device number 29 using dummy_hcd [ 271.543812][ T8002] QAT: failed to copy from user cfg_data. [ 272.556598][ T8013] FAULT_INJECTION: forcing a failure. [ 272.556598][ T8013] name failslab, interval 1, probability 0, space 0, times 0 [ 272.572880][ T8013] CPU: 0 UID: 0 PID: 8013 Comm: syz.1.514 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 272.583488][ T8013] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 272.593548][ T8013] Call Trace: [ 272.596827][ T8013] [ 272.599757][ T8013] dump_stack_lvl+0x16c/0x1f0 [ 272.604450][ T8013] should_fail_ex+0x497/0x5b0 [ 272.609138][ T8013] should_failslab+0xc2/0x120 [ 272.613827][ T8013] __kmalloc_cache_noprof+0x6b/0x300 [ 272.619114][ T8013] ? sctp_add_bind_addr+0x9a/0x3d0 [ 272.624235][ T8013] sctp_add_bind_addr+0x9a/0x3d0 [ 272.629191][ T8013] sctp_copy_local_addr_list+0x39e/0x5a0 [ 272.634852][ T8013] ? __pfx_sctp_copy_local_addr_list+0x10/0x10 [ 272.641026][ T8013] ? sctp_auth_asoc_copy_shkeys+0x2a7/0x360 [ 272.646925][ T8013] ? sctp_bind_addr_copy+0xe0/0x530 [ 272.652123][ T8013] sctp_bind_addr_copy+0xe0/0x530 [ 272.657149][ T8013] sctp_connect_new_asoc+0x1d8/0x790 [ 272.662427][ T8013] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 272.668223][ T8013] ? bpf_lsm_sctp_bind_connect+0x9/0x10 [ 272.673756][ T8013] sctp_sendmsg+0x1610/0x1eb0 [ 272.678418][ T8013] ? avc_has_perm+0x11b/0x1c0 [ 272.683093][ T8013] ? __pfx_sctp_sendmsg+0x10/0x10 [ 272.688106][ T8013] ? find_held_lock+0x2d/0x110 [ 272.692882][ T8013] ? __pfx_sock_has_perm+0x10/0x10 [ 272.698016][ T8013] ? __pfx_sctp_sendmsg+0x10/0x10 [ 272.703042][ T8013] inet_sendmsg+0x119/0x140 [ 272.707558][ T8013] __sys_sendto+0x426/0x4d0 [ 272.712060][ T8013] ? __pfx___sys_sendto+0x10/0x10 [ 272.717101][ T8013] ? ksys_write+0x1ad/0x260 [ 272.721613][ T8013] ? __pfx_ksys_write+0x10/0x10 [ 272.726463][ T8013] __x64_sys_sendto+0xe0/0x1c0 [ 272.731221][ T8013] ? do_syscall_64+0x91/0x250 [ 272.735900][ T8013] ? lockdep_hardirqs_on+0x7c/0x110 [ 272.741124][ T8013] do_syscall_64+0xcd/0x250 [ 272.745640][ T8013] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 272.751525][ T8013] RIP: 0033:0x7f3b8877e719 [ 272.755924][ T8013] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 272.775523][ T8013] RSP: 002b:00007f3b895de038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 272.783941][ T8013] RAX: ffffffffffffffda RBX: 00007f3b88935f80 RCX: 00007f3b8877e719 [ 272.791898][ T8013] RDX: 0000000000034000 RSI: 0000000020000300 RDI: 0000000000000003 [ 272.799853][ T8013] RBP: 00007f3b895de090 R08: 0000000020000380 R09: 0000000000000010 [ 272.807807][ T8013] R10: 0000000000000041 R11: 0000000000000246 R12: 0000000000000002 [ 272.815769][ T8013] R13: 0000000000000000 R14: 00007f3b88935f80 R15: 00007fff460dc928 [ 272.823800][ T8013] [ 274.937025][ T8037] QAT: failed to copy from user cfg_data. [ 276.265183][ T8] usb 3-1: device descriptor read/8, error -71 [ 279.251603][ T8089] netlink: 165 bytes leftover after parsing attributes in process `syz.1.534'. [ 281.022662][ T5839] Bluetooth: hci4: unexpected event for opcode 0x202d [ 281.592800][ T5876] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 281.778798][ T5876] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 281.892792][ T5876] usb 2-1: New USB device found, idVendor=2040, idProduct=5530, bcdDevice=a8.82 [ 281.923317][ T8] usb 5-1: new high-speed USB device number 16 using dummy_hcd [ 281.924888][ T5876] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.005840][ T5876] usb 2-1: config 0 descriptor?? [ 282.016123][ T5876] smsusb:smsusb_probe: board id=8, interface number 0 [ 282.027533][ T5876] smsusb:smsusb_probe: Device initialized with return code -19 [ 282.067610][ T8102] netlink: 12 bytes leftover after parsing attributes in process `syz.0.536'. [ 282.174543][ T8] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 282.184904][ T8] usb 5-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 282.321266][ T8] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 282.329809][ T5875] usb 2-1: USB disconnect, device number 16 [ 282.891400][ T5833] usb 3-1: new high-speed USB device number 31 using dummy_hcd [ 282.907271][ T8] usb 5-1: config 0 descriptor?? [ 282.919707][ T8] pwc: Askey VC010 type 2 USB webcam detected. [ 283.162708][ T5833] usb 3-1: device descriptor read/64, error -71 [ 283.638635][ T8109] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 283.647238][ T8] pwc: recv_control_msg error -32 req 02 val 2b00 [ 283.670918][ T8109] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.397230][ T8] pwc: recv_control_msg error -71 req 02 val 2c00 [ 284.410577][ T8] pwc: recv_control_msg error -71 req 04 val 1000 [ 284.421387][ T8] pwc: recv_control_msg error -71 req 04 val 1300 [ 284.430203][ T8] pwc: recv_control_msg error -71 req 04 val 1400 [ 284.449647][ T8] pwc: recv_control_msg error -71 req 02 val 2000 [ 284.463573][ T5833] usb 3-1: new high-speed USB device number 32 using dummy_hcd [ 284.486660][ T8] pwc: recv_control_msg error -71 req 02 val 2100 [ 284.497214][ T8] pwc: recv_control_msg error -71 req 04 val 1500 [ 284.522733][ T8] pwc: recv_control_msg error -71 req 02 val 2500 [ 284.545928][ T8] pwc: recv_control_msg error -71 req 02 val 2400 [ 284.564454][ T8] pwc: recv_control_msg error -71 req 02 val 2600 [ 284.575085][ T8] pwc: recv_control_msg error -71 req 02 val 2900 [ 284.581890][ T8] pwc: recv_control_msg error -71 req 02 val 2800 [ 284.588765][ T8] pwc: recv_control_msg error -71 req 04 val 1100 [ 284.598146][ T8] pwc: recv_control_msg error -71 req 04 val 1200 [ 284.609307][ T8] pwc: Registered as video103. [ 284.624535][ T8] input: PWC snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/input/input8 [ 284.642074][ T8] usb 5-1: USB disconnect, device number 16 [ 284.743775][ T5824] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 284.818183][ T8150] QAT: failed to copy from user cfg_data. [ 285.494805][ T5824] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 285.505139][ T5824] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 285.680600][ T5824] usb 6-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 285.689742][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.703427][ T5824] usb 6-1: config 0 descriptor?? [ 285.726903][ T5824] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 285.795530][ T8160] QAT: failed to copy from user cfg_data. [ 287.109563][ T8169] netlink: 87 bytes leftover after parsing attributes in process `syz.1.552'. [ 287.141535][ T8169] input: syz0 as /devices/virtual/input/input9 [ 287.185473][ T8169] vlan2: entered promiscuous mode [ 287.196748][ T8174] ADFS-fs (loop0): unrecognised mount option "mËØÓÄ!.K0>¶C [ 287.196748][ T8174] j" or missing value [ 288.240273][ T5824] usb 6-1: USB disconnect, device number 8 [ 289.281566][ T5905] usb 2-1: new high-speed USB device number 17 using dummy_hcd [ 289.580048][ T7173] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 290.206435][ T5905] usb 2-1: Using ep0 maxpacket: 8 [ 290.339518][ T5833] usb 3-1: device descriptor read/64, error -110 [ 290.369705][ T5905] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 290.380993][ T5905] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 290.445496][ T8203] QAT: failed to copy from user cfg_data. [ 290.490644][ T5833] usb usb3-port1: attempt power cycle [ 290.564764][ T29] audit: type=1326 audit(1730349087.327:415): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8201 comm="syz.4.562" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f1c0e97e719 code=0x0 [ 290.934850][ T7173] usb 6-1: device descriptor read/64, error -71 [ 290.934966][ T5833] usb 3-1: new high-speed USB device number 33 using dummy_hcd [ 290.950083][ T5905] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 290.966359][ T5905] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 290.981620][ T5905] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 290.996033][ T5905] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 291.005113][ T5905] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 291.005246][ T5833] usb 3-1: device descriptor read/8, error -32 [ 291.016494][ T5905] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.016526][ T5905] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 291.016573][ T5905] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 291.017524][ T5905] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 291.108971][ T5905] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 291.120350][ T5905] usb 2-1: config 168 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 291.132265][ T5905] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 291.143498][ T5905] usb 2-1: config 168 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 291.161628][ T5905] usb 2-1: string descriptor 0 read error: -22 [ 291.169637][ T5905] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 291.178838][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 291.197552][ T5905] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 291.268026][ T5833] usb 3-1: new high-speed USB device number 34 using dummy_hcd [ 291.292660][ T7173] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 291.305549][ T5833] usb 3-1: device descriptor read/8, error -32 [ 291.442645][ T7173] usb 6-1: device descriptor read/64, error -71 [ 291.462214][ T5833] usb usb3-port1: unable to enumerate USB device [ 291.479368][ T29] audit: type=1400 audit(1730349088.247:416): avc: denied { set_context_mgr } for pid=8209 comm="syz.0.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 291.489855][ T5833] usb 2-1: USB disconnect, device number 17 [ 291.553045][ T29] audit: type=1400 audit(1730349088.277:417): avc: denied { map } for pid=8209 comm="syz.0.564" path="/dev/binderfs/binder0" dev="binder" ino=16 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 292.056753][ T7173] usb usb6-port1: attempt power cycle [ 292.296973][ T8223] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 292.836418][ T29] audit: type=1400 audit(1730349089.587:418): avc: denied { execute } for pid=8220 comm="syz.2.567" path="/dev/bsg/blkio.throttle.io_service_bytes_recursive" dev="devtmpfs" ino=2817 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:device_t tclass=file permissive=1 [ 293.345903][ T8237] No such timeout policy "syz0" [ 295.389416][ T5833] usb 3-1: new high-speed USB device number 35 using dummy_hcd [ 295.544459][ T8254] No such timeout policy "syz0" [ 297.233727][ T8259] QAT: failed to copy from user cfg_data. [ 299.852967][ T5875] usb 5-1: new high-speed USB device number 17 using dummy_hcd [ 300.000323][ T5875] usb 5-1: device descriptor read/64, error -71 [ 300.273123][ T5875] usb 5-1: new high-speed USB device number 18 using dummy_hcd [ 300.412610][ T5875] usb 5-1: device descriptor read/64, error -71 [ 300.528607][ T5875] usb usb5-port1: attempt power cycle [ 300.928119][ T5875] usb 5-1: new high-speed USB device number 19 using dummy_hcd [ 301.244026][ T29] audit: type=1400 audit(1730349098.017:419): avc: denied { append } for pid=8361 comm="syz.1.619" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 301.295224][ T8363] netlink: 12 bytes leftover after parsing attributes in process `syz.0.618'. [ 301.500070][ T8373] netlink: 52 bytes leftover after parsing attributes in process `syz.1.625'. [ 301.504544][ T8376] netlink: 8 bytes leftover after parsing attributes in process `syz.0.622'. [ 301.556457][ T8373] unsupported nlmsg_type 40 [ 301.662356][ T8381] tipc: Failed to remove unknown binding: 66,2,2/0:632643060/632643064 [ 301.876819][ T8386] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 301.970928][ T8396] netlink: 'syz.2.634': attribute type 10 has an invalid length. [ 301.988842][ T8396] bond0: (slave netdevsim0): Releasing backup interface [ 302.004927][ T8396] team0: Port device netdevsim0 added [ 302.085399][ T29] audit: type=1400 audit(1730349098.857:420): avc: denied { mount } for pid=8402 comm="syz.2.637" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 302.113411][ T7173] usb 6-1: new low-speed USB device number 12 using dummy_hcd [ 302.116810][ T5875] usb 5-1: device descriptor read/8, error -71 [ 302.200467][ T29] audit: type=1400 audit(1730349098.967:421): avc: denied { append } for pid=8407 comm="syz.0.639" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 302.233601][ T29] audit: type=1400 audit(1730349098.997:422): avc: denied { bind } for pid=8410 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.292758][ T29] audit: type=1400 audit(1730349098.997:423): avc: denied { setopt } for pid=8410 comm="syz.4.641" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 302.327447][ T7173] usb 6-1: config 5 has an invalid interface number: 241 but max is 0 [ 302.342593][ T7173] usb 6-1: config 5 has no interface number 0 [ 302.348697][ T7173] usb 6-1: config 5 interface 241 has no altsetting 0 [ 302.360120][ T7173] usb 6-1: string descriptor 0 read error: -22 [ 302.366501][ T7173] usb 6-1: New USB device found, idVendor=07ca, idProduct=8150, bcdDevice=31.92 [ 302.376001][ T7173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.607452][ T7173] usb 6-1: USB disconnect, device number 12 [ 302.733481][ T8428] qnx4: no qnx4 filesystem (no root dir). [ 302.972879][ T8439] syz.2.652 (8439) used greatest stack depth: 21520 bytes left [ 303.130195][ T8446] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 303.136965][ T8446] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 303.153900][ T8446] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 303.159908][ T8446] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 303.176646][ T8446] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 303.189952][ T8446] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 303.215008][ T8446] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 303.222051][ T29] audit: type=1400 audit(1730349099.987:424): avc: denied { ioctl } for pid=8459 comm="syz.4.662" path="socket:[17054]" dev="sockfs" ino=17054 ioctlcmd=0x8982 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 303.248022][ T8446] Bluetooth: hci5: Error when powering off device on rfkill (-4) [ 303.261121][ T8470] netlink: 72 bytes leftover after parsing attributes in process `syz.2.666'. [ 303.275114][ T8470] netlink: 280 bytes leftover after parsing attributes in process `syz.2.666'. [ 303.330340][ T29] audit: type=1400 audit(1730349100.097:425): avc: denied { unmount } for pid=5823 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 303.374925][ T29] audit: type=1400 audit(1730349100.097:426): avc: denied { watch } for pid=8473 comm="syz.2.668" path="/116" dev="tmpfs" ino=639 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 303.401859][ T8478] netlink: 312 bytes leftover after parsing attributes in process `syz.5.670'. [ 303.463267][ T5876] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 303.612645][ T5875] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 303.634778][ T5876] usb 1-1: config 0 has no interfaces? [ 303.644373][ T5876] usb 1-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 303.654057][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 303.665292][ T5876] usb 1-1: Product: syz [ 303.669483][ T5876] usb 1-1: Manufacturer: syz [ 303.677491][ T5876] usb 1-1: config 0 descriptor?? [ 303.773287][ T5875] usb 2-1: Using ep0 maxpacket: 32 [ 303.781351][ T5875] usb 2-1: config 0 has no interfaces? [ 303.792646][ T29] audit: type=1400 audit(1730349100.547:427): avc: denied { connect } for pid=8501 comm="syz.2.680" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 303.813957][ T5875] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 303.823433][ T5875] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 303.833916][ T5875] usb 2-1: config 0 descriptor?? [ 303.843898][ T29] audit: type=1400 audit(1730349100.617:428): avc: denied { read } for pid=8503 comm="syz.2.681" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 304.057763][ T5875] usb 2-1: USB disconnect, device number 18 [ 304.093877][ T8462] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 304.113189][ T8462] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 304.141126][ T5910] usb 1-1: USB disconnect, device number 24 [ 304.324602][ T8540] netlink: 4 bytes leftover after parsing attributes in process `syz.2.698'. [ 304.334988][ T8540] netlink: 32 bytes leftover after parsing attributes in process `syz.2.698'. [ 304.471531][ T8553] netlink: 20 bytes leftover after parsing attributes in process `syz.5.704'. [ 304.639720][ T5905] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 304.697474][ T5876] usb 3-1: new high-speed USB device number 36 using dummy_hcd [ 304.843369][ T5905] usb 5-1: Using ep0 maxpacket: 8 [ 304.852242][ T5905] usb 5-1: config 0 has no interfaces? [ 304.859538][ T3609] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.868755][ T3609] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.876211][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 304.882679][ T5905] usb 5-1: New USB device found, idVendor=0458, idProduct=7003, bcdDevice=7a.1a [ 304.893499][ T5876] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 304.904465][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 304.912579][ T5876] usb 3-1: New USB device found, idVendor=046d, idProduct=c314, bcdDevice= 0.40 [ 304.924202][ T5905] usb 5-1: Product: syz [ 304.928847][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 304.936917][ T5905] usb 5-1: Manufacturer: syz [ 304.941512][ T5905] usb 5-1: SerialNumber: syz [ 304.980406][ T5876] usb 3-1: config 0 descriptor?? [ 304.988182][ T5905] usb 5-1: config 0 descriptor?? [ 304.996168][ T5876] hub 3-1:0.0: bad descriptor, ignoring hub [ 305.002087][ T5876] hub 3-1:0.0: probe with driver hub failed with error -5 [ 305.223236][ T8600] ip6gretap1: entered allmulticast mode [ 305.256058][ T8602] netlink: 20 bytes leftover after parsing attributes in process `syz.5.726'. [ 305.498235][ T7173] usb 3-1: reset high-speed USB device number 36 using dummy_hcd [ 306.087512][ T5833] usb 3-1: USB disconnect, device number 36 [ 306.326875][ T29] kauditd_printk_skb: 34 callbacks suppressed [ 306.326891][ T29] audit: type=1400 audit(1730349103.097:463): avc: denied { ioctl } for pid=8631 comm="syz.0.737" path="socket:[17913]" dev="sockfs" ino=17913 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 306.346092][ T8632] vlan2: entered promiscuous mode [ 306.366299][ T8632] vlan2: entered allmulticast mode [ 306.371544][ T8632] vlan0: entered allmulticast mode [ 306.377746][ T8632] veth0_vlan: entered allmulticast mode [ 306.383639][ T8632] vlan0: entered promiscuous mode [ 306.395142][ T8632] team0: Port device vlan2 added [ 306.432725][ T7173] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 306.632178][ T7173] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 306.654121][ T7173] usb 2-1: config 0 has no interfaces? [ 306.659618][ T7173] usb 2-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=14.d4 [ 306.679451][ T7173] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.691648][ T7173] usb 2-1: config 0 descriptor?? [ 306.753315][ T8654] netlink: 4 bytes leftover after parsing attributes in process `syz.2.749'. [ 306.775833][ T8656] batman_adv: batadv0: Adding interface: dummy0 [ 306.782107][ T8656] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.811402][ T8656] batman_adv: batadv0: Interface activated: dummy0 [ 306.826853][ T29] audit: type=1400 audit(1730349103.597:464): avc: denied { setopt } for pid=8657 comm="syz.2.750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 306.833785][ T8660] batadv0: mtu less than device minimum [ 306.854120][ T8660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.866145][ T8660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.878008][ T8660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.891566][ T8660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.903531][ T8660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.915259][ T8660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.923388][ T8628] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 306.926842][ T8660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.945556][ T8660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.956749][ T8660] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 306.978560][ T8628] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 307.012359][ T29] audit: type=1400 audit(1730349103.777:465): avc: denied { getopt } for pid=8627 comm="syz.1.736" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 307.013423][ T5876] usb 2-1: USB disconnect, device number 19 [ 307.239089][ T5833] usb 5-1: USB disconnect, device number 21 [ 307.308990][ T8682] netlink: 48 bytes leftover after parsing attributes in process `syz.4.760'. [ 307.444948][ T29] audit: type=1400 audit(1730349104.217:466): avc: denied { connect } for pid=8687 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 307.499609][ T29] audit: type=1400 audit(1730349104.217:467): avc: denied { getopt } for pid=8687 comm="syz.2.763" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 308.132687][ T7173] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 308.284634][ T7173] usb 6-1: Using ep0 maxpacket: 16 [ 308.291475][ T7173] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 308.301928][ T7173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 308.318247][ T7173] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 308.337679][ T7173] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 308.358212][ T7173] usb 6-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 308.404544][ T7173] usb 6-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 308.423497][ T7173] usb 6-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 308.458497][ T7173] usb 6-1: Manufacturer: syz [ 308.469352][ T7173] usb 6-1: config 0 descriptor?? [ 308.693166][ T29] audit: type=1400 audit(1730349105.457:468): avc: denied { write } for pid=8754 comm="syz.2.792" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 308.763777][ T7173] rc_core: IR keymap rc-hauppauge not found [ 308.769730][ T7173] Registered IR keymap rc-empty [ 308.775409][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.802631][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.823405][ T7173] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 308.835819][ T7173] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input10 [ 308.849471][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.872678][ T5833] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 308.872741][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.902644][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.923467][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.956646][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 308.979094][ T29] audit: type=1400 audit(1730349105.747:469): avc: denied { override_creds } for pid=8766 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 308.999658][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 309.004515][ T29] audit: type=1400 audit(1730349105.747:470): avc: denied { create } for pid=8766 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.033367][ T29] audit: type=1400 audit(1730349105.747:471): avc: denied { bind } for pid=8766 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.036941][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 309.063865][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 309.084253][ T5833] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x4 has an invalid bInterval 0, changing to 7 [ 309.084709][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 309.125163][ T5833] usb 5-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.de [ 309.136223][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 309.143196][ T29] audit: type=1400 audit(1730349105.757:472): avc: denied { connect } for pid=8766 comm="syz.2.794" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 309.171827][ T5833] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 309.172622][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 309.181505][ T5833] usb 5-1: config 0 descriptor?? [ 309.212690][ T7173] mceusb 6-1:0.0: Error: mce write submit urb error = -90 [ 309.226344][ T8773] netlink: 'syz.0.796': attribute type 2 has an invalid length. [ 309.244413][ T7173] mceusb 6-1:0.0: Registered with mce emulator interface version 1 [ 309.252437][ T7173] mceusb 6-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 309.264156][ T7173] usb 6-1: USB disconnect, device number 13 [ 309.401726][ T8751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 309.419607][ T8751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 309.429322][ T5833] ath6kl: Failed to submit usb control message: -71 [ 309.436247][ T5833] ath6kl: unable to send the bmi data to the device: -71 [ 309.443637][ T5833] ath6kl: Unable to send get target info: -71 [ 309.452209][ T5833] ath6kl: Failed to init ath6kl core: -71 [ 309.458658][ T5833] ath6kl_usb 5-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 309.472040][ T5833] usb 5-1: USB disconnect, device number 22 [ 309.506246][ T8785] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 309.833077][ T7173] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 309.992625][ T7173] usb 2-1: Using ep0 maxpacket: 16 [ 310.000898][ T7173] usb 2-1: New USB device found, idVendor=18d1, idProduct=1eaf, bcdDevice= 7.79 [ 310.007856][ T8822] netlink: 8 bytes leftover after parsing attributes in process `syz.4.819'. [ 310.023307][ T7173] usb 2-1: New USB device strings: Mfr=1, Product=0, SerialNumber=0 [ 310.031438][ T7173] usb 2-1: Manufacturer: syz [ 310.051555][ T7173] usb 2-1: config 0 descriptor?? [ 310.286756][ T7173] usb 2-1: Limiting number of CPorts to U8_MAX [ 310.298937][ T7173] usb 2-1: Not enough endpoints found in device, aborting! [ 310.452679][ T5875] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 310.504974][ T5876] usb 2-1: USB disconnect, device number 20 [ 310.612591][ T5875] usb 1-1: Using ep0 maxpacket: 32 [ 310.618861][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 310.630482][ T5875] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 310.640281][ T5875] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 310.649480][ T5875] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 310.658555][ T5875] usb 1-1: config 0 descriptor?? [ 310.665342][ T5875] hub 1-1:0.0: USB hub found [ 310.802598][ T7173] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 310.868984][ T5875] hub 1-1:0.0: 1 port detected [ 310.962600][ T7173] usb 5-1: Using ep0 maxpacket: 8 [ 310.969247][ T7173] usb 5-1: config 0 has an invalid interface number: 52 but max is 0 [ 310.977489][ T7173] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 310.987653][ T7173] usb 5-1: config 0 has no interface number 0 [ 310.993804][ T7173] usb 5-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 311.004932][ T7173] usb 5-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 311.017912][ T7173] usb 5-1: config 0 interface 52 has no altsetting 0 [ 311.034843][ T7173] usb 5-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 311.045776][ T7173] usb 5-1: New USB device strings: Mfr=22, Product=0, SerialNumber=0 [ 311.053947][ T7173] usb 5-1: Manufacturer: syz [ 311.061539][ T7173] usb 5-1: config 0 descriptor?? [ 311.250557][ T8858] siw: device registration error -23 [ 311.289011][ T7173] input: syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.52/input/input12 [ 311.359570][ T8864] capability: warning: `syz.1.836' uses 32-bit capabilities (legacy support in use) [ 311.390037][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 311.390051][ T29] audit: type=1326 audit(1730349108.157:478): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8865 comm="syz.5.837" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f13c977e719 code=0x0 [ 311.500545][ T5875] hub 1-1:0.0: activate --> -90 [ 311.524412][ T5824] usb 5-1: USB disconnect, device number 23 [ 311.524521][ C1] synaptics_usb 5-1:0.52: synusb_irq - usb_submit_urb failed with result: -19 [ 311.706420][ T5875] hub 1-1:0.0: hub_ext_port_status failed (err = -71) [ 311.724572][ T5875] usb 1-1: USB disconnect, device number 25 [ 311.730677][ T5824] usb 1-1: Failed to suspend device, error -19 [ 312.358373][ T8903] netlink: 'syz.4.852': attribute type 41 has an invalid length. [ 312.381077][ T8903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.852'. [ 312.392480][ T8903] team_slave_0: entered allmulticast mode [ 312.479970][ T29] audit: type=1400 audit(1730349109.247:479): avc: denied { remount } for pid=8910 comm="syz.4.857" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 312.691238][ T8929] net_ratelimit: 10 callbacks suppressed [ 312.691255][ T8929] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 312.712562][ T5833] IPVS: starting estimator thread 0... [ 312.739725][ T5824] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 312.833107][ T8930] IPVS: using max 25 ests per chain, 60000 per kthread [ 312.912696][ T5824] usb 6-1: Using ep0 maxpacket: 16 [ 312.929478][ T5824] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 64, changing to 7 [ 312.945103][ T5824] usb 6-1: config 1 interface 1 altsetting 1 endpoint 0x1 has invalid wMaxPacketSize 0 [ 312.970830][ T5824] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 312.997545][ T5824] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.018191][ T5824] usb 6-1: Product: syz [ 313.029434][ T5824] usb 6-1: Manufacturer: syz [ 313.039519][ T5824] usb 6-1: SerialNumber: syz [ 313.278564][ T5824] usb 6-1: 2:1 : UAC_AS_GENERAL descriptor not found [ 313.293501][ T5824] usb 6-1: unit 6 not found! [ 313.319929][ T5824] usb 6-1: USB disconnect, device number 14 [ 313.832693][ T5824] usb 3-1: new full-speed USB device number 37 using dummy_hcd [ 313.841338][ T8976] input: syz1 as /devices/virtual/input/input13 [ 313.902684][ T7173] usb 5-1: new full-speed USB device number 24 using dummy_hcd [ 313.994352][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 10 [ 314.009325][ T5824] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 314.022979][ T5824] usb 3-1: New USB device found, idVendor=133e, idProduct=0815, bcdDevice=7e.66 [ 314.032159][ T5824] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.041431][ T5824] usb 3-1: Product: syz [ 314.046750][ T5824] usb 3-1: Manufacturer: syz [ 314.051375][ T5824] usb 3-1: SerialNumber: syz [ 314.057911][ T5824] usb 3-1: config 0 descriptor?? [ 314.063847][ T29] audit: type=1400 audit(1730349110.837:480): avc: denied { validate_trans } for pid=8990 comm="syz.5.891" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 314.066241][ T5824] snd-usb-audio 3-1:0.0: probe with driver snd-usb-audio failed with error -90 [ 314.091817][ T7173] usb 5-1: unable to get BOS descriptor or descriptor too short [ 314.101560][ T7173] usb 5-1: not running at top speed; connect to a high speed hub [ 314.124222][ T7173] usb 5-1: config 81 has an invalid interface number: 159 but max is 0 [ 314.132489][ T7173] usb 5-1: config 81 has no interface number 0 [ 314.141104][ T7173] usb 5-1: config 81 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 314.152216][ T7173] usb 5-1: config 81 interface 159 has no altsetting 0 [ 314.160904][ T7173] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 314.162638][ T5833] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 314.170467][ T7173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.185699][ T7173] usb 5-1: Product: syz [ 314.190996][ T7173] usb 5-1: Manufacturer: syz [ 314.191557][ T29] audit: type=1400 audit(1730349110.957:481): avc: denied { write } for pid=8992 comm="syz.5.892" name="file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 314.198990][ T29] audit: type=1400 audit(1730349110.957:482): avc: denied { open } for pid=8992 comm="syz.5.892" path="/103/file0/file0" dev="fuse" ino=0 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 314.235913][ T7173] usb 5-1: SerialNumber: syz [ 314.244865][ T29] audit: type=1400 audit(1730349110.997:483): avc: denied { ioctl } for pid=8992 comm="syz.5.892" path="/103/file0/file0" dev="fuse" ino=0 ioctlcmd=0x2272 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=blk_file permissive=1 [ 314.277238][ T8970] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 314.283940][ T5824] usb 3-1: USB disconnect, device number 37 [ 314.324652][ T5833] usb 1-1: config 209 has an invalid interface number: 20 but max is 0 [ 314.333605][ T5833] usb 1-1: config 209 has no interface number 0 [ 314.340073][ T5833] usb 1-1: too many endpoints for config 209 interface 20 altsetting 191: 242, using maximum allowed: 30 [ 314.352299][ T5833] usb 1-1: config 209 interface 20 altsetting 191 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 314.363955][ T5833] usb 1-1: config 209 interface 20 altsetting 191 has 2 endpoint descriptors, different from the interface descriptor's value: 242 [ 314.392594][ T5833] usb 1-1: config 209 interface 20 has no altsetting 0 [ 314.408034][ T5833] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 314.417981][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 314.426134][ T5833] usb 1-1: Product: syz [ 314.430417][ T5833] usb 1-1: Manufacturer: syz [ 314.435226][ T5833] usb 1-1: SerialNumber: syz [ 314.442903][ T29] audit: type=1400 audit(1730349111.197:484): avc: denied { write } for pid=8997 comm="syz.5.894" name="fd" dev="proc" ino=19707 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 314.458229][ T8982] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 314.472196][ T29] audit: type=1400 audit(1730349111.197:485): avc: denied { add_name } for pid=8997 comm="syz.5.894" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 314.500482][ T9001] netlink: 20 bytes leftover after parsing attributes in process `syz.1.895'. [ 314.516578][ T7173] kobil_sct 5-1:81.159: KOBIL USB smart card terminal converter detected [ 314.543960][ T7173] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 314.556266][ T29] audit: type=1400 audit(1730349111.197:486): avc: denied { create } for pid=8997 comm="syz.5.894" name="3" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:sysadm_t tclass=file permissive=1 [ 314.585329][ T7173] usb 5-1: USB disconnect, device number 24 [ 314.594871][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.898'. [ 314.598753][ T29] audit: type=1400 audit(1730349111.197:487): avc: denied { associate } for pid=8997 comm="syz.5.894" name="3" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 314.633167][ T7173] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 314.652941][ T7173] kobil_sct 5-1:81.159: device disconnected [ 314.681465][ T5833] usb-storage 1-1:209.20: USB Mass Storage device detected [ 314.701684][ T5833] usb-storage 1-1:209.20: Quirks match for vid 04e6 pid 000b: 4 [ 314.710063][ T5833] scsi host1: usb-storage 1-1:209.20 [ 314.719103][ T5833] usb 1-1: USB disconnect, device number 26 [ 314.730246][ T9009] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 314.745779][ T9009] kvm: pic: non byte read [ 314.750607][ T9009] kvm: pic: non byte read [ 314.759304][ T9009] kvm: pic: non byte read [ 314.764861][ T9009] kvm: pic: non byte read [ 314.769438][ T9009] kvm: pic: non byte read [ 314.774304][ T9009] kvm: pic: non byte read [ 314.778882][ T9009] kvm: pic: non byte read [ 314.784274][ T9009] kvm: pic: non byte read [ 314.789106][ T9009] kvm: pic: single mode not supported [ 314.789199][ T9009] kvm: pic: non byte read [ 314.803470][ T9009] kvm: pic: non byte read [ 314.808201][ T9009] kvm: pic: level sensitive irq not supported [ 314.808455][ T9009] kvm: pic: level sensitive irq not supported [ 316.422930][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 316.422947][ T29] audit: type=1400 audit(1730349113.167:496): avc: denied { mount } for pid=9081 comm="syz.4.928" name="/" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 316.458233][ T9082] 9pnet_virtio: no channels available for device [ 316.468044][ T9082] SELinux: policydb string length 16 does not match expected length 8 [ 316.476708][ T9082] SELinux: failed to load policy [ 316.566887][ T29] audit: type=1400 audit(1730349113.187:497): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=filesystem permissive=1 [ 316.612407][ T29] audit: type=1400 audit(1730349113.237:498): avc: denied { load_policy } for pid=9074 comm="syz.2.925" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 316.614665][ T9094] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 316.764076][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.771244][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.985177][ T5824] usb 1-1: new full-speed USB device number 27 using dummy_hcd [ 318.003220][ T9143] netlink: 20 bytes leftover after parsing attributes in process `syz.4.952'. [ 318.145801][ T5824] usb 1-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 318.182167][ T5824] usb 1-1: config 1 interface 1 altsetting 1 endpoint 0x82 has invalid maxpacket 512, setting to 64 [ 318.260298][ T5824] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 318.278571][ T5824] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.365763][ T9152] binder: 9147:9152 ioctl c018620c 20000000 returned -22 [ 318.845604][ T5824] usb 1-1: Product: syz [ 318.849823][ T5824] usb 1-1: Manufacturer: syz [ 318.854530][ T5824] usb 1-1: SerialNumber: syz [ 318.927132][ T9157] netlink: 8 bytes leftover after parsing attributes in process `syz.2.956'. [ 319.081628][ T9128] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 319.087982][ T29] audit: type=1400 audit(1730349115.847:499): avc: denied { ioctl } for pid=9165 comm="syz.5.962" path="socket:[20151]" dev="sockfs" ino=20151 ioctlcmd=0x941a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 319.262601][ T29] audit: type=1400 audit(1730349116.007:500): avc: denied { bind } for pid=9176 comm="syz.2.967" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 319.364299][ T9185] binder: 9184:9185 ioctl c0306201 20000840 returned -14 [ 319.371422][ T29] audit: type=1400 audit(1730349116.137:501): avc: denied { name_bind } for pid=9186 comm="syz.1.971" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 319.392331][ C1] vkms_vblank_simulate: vblank timer overrun [ 319.491885][ T5824] cdc_ncm 1-1:1.0: failed GET_NTB_PARAMETERS [ 319.498216][ T5824] cdc_ncm 1-1:1.0: bind() failure [ 319.512173][ T5824] cdc_ncm 1-1:1.1: CDC Union missing and no IAD found [ 319.521650][ T5824] cdc_ncm 1-1:1.1: bind() failure [ 319.529492][ T5824] usb 1-1: USB disconnect, device number 27 [ 319.568497][ T9199] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 319.589340][ T29] audit: type=1400 audit(1730349116.357:502): avc: denied { write } for pid=9202 comm="syz.2.978" name="usbmon0" dev="devtmpfs" ino=721 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 319.888557][ T9226] usb usb8: usbfs: process 9226 (syz.4.989) did not claim interface 16 before use [ 319.916555][ T9228] netlink: 'syz.5.988': attribute type 3 has an invalid length. [ 319.929707][ T9228] netlink: 'syz.5.988': attribute type 3 has an invalid length. [ 319.965284][ T29] audit: type=1400 audit(1730349116.737:503): avc: denied { nlmsg_write } for pid=9229 comm="syz.1.990" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 320.102288][ T9243] netlink: 200 bytes leftover after parsing attributes in process `syz.1.994'. [ 320.177796][ T9246] raw_sendmsg: syz.2.998 forgot to set AF_INET. Fix it! [ 320.491304][ T29] audit: type=1400 audit(1730349117.257:504): avc: denied { bind } for pid=9278 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.512074][ T9277] xt_cgroup: invalid path, errno=-2 [ 320.529797][ T29] audit: type=1400 audit(1730349117.287:505): avc: denied { listen } for pid=9278 comm="syz.1.1014" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 320.947852][ T9318] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1031'. [ 321.019060][ T9322] input: syz0 as /devices/virtual/input/input14 [ 321.113240][ T5824] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 321.137974][ T9332] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1038'. [ 321.262806][ T5824] usb 1-1: Using ep0 maxpacket: 8 [ 321.270538][ T5824] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 321.302271][ T5824] usb 1-1: New USB device found, idVendor=6666, idProduct=8804, bcdDevice= 0.00 [ 321.336166][ T5824] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 321.363507][ T5824] usb 1-1: config 0 descriptor?? [ 321.370923][ T5824] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 321.589652][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 321.589666][ T29] audit: type=1400 audit(1730349118.357:508): avc: denied { unmount } for pid=7116 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 321.723489][ T7173] usb 1-1: USB disconnect, device number 28 [ 321.752823][ T5905] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 321.916903][ T5905] usb 2-1: New USB device found, idVendor=1de1, idProduct=c102, bcdDevice=7d.08 [ 321.931708][ T5905] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 321.958587][ T5905] usb 2-1: Product: syz [ 321.972631][ T5905] usb 2-1: Manufacturer: syz [ 321.977277][ T5905] usb 2-1: SerialNumber: syz [ 321.993218][ T5905] usb 2-1: config 0 descriptor?? [ 322.001371][ T5905] gm12u320 2-1:0.0: [drm:gm12u320_misc_request.constprop.0] *ERROR* Misc. req. error -22 [ 322.021745][ T5905] gm12u320 2-1:0.0: probe with driver gm12u320 failed with error -5 [ 322.055258][ T5905] usb-storage 2-1:0.0: USB Mass Storage device detected [ 322.066703][ T5905] usb-storage 2-1:0.0: device ignored [ 322.104299][ T9388] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1061'. [ 322.218513][ T29] audit: type=1400 audit(1730349118.987:509): avc: denied { setopt } for pid=9361 comm="syz.1.1051" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 322.239192][ T5905] usb 2-1: USB disconnect, device number 21 [ 322.335966][ T9393] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 322.376237][ T9393] SELinux: failed to load policy [ 323.292637][ T5833] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 323.452503][ T5833] usb 6-1: Using ep0 maxpacket: 8 [ 323.462817][ T5833] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.476099][ T5833] usb 6-1: New USB device found, idVendor=0e8d, idProduct=2000, bcdDevice=21.c6 [ 323.485283][ T5833] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.502752][ T5905] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 323.511909][ T5833] usb 6-1: config 0 descriptor?? [ 323.572620][ T5910] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 323.660117][ T5905] usb 5-1: unable to get BOS descriptor or descriptor too short [ 323.669594][ T5905] usb 5-1: not running at top speed; connect to a high speed hub [ 323.679655][ T5905] usb 5-1: config 81 has an invalid interface number: 159 but max is 0 [ 323.688357][ T5905] usb 5-1: config 81 has no interface number 0 [ 323.695055][ T5905] usb 5-1: config 81 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 323.706641][ T5905] usb 5-1: config 81 interface 159 has no altsetting 0 [ 323.715409][ T5905] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 323.724276][ T5910] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.728992][ T5876] usb 6-1: USB disconnect, device number 15 [ 323.742487][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.760929][ T5910] usb 1-1: New USB device found, idVendor=046d, idProduct=08c1, bcdDevice=ee.8d [ 323.787953][ T5910] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.804789][ T5910] usb 1-1: config 0 descriptor?? [ 323.898186][ T5905] usb 5-1: Product: syz [ 323.902373][ T5905] usb 5-1: Manufacturer: syz [ 323.907067][ T5905] usb 5-1: SerialNumber: syz [ 323.934169][ T9448] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 324.836825][ T5833] usb 1-1: USB disconnect, device number 29 [ 324.850579][ T9492] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 324.898319][ T5905] kobil_sct 5-1:81.159: KOBIL USB smart card terminal converter detected [ 324.909060][ T5905] usb 5-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 324.920804][ T5905] usb 5-1: USB disconnect, device number 25 [ 324.929178][ T5905] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 324.939280][ T5905] kobil_sct 5-1:81.159: device disconnected [ 325.058409][ T9501] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1108'. [ 325.147698][ T9496] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 325.167183][ T9496] picdev_read: 3 callbacks suppressed [ 325.167213][ T9496] kvm: pic: non byte read [ 325.177715][ T9496] kvm: pic: level sensitive irq not supported [ 325.177772][ T9496] kvm: pic: non byte read [ 326.847125][ T5905] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 327.022618][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 327.033842][ T5905] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 327.048890][ T5905] usb 6-1: New USB device found, idVendor=056a, idProduct=032c, bcdDevice= 0.00 [ 327.059144][ T5905] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.070736][ T5905] usb 6-1: config 0 descriptor?? [ 327.162844][ T5833] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 327.237092][ T29] audit: type=1400 audit(1730349123.977:510): avc: denied { bind } for pid=9541 comm="syz.2.1126" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 327.318292][ T5833] usb 2-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 327.330624][ T5833] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 327.349935][ T5833] usb 2-1: config 0 descriptor?? [ 327.373240][ T5910] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 327.488016][ T5905] wacom 0003:056A:032C.0001: item fetching failed at offset 0/2 [ 327.509759][ T5905] wacom 0003:056A:032C.0001: parse failed [ 327.515880][ T5905] wacom 0003:056A:032C.0001: probe with driver wacom failed with error -22 [ 327.533094][ T5910] usb 5-1: Using ep0 maxpacket: 32 [ 327.540743][ T5910] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid maxpacket 30768, setting to 1024 [ 327.553116][ T5910] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 1024 [ 327.578228][ T5910] usb 5-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 327.587687][ T5910] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 327.608560][ T5910] usb 5-1: Product: syz [ 327.618660][ T5910] usb 5-1: Manufacturer: syz [ 327.627814][ T5910] usb 5-1: SerialNumber: syz [ 327.635833][ T5910] usb 5-1: config 0 descriptor?? [ 327.646100][ T9535] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 327.657185][ T5910] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 327.690714][ T5876] usb 6-1: USB disconnect, device number 16 [ 327.838692][ T29] audit: type=1400 audit(1730349124.607:511): avc: denied { read } for pid=9567 comm="syz.2.1138" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 327.863616][ T5910] usb 5-1: USB disconnect, device number 26 [ 327.867667][ T29] audit: type=1400 audit(1730349124.637:512): avc: denied { open } for pid=9567 comm="syz.2.1138" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 327.978844][ T5833] usb 2-1: Cannot set autoneg [ 327.985482][ T5833] MOSCHIP usb-ethernet driver 2-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 327.999880][ T5833] usb 2-1: USB disconnect, device number 22 [ 328.186187][ T9579] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1141'. [ 328.466827][ T29] audit: type=1326 audit(1730349125.227:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9593 comm="syz.4.1148" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f1c0e97e719 code=0x0 [ 328.837684][ T9614] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1157'. [ 329.573107][ T5833] usb 3-1: new high-speed USB device number 38 using dummy_hcd [ 329.685292][ T9655] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.722671][ T5833] usb 3-1: Using ep0 maxpacket: 16 [ 329.730201][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 329.736758][ T9658] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 329.741587][ T5833] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid wMaxPacketSize 0 [ 329.762441][ T5833] usb 3-1: New USB device found, idVendor=0158, idProduct=0100, bcdDevice= 0.00 [ 329.771840][ T5833] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 329.773799][ T5876] usb 1-1: new full-speed USB device number 30 using dummy_hcd [ 329.795128][ T5833] usb 3-1: config 0 descriptor?? [ 329.804735][ T9660] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1177'. [ 329.915357][ T9664] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 329.954070][ T5876] usb 1-1: unable to get BOS descriptor or descriptor too short [ 329.962275][ T5876] usb 1-1: not running at top speed; connect to a high speed hub [ 329.972129][ T5876] usb 1-1: config 81 has an invalid interface number: 159 but max is 0 [ 329.983785][ T5876] usb 1-1: config 81 has no interface number 0 [ 329.989960][ T5876] usb 1-1: config 81 interface 159 altsetting 2 endpoint 0x4 has invalid maxpacket 1023, setting to 64 [ 330.001157][ T5876] usb 1-1: config 81 interface 159 has no altsetting 0 [ 330.017466][ T5876] usb 1-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 330.041254][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.055699][ T5876] usb 1-1: Product: syz [ 330.059882][ T5876] usb 1-1: Manufacturer: syz [ 330.067492][ T5876] usb 1-1: SerialNumber: syz [ 330.082316][ T9639] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 330.214909][ T5833] hid (null): unknown global tag 0xc [ 330.222239][ T5833] hid-generic 0003:0158:0100.0002: unknown main item tag 0x0 [ 330.229805][ T5833] hid-generic 0003:0158:0100.0002: unexpected long global item [ 330.239737][ T5833] hid-generic 0003:0158:0100.0002: probe with driver hid-generic failed with error -22 [ 330.310723][ T5876] kobil_sct 1-1:81.159: KOBIL USB smart card terminal converter detected [ 330.321168][ T5876] usb 1-1: KOBIL USB smart card terminal converter now attached to ttyUSB0 [ 330.335566][ T5876] usb 1-1: USB disconnect, device number 30 [ 330.351158][ T5876] kobil ttyUSB0: KOBIL USB smart card terminal converter now disconnected from ttyUSB0 [ 330.361886][ T5876] kobil_sct 1-1:81.159: device disconnected [ 330.422950][ T5833] usb 3-1: USB disconnect, device number 38 [ 330.473469][ T5910] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 330.623902][ T5910] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 330.645060][ T5910] usb 2-1: New USB device found, idVendor=061c, idProduct=c0a4, bcdDevice=e9.c7 [ 330.661371][ T5910] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 330.669575][ T5910] usb 2-1: Product: syz [ 330.678733][ T5910] usb 2-1: Manufacturer: syz [ 330.684569][ T5910] usb 2-1: SerialNumber: syz [ 330.694806][ T5910] usb 2-1: config 0 descriptor?? [ 330.909131][ T5910] usb 2-1: USB disconnect, device number 23 [ 331.415407][ T9759] veth0_vlan: entered allmulticast mode [ 331.758290][ T9786] pim6reg1: entered promiscuous mode [ 331.767167][ T9786] pim6reg1: entered allmulticast mode [ 332.094762][ T9812] tun0: tun_chr_ioctl cmd 1074025677 [ 332.104463][ T9812] tun0: linktype set to 1 [ 334.119876][ T9894] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 334.153879][ T9894] syzkaller0: entered promiscuous mode [ 334.179965][ T9894] syzkaller0: entered allmulticast mode [ 337.178862][ T9946] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1303'. [ 337.486549][ T9948] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1305'. [ 337.831048][ T5875] usb 3-1: new high-speed USB device number 39 using dummy_hcd [ 337.996915][ T5875] usb 3-1: New USB device found, idVendor=046d, idProduct=0870, bcdDevice=61.47 [ 338.010739][ T5875] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 338.044510][ T5875] usb 3-1: config 0 descriptor?? [ 338.061854][ T5875] gspca_main: STV06xx-2.14.0 probing 046d:0870 [ 339.522586][ T5824] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 339.892564][ T5824] usb 6-1: Using ep0 maxpacket: 8 [ 339.996403][ T5824] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 340.006207][ T5824] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 340.016495][ T5824] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 340.032618][ T5824] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 340.052652][ T5824] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 340.061711][ T5824] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.778570][ T29] audit: type=1326 audit(1730349137.537:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.4.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0e97e719 code=0x7ffc0000 [ 340.811981][ T29] audit: type=1326 audit(1730349137.537:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.4.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0e97e719 code=0x7ffc0000 [ 340.837190][ T29] audit: type=1326 audit(1730349137.547:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.4.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=12 compat=0 ip=0x7f1c0e97e719 code=0x7ffc0000 [ 340.860845][ T29] audit: type=1326 audit(1730349137.547:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.4.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0e97e719 code=0x7ffc0000 [ 340.902298][ T5824] usb 6-1: GET_CAPABILITIES returned 0 [ 340.908119][ T5824] usbtmc 6-1:16.0: can't read capabilities [ 340.917762][ T29] audit: type=1326 audit(1730349137.547:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.4.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0e97e719 code=0x7ffc0000 [ 340.941932][ T29] audit: type=1326 audit(1730349137.547:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.4.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f1c0e97d0b0 code=0x7ffc0000 [ 340.999927][ T29] audit: type=1326 audit(1730349137.547:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.4.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0e97e719 code=0x7ffc0000 [ 341.072639][ T29] audit: type=1326 audit(1730349137.547:521): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.4.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0e97e719 code=0x7ffc0000 [ 341.132908][ T29] audit: type=1326 audit(1730349137.547:522): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.4.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=72 compat=0 ip=0x7f1c0e97e719 code=0x7ffc0000 [ 341.175046][ T5824] usb 6-1: USB disconnect, device number 17 [ 341.198950][ T29] audit: type=1326 audit(1730349137.547:523): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9955 comm="syz.4.1307" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f1c0e97e719 code=0x7ffc0000 [ 342.198560][ T5875] gspca_stv06xx: I2C: Read error writing address: -71 [ 342.217149][ T5875] usb 3-1: USB disconnect, device number 39 [ 343.912685][ T5876] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 344.182662][ T5876] usb 1-1: device descriptor read/64, error -71 [ 344.902623][ T7173] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 344.974162][ T5876] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 345.822586][ T7173] usb 5-1: Using ep0 maxpacket: 8 [ 345.888400][ T5876] usb 1-1: device descriptor read/64, error -71 [ 345.904992][ T7173] usb 5-1: New USB device found, idVendor=0763, idProduct=2080, bcdDevice=d0.ab [ 345.920399][ T7173] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 345.936657][ T7173] usb 5-1: Product: syz [ 345.961200][ T7173] usb 5-1: Manufacturer: syz [ 346.122629][ T5876] usb usb1-port1: attempt power cycle [ 346.128465][ T7173] usb 5-1: SerialNumber: syz [ 346.141390][ T7173] usb 5-1: config 0 descriptor?? [ 348.358930][ T7173] usb 5-1: USB disconnect, device number 27 [ 349.746966][T10062] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 351.992610][ T7173] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 352.153480][ T7173] usb 6-1: Using ep0 maxpacket: 32 [ 352.174899][ T7173] usb 6-1: New USB device found, idVendor=04e8, idProduct=6601, bcdDevice=81.9b [ 352.182540][T10085] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1337'. [ 352.200803][ T7173] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.239245][ T7173] usb 6-1: Product: syz [ 352.257327][ T7173] usb 6-1: Manufacturer: syz [ 352.261945][ T7173] usb 6-1: SerialNumber: syz [ 352.383048][ T7173] usb 6-1: config 0 descriptor?? [ 352.411881][ T7173] usb 6-1: active config #0 != 1 ?? [ 352.943156][ T7173] usb 6-1: USB disconnect, device number 18 [ 354.694739][T10101] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1342'. [ 356.381729][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.394749][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.536740][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.544537][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.551938][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.559210][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 356.668503][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 356.761580][T10119] overlayfs: failed to resolve './file0': -2 [ 356.829822][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 356.838009][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 356.943479][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 356.951426][ T5839] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 356.958672][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 358.018752][T10138] netlink: 'syz.5.1353': attribute type 8 has an invalid length. [ 358.102003][ T6241] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.132607][ T5876] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 358.255339][T10112] chnl_net:caif_netlink_parms(): no params data found [ 358.294682][ T29] kauditd_printk_skb: 14 callbacks suppressed [ 358.294700][ T29] audit: type=1400 audit(1730349155.067:538): avc: denied { mounton } for pid=10142 comm="syz.2.1355" path="/proc/763/task" dev="proc" ino=24886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 358.298927][ T6241] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.362721][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 358.370449][ T5876] usb 5-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 358.382530][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 358.409812][ T5876] usb 5-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 358.471516][ T5876] usb 5-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 358.502226][ T5876] usb 5-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 358.511968][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 358.632765][T10157] No such timeout policy "syz0" [ 359.042812][ T6241] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.063608][ T5839] Bluetooth: hci3: command tx timeout [ 359.179554][ T5876] usb 5-1: GET_CAPABILITIES returned 0 [ 359.188966][ T5876] usbtmc 5-1:16.0: can't read capabilities [ 359.210674][T10112] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.213833][ T5876] usb 5-1: USB disconnect, device number 28 [ 359.225122][T10112] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.232293][T10112] bridge_slave_0: entered allmulticast mode [ 359.239369][T10112] bridge_slave_0: entered promiscuous mode [ 359.267299][ T6241] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.281125][T10112] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.289607][T10112] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.297065][T10112] bridge_slave_1: entered allmulticast mode [ 359.306017][T10112] bridge_slave_1: entered promiscuous mode [ 359.363791][T10112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.384945][T10112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.431624][T10112] team0: Port device team_slave_0 added [ 359.455213][T10112] team0: Port device team_slave_1 added [ 359.488955][T10112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 359.496099][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.670075][T10112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 359.750117][ T6241] bridge_slave_1: left allmulticast mode [ 359.797983][ T6241] bridge_slave_1: left promiscuous mode [ 359.831757][ T6241] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.961922][ T6241] bridge_slave_0: left allmulticast mode [ 360.028013][ T6241] bridge_slave_0: left promiscuous mode [ 360.042312][ T6241] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.082752][ T5875] usb 3-1: new high-speed USB device number 40 using dummy_hcd [ 360.372734][ T5875] usb 3-1: Using ep0 maxpacket: 32 [ 360.381053][ T5875] usb 3-1: New USB device found, idVendor=108c, idProduct=0159, bcdDevice=ad.c4 [ 360.390962][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 360.403924][ T5875] usb 3-1: Product: syz [ 360.408116][ T5875] usb 3-1: Manufacturer: syz [ 360.417507][ T5875] usb 3-1: SerialNumber: syz [ 360.427285][ T5875] usb 3-1: config 0 descriptor?? [ 360.436298][ T5875] etas_es58x 3-1:0.0: Starting syz syz (Serial Number syz) [ 360.481031][T10175] mmap: syz.4.1361 (10175) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 360.897331][ T7173] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 361.082786][ T54] Bluetooth: hci3: command tx timeout [ 361.097933][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1361'. [ 361.136077][ T7173] usb 1-1: Using ep0 maxpacket: 16 [ 361.143042][ T7173] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 8 [ 361.153785][ T7173] usb 1-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 5.00 [ 361.163213][ T7173] usb 1-1: New USB device strings: Mfr=251, Product=1, SerialNumber=3 [ 361.171531][ T7173] usb 1-1: Product: syz [ 361.176403][ T7173] usb 1-1: Manufacturer: syz [ 361.185602][ T7173] usb 1-1: SerialNumber: syz [ 361.192736][ T7173] usb 1-1: config 0 descriptor?? [ 361.199467][ T7173] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 361.207475][ T7173] usb 1-1: Detected FT2232C/D [ 361.421634][ T7173] ftdi_sio ttyUSB0: Unable to read latency timer: -71 [ 361.428805][T10172] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 361.440542][ T7173] ftdi_sio ttyUSB0: Unable to write latency timer: -71 [ 361.453185][ T7173] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 361.475657][ T7173] usb 1-1: USB disconnect, device number 34 [ 361.489300][ T7173] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 361.499002][ T7173] ftdi_sio 1-1:0.0: device disconnected [ 361.606758][ T6241] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 361.627280][ T6241] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 361.646104][ T6241] bond0 (unregistering): Released all slaves [ 361.660369][T10112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.672701][T10112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.708419][T10112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.815672][T10112] hsr_slave_0: entered promiscuous mode [ 362.454465][T10112] hsr_slave_1: entered promiscuous mode [ 362.751008][ T5876] usb 5-1: new full-speed USB device number 29 using dummy_hcd [ 362.859945][ T5824] usb 3-1: USB disconnect, device number 40 [ 362.900033][ T6241] hsr_slave_0: left promiscuous mode [ 362.934398][ T5876] usb 5-1: unable to get BOS descriptor or descriptor too short [ 362.954130][ T5876] usb 5-1: not running at top speed; connect to a high speed hub [ 362.970187][ T5876] usb 5-1: config 81 has an invalid interface number: 159 but max is 0 [ 362.993751][ T5876] usb 5-1: config 81 has no interface number 0 [ 363.002588][ T6241] hsr_slave_1: left promiscuous mode [ 363.008642][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 363.026542][ T5876] usb 5-1: config 81 interface 159 has no altsetting 0 [ 363.040925][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 363.071249][ T6241] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 363.071246][ T5876] usb 5-1: New USB device found, idVendor=0d46, idProduct=0078, bcdDevice=fb.61 [ 363.071274][ T5876] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.078771][ T6241] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 363.098184][ T5876] usb 5-1: Product: syz [ 363.112530][ T5876] usb 5-1: Manufacturer: syz [ 363.190057][T10212] QAT: failed to copy from user cfg_data. [ 363.322809][ T54] Bluetooth: hci3: command tx timeout [ 363.683586][ T5876] usb 5-1: SerialNumber: syz [ 363.811908][ T6241] veth1_macvtap: left promiscuous mode [ 363.818971][ T6241] veth0_macvtap: left promiscuous mode [ 363.842732][ T6241] veth1_vlan: left promiscuous mode [ 363.848060][ T6241] veth0_vlan: left promiscuous mode [ 363.998767][ T5876] kobil_sct 5-1:81.159: required endpoints missing [ 364.007982][ T7173] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 364.115713][ T5876] usb 5-1: USB disconnect, device number 29 [ 364.217078][ T7173] usb 6-1: Using ep0 maxpacket: 8 [ 364.229259][ T7173] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 364.239141][ T7173] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 364.260231][ T7173] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 364.276912][ T7173] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 364.307046][ T7173] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 364.342550][ T7173] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.456661][T10231] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 364.476053][T10231] kvm: pic: non byte read [ 364.600639][ T7173] usb 6-1: GET_CAPABILITIES returned 0 [ 364.606443][ T7173] usbtmc 6-1:16.0: can't read capabilities [ 365.375859][ T7173] usb 6-1: USB disconnect, device number 19 [ 365.403377][ T54] Bluetooth: hci3: command tx timeout [ 365.403573][ T6241] team0 (unregistering): Port device team_slave_1 removed [ 365.479828][ T6241] team0 (unregistering): Port device team_slave_0 removed [ 366.798633][T10266] netlink: 'syz.4.1388': attribute type 9 has an invalid length. [ 366.808485][T10266] netlink: 134636 bytes leftover after parsing attributes in process `syz.4.1388'. [ 366.852469][ T29] audit: type=1400 audit(1730349163.617:539): avc: denied { connect } for pid=10271 comm="syz.0.1390" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 366.928034][T10278] FAULT_INJECTION: forcing a failure. [ 366.928034][T10278] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 366.950302][T10278] CPU: 0 UID: 0 PID: 10278 Comm: syz.0.1391 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 366.961072][T10278] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 366.971107][T10278] Call Trace: [ 366.974375][T10278] [ 366.977287][T10278] dump_stack_lvl+0x16c/0x1f0 [ 366.981948][T10278] should_fail_ex+0x497/0x5b0 [ 366.986618][T10278] _copy_to_user+0x32/0xd0 [ 366.991015][T10278] simple_read_from_buffer+0xd0/0x160 [ 366.996366][T10278] proc_fail_nth_read+0x198/0x270 [ 367.001371][T10278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.006914][T10278] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 367.012434][T10278] vfs_read+0x1df/0xbe0 [ 367.016581][T10278] ? __fget_files+0x23a/0x3f0 [ 367.021255][T10278] ? fdget_pos+0x24c/0x360 [ 367.025651][T10278] ? __pfx_lock_release+0x10/0x10 [ 367.030651][T10278] ? trace_lock_acquire+0x14a/0x1d0 [ 367.035841][T10278] ? __pfx_vfs_read+0x10/0x10 [ 367.040509][T10278] ? __pfx___mutex_lock+0x10/0x10 [ 367.045539][T10278] ? __fget_files+0x244/0x3f0 [ 367.050215][T10278] ksys_read+0x12f/0x260 [ 367.054444][T10278] ? __pfx_ksys_read+0x10/0x10 [ 367.059193][T10278] do_syscall_64+0xcd/0x250 [ 367.063681][T10278] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.069553][T10278] RIP: 0033:0x7fb5cdd7d15c [ 367.073949][T10278] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 367.093546][T10278] RSP: 002b:00007fb5ceab3030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 367.101944][T10278] RAX: ffffffffffffffda RBX: 00007fb5cdf35f80 RCX: 00007fb5cdd7d15c [ 367.109899][T10278] RDX: 000000000000000f RSI: 00007fb5ceab30a0 RDI: 0000000000000005 [ 367.117847][T10278] RBP: 00007fb5ceab3090 R08: 0000000000000000 R09: 0000000000000000 [ 367.125796][T10278] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.133766][T10278] R13: 0000000000000000 R14: 00007fb5cdf35f80 R15: 00007ffc7a6d28b8 [ 367.141736][T10278] [ 367.171496][T10112] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 367.192896][T10258] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1388'. [ 367.213103][T10260] @: renamed from vlan0 (while UP) [ 367.240532][T10263] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.266245][T10112] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 367.282348][T10112] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 367.286858][T10283] FAULT_INJECTION: forcing a failure. [ 367.286858][T10283] name failslab, interval 1, probability 0, space 0, times 0 [ 367.302124][T10283] CPU: 1 UID: 0 PID: 10283 Comm: syz.5.1394 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 367.312890][T10283] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 367.322945][T10283] Call Trace: [ 367.326218][T10283] [ 367.329148][T10283] dump_stack_lvl+0x16c/0x1f0 [ 367.333837][T10283] should_fail_ex+0x497/0x5b0 [ 367.338514][T10283] ? fs_reclaim_acquire+0xae/0x150 [ 367.343633][T10283] should_failslab+0xc2/0x120 [ 367.348316][T10283] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 367.353696][T10283] ? __pmd_alloc+0xc3/0x810 [ 367.358207][T10283] __pmd_alloc+0xc3/0x810 [ 367.362543][T10283] __handle_mm_fault+0x942/0x2a10 [ 367.367574][T10283] ? __pfx_mt_find+0x10/0x10 [ 367.372150][T10283] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 367.377769][T10283] ? __pfx___handle_mm_fault+0x10/0x10 [ 367.383222][T10283] ? find_vma+0xc0/0x140 [ 367.387450][T10283] ? __pfx_find_vma+0x10/0x10 [ 367.392110][T10283] handle_mm_fault+0x3fa/0xaa0 [ 367.396866][T10283] do_user_addr_fault+0x7a3/0x13f0 [ 367.401987][T10283] exc_page_fault+0x5c/0xc0 [ 367.406480][T10283] asm_exc_page_fault+0x26/0x30 [ 367.411367][T10283] RIP: 0010:rep_movs_alternative+0x4a/0x70 [ 367.417209][T10283] Code: 75 f1 c3 cc cc cc cc 66 0f 1f 84 00 00 00 00 00 48 8b 06 48 89 07 48 83 c6 08 48 83 c7 08 83 e9 08 74 df 83 f9 08 73 e8 eb c9 a4 c3 cc cc cc cc 48 89 c8 48 c1 e9 03 83 e0 07 f3 48 a5 89 c1 [ 367.436818][T10283] RSP: 0018:ffffc9000351fc98 EFLAGS: 00050202 [ 367.442885][T10283] RAX: 0000000000000001 RBX: 0000000000000186 RCX: 0000000000000186 [ 367.450850][T10283] RDX: fffff520006a3fd1 RSI: ffffc9000351fd08 RDI: 0000000020000000 [ 367.458814][T10283] RBP: 0000000020000000 R08: 0000000000000000 R09: fffff520006a3fd1 [ 367.466771][T10283] R10: 0000000000000005 R11: 0000000000000000 R12: ffffc9000351fd08 [ 367.474725][T10283] R13: 0000000020000186 R14: 00007fffffffefff R15: 0000000000000000 [ 367.482693][T10283] _copy_to_user+0xbb/0xd0 [ 367.487109][T10283] __do_sys_newuname+0x11b/0x270 [ 367.492034][T10283] ? __pfx___do_sys_newuname+0x10/0x10 [ 367.497504][T10283] ? __pfx_ksys_write+0x10/0x10 [ 367.502353][T10283] do_syscall_64+0xcd/0x250 [ 367.506851][T10283] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.512742][T10283] RIP: 0033:0x7f13c977e719 [ 367.517140][T10283] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.536735][T10283] RSP: 002b:00007f13ca63f038 EFLAGS: 00000246 ORIG_RAX: 000000000000003f [ 367.545133][T10283] RAX: ffffffffffffffda RBX: 00007f13c9935f80 RCX: 00007f13c977e719 [ 367.553086][T10283] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000020000000 [ 367.561039][T10283] RBP: 00007f13ca63f090 R08: 0000000000000000 R09: 0000000000000000 [ 367.568991][T10283] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.576947][T10283] R13: 0000000000000000 R14: 00007f13c9935f80 R15: 00007ffd7f8b11f8 [ 367.584912][T10283] [ 367.609154][T10285] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1393'. [ 367.645438][T10112] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 367.880588][T10112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 367.913769][T10112] 8021q: adding VLAN 0 to HW filter on device team0 [ 367.981072][ T80] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.988277][ T80] bridge0: port 1(bridge_slave_0) entered forwarding state [ 367.997666][ T80] bridge0: port 2(bridge_slave_1) entered blocking state [ 368.004758][ T80] bridge0: port 2(bridge_slave_1) entered forwarding state [ 368.149032][T10112] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 368.149149][ T5875] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 368.412617][ T5875] usb 6-1: Using ep0 maxpacket: 8 [ 368.419670][ T5875] usb 6-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.432793][ T5875] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.452010][ T5875] usb 6-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 368.462407][ T5875] usb 6-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 368.475950][ T5875] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 368.486185][ T5875] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 368.558816][T10112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 368.640182][T10323] FAULT_INJECTION: forcing a failure. [ 368.640182][T10323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 368.654238][T10323] CPU: 0 UID: 0 PID: 10323 Comm: syz.4.1404 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 368.665018][T10323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 368.675076][T10323] Call Trace: [ 368.678343][T10323] [ 368.681252][T10323] dump_stack_lvl+0x16c/0x1f0 [ 368.685924][T10323] should_fail_ex+0x497/0x5b0 [ 368.690605][T10323] _copy_from_user+0x32/0x100 [ 368.695285][T10323] copy_msghdr_from_user+0x99/0x160 [ 368.700491][T10323] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 368.706307][T10323] ? kfree+0x274/0x4b0 [ 368.710379][T10323] ? __pfx___lock_acquire+0x10/0x10 [ 368.713152][ T7173] usb 3-1: new high-speed USB device number 41 using dummy_hcd [ 368.715572][T10323] ___sys_recvmsg+0xdc/0x1a0 [ 368.727681][T10323] ? __pfx____sys_recvmsg+0x10/0x10 [ 368.732887][T10323] ? find_held_lock+0x2d/0x110 [ 368.737669][T10323] ? lock_acquire+0x2f/0xb0 [ 368.742181][T10323] ? __pfx___might_resched+0x10/0x10 [ 368.747476][T10323] ? __might_fault+0xe3/0x190 [ 368.752167][T10323] do_recvmmsg+0x2ba/0x750 [ 368.756592][T10323] ? __pfx_do_recvmmsg+0x10/0x10 [ 368.761537][T10323] ? vfs_write+0x306/0x1150 [ 368.761974][T10112] veth0_vlan: entered promiscuous mode [ 368.766057][T10323] ? __mutex_unlock_slowpath+0x164/0x650 [ 368.766094][T10323] ? __fget_files+0x244/0x3f0 [ 368.781791][T10323] __x64_sys_recvmmsg+0x239/0x290 [ 368.786807][T10323] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 368.792345][T10323] do_syscall_64+0xcd/0x250 [ 368.796841][T10323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.802726][T10323] RIP: 0033:0x7f1c0e97e719 [ 368.807128][T10323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.826721][T10323] RSP: 002b:00007f1c0f737038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 368.835118][T10323] RAX: ffffffffffffffda RBX: 00007f1c0eb36058 RCX: 00007f1c0e97e719 [ 368.843071][T10323] RDX: 0000000000010106 RSI: 00000000200000c0 RDI: 0000000000000003 [ 368.851023][T10323] RBP: 00007f1c0f737090 R08: 0000000000000000 R09: 0000000000000000 [ 368.858974][T10323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 368.866929][T10323] R13: 0000000000000000 R14: 00007f1c0eb36058 R15: 00007fff4bce2be8 [ 368.874891][T10323] [ 368.885500][T10112] veth1_vlan: entered promiscuous mode [ 368.909463][T10112] veth0_macvtap: entered promiscuous mode [ 368.923643][T10112] veth1_macvtap: entered promiscuous mode [ 368.937521][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.948045][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.957929][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.968536][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.978385][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 368.988963][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 368.999051][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 369.009806][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.014196][ T7173] usb 3-1: device descriptor read/64, error -71 [ 369.021515][T10112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 369.034499][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.044935][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.055393][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.065878][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.075887][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.086471][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.096599][T10112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 369.107183][T10112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 369.117899][T10112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 369.130342][T10112] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.139195][T10112] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.147975][T10112] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.156722][T10112] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 369.168957][ T5875] usb 6-1: GET_CAPABILITIES returned 0 [ 369.174617][ T5875] usbtmc 6-1:16.0: can't read capabilities [ 369.227677][ T3609] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.238888][ T3609] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.269959][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 369.278263][ T7173] usb 3-1: new high-speed USB device number 42 using dummy_hcd [ 369.411565][ T5905] usb 6-1: USB disconnect, device number 20 [ 369.413181][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.506486][T10336] QAT: failed to copy from user cfg_data. [ 369.815491][T10335] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 370.023143][ T7173] usb 3-1: device descriptor read/64, error -71 [ 370.215504][ T7173] usb usb3-port1: attempt power cycle [ 370.382602][ T5905] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 370.513508][ T5876] usb 1-1: new full-speed USB device number 35 using dummy_hcd [ 370.572737][ T7173] usb 3-1: new high-speed USB device number 43 using dummy_hcd [ 370.604075][ T7173] usb 3-1: device descriptor read/8, error -71 [ 370.666130][ T5876] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 370.676461][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBE, changing to 0x8E [ 370.688401][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 10 [ 370.699506][ T5876] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 370.709350][ T5876] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 370.724982][ T5876] usb 1-1: New USB device found, idVendor=10c5, idProduct=819a, bcdDevice=e4.46 [ 370.735156][ T5876] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=35 [ 370.743396][ T5876] usb 1-1: Product: syz [ 370.747646][ T5876] usb 1-1: Manufacturer: syz [ 370.752261][ T5876] usb 1-1: SerialNumber: syz [ 370.758006][ T5876] usb 1-1: config 0 descriptor?? [ 370.872656][ T7173] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 370.903153][ T7173] usb 3-1: device descriptor read/8, error -71 [ 371.013193][ T7173] usb usb3-port1: unable to enumerate USB device [ 371.066609][T10366] can0: slcan on ttyS3. [ 371.405530][ T5876] radio-si470x 1-1:0.0: si470x_get_report: usb_control_msg returned -110 [ 371.635855][ T5833] usb 7-1: new high-speed USB device number 2 using dummy_hcd [ 372.152995][ T5876] radio-si470x 1-1:0.0: probe with driver radio-si470x failed with error -5 [ 372.233553][T10365] can0 (unregistered): slcan off ttyS3. [ 372.282695][ T5833] usb 7-1: device descriptor read/64, error -71 [ 372.582626][ T5833] usb 7-1: new high-speed USB device number 3 using dummy_hcd [ 372.712702][ T5833] usb 7-1: device descriptor read/64, error -71 [ 372.822821][ T5833] usb usb7-port1: attempt power cycle [ 373.052702][ T5876] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 373.069423][T10386] netlink: 100 bytes leftover after parsing attributes in process `syz.5.1419'. [ 373.162674][ T5833] usb 7-1: new high-speed USB device number 4 using dummy_hcd [ 373.228855][ T5833] usb 7-1: device descriptor read/8, error -71 [ 373.274983][ T5875] usb 1-1: USB disconnect, device number 35 [ 373.326394][ T5876] usb 3-1: Using ep0 maxpacket: 32 [ 373.348506][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 373.364311][ T5876] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 373.378294][ T5876] usb 3-1: New USB device found, idVendor=1e71, idProduct=200f, bcdDevice= 0.00 [ 373.389355][ T5876] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.406936][ T5876] usb 3-1: config 0 descriptor?? [ 373.557690][T10394] QAT: failed to copy from user cfg_data. [ 373.582656][ T5833] usb 7-1: new high-speed USB device number 5 using dummy_hcd [ 374.134320][ T5876] nzxt-smart2 0003:1E71:200F.0003: unknown main item tag 0xe [ 374.204522][ T5876] nzxt-smart2 0003:1E71:200F.0003: hidraw0: USB HID v0.00 Device [HID 1e71:200f] on usb-dummy_hcd.2-1/input0 [ 374.259935][ T5833] usb 7-1: device descriptor read/8, error -71 [ 374.312097][ T29] audit: type=1400 audit(1730349171.077:540): avc: denied { setattr } for pid=10400 comm="syz.0.1423" name="udmabuf" dev="devtmpfs" ino=701 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 374.409260][ T5833] usb usb7-port1: unable to enumerate USB device [ 374.484705][ T29] audit: type=1400 audit(1730349171.187:541): avc: denied { read } for pid=10400 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 374.509338][ T29] audit: type=1400 audit(1730349171.187:542): avc: denied { connect } for pid=10400 comm="syz.0.1423" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 374.966990][ T5833] usb 3-1: USB disconnect, device number 45 [ 377.220176][T10444] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1434'. [ 377.661829][ T5905] usb 7-1: new high-speed USB device number 6 using dummy_hcd [ 377.669390][ T5876] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 378.158208][T10453] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1435'. [ 378.294419][ T5905] usb 7-1: device descriptor read/64, error -71 [ 378.313046][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.319334][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.392620][ T5876] usb 5-1: Using ep0 maxpacket: 8 [ 378.401971][ T5876] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 378.414460][ T5876] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 378.423634][ T5876] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 378.442760][ T5876] usb 5-1: config 0 descriptor?? [ 378.543014][ T5905] usb 7-1: new high-speed USB device number 7 using dummy_hcd [ 378.676308][ T5876] iowarrior 5-1:0.0: IOWarrior product=0x1512, serial= interface=0 now attached to iowarrior0 [ 378.686830][ T5905] usb 7-1: device descriptor read/64, error -71 [ 378.802841][ T5905] usb usb7-port1: attempt power cycle [ 379.610784][T10472] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.632589][ T5905] usb 7-1: new high-speed USB device number 8 using dummy_hcd [ 379.648022][T10472] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.852589][ T5905] usb 7-1: device not accepting address 8, error -71 [ 379.882651][ T5824] usb 3-1: new low-speed USB device number 46 using dummy_hcd [ 380.742618][ T5824] usb 3-1: Invalid ep0 maxpacket: 16 [ 380.808864][ T5875] usb 5-1: USB disconnect, device number 30 [ 380.823076][ T5875] iowarrior 5-1:0.0: I/O-Warror #0 now disconnected [ 380.872727][ T5824] usb 3-1: new low-speed USB device number 47 using dummy_hcd [ 380.908484][ T29] audit: type=1400 audit(1730349177.677:543): avc: denied { create } for pid=10484 comm="syz.6.1447" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 381.033112][ T5824] usb 3-1: Invalid ep0 maxpacket: 16 [ 381.038746][ T5824] usb usb3-port1: attempt power cycle [ 381.067889][ T29] audit: type=1400 audit(1730349177.837:544): avc: denied { module_request } for pid=10496 comm="syz.5.1450" kmod="binfmt-0000" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 381.829947][ T5824] usb 3-1: new low-speed USB device number 48 using dummy_hcd [ 381.974088][ T5824] usb 3-1: Invalid ep0 maxpacket: 16 [ 382.102610][ T5824] usb 3-1: new low-speed USB device number 49 using dummy_hcd [ 382.138242][ T5824] usb 3-1: Invalid ep0 maxpacket: 16 [ 382.144079][ T5824] usb usb3-port1: unable to enumerate USB device [ 383.536412][T10529] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1456'. [ 384.802642][ T5824] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 385.065304][T10553] QAT: failed to copy from user cfg_data. [ 387.172650][ T5824] usb 7-1: device descriptor read/64, error -71 [ 389.056271][T10582] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(12) [ 389.063074][T10582] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 389.071627][T10582] vhci_hcd vhci_hcd.0: Device attached [ 389.305639][T10585] vhci_hcd: connection closed [ 389.325199][ T6241] vhci_hcd: stop threads [ 389.397126][ T6241] vhci_hcd: release socket [ 389.401938][ T6241] vhci_hcd: disconnect device [ 389.512659][T10595] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 389.552723][ T5833] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 389.562936][T10595] kvm: pic: non byte read [ 389.703364][ T5833] usb 1-1: Using ep0 maxpacket: 8 [ 389.709982][ T5833] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 389.728315][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 389.739685][ T5833] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 389.751594][ T5833] usb 1-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 389.760813][ T5833] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 389.768898][ T5833] usb 1-1: Product: syz [ 389.773090][ T5833] usb 1-1: Manufacturer: syz [ 389.777679][ T5833] usb 1-1: SerialNumber: syz [ 389.784494][ T5833] usb 1-1: config 0 descriptor?? [ 389.790681][ T5833] streamzap 1-1:0.0: streamzap_probe: endpoint Max Packet Size is 0!?! [ 389.798981][ T5824] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 389.959608][ T5824] usb 7-1: Using ep0 maxpacket: 16 [ 389.992688][ T5905] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 390.000961][ T7173] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 390.182862][ T5905] usb 6-1: Using ep0 maxpacket: 32 [ 390.186713][ T5824] usb 7-1: New USB device found, idVendor=054c, idProduct=0038, bcdDevice=16.f5 [ 390.214324][ T7173] usb 3-1: Using ep0 maxpacket: 32 [ 390.214337][ T5824] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.214376][ T5824] usb 7-1: Product: syz [ 390.232576][ T5824] usb 7-1: Manufacturer: syz [ 390.232710][ T7173] usb 3-1: config 0 has an invalid interface number: 237 but max is 0 [ 390.237204][ T5824] usb 7-1: SerialNumber: syz [ 390.263851][ T7173] usb 3-1: config 0 has no interface number 0 [ 390.264592][ T5824] usb 7-1: config 0 descriptor?? [ 390.300028][ T5824] visor 7-1:0.0: Sony Clie 3.5 converter detected [ 390.302590][ T5905] usb 6-1: New USB device found, idVendor=0d49, idProduct=7000, bcdDevice=26.2f [ 390.318958][ T5905] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.327051][ T5905] usb 6-1: Product: syz [ 390.331201][ T5905] usb 6-1: Manufacturer: syz [ 390.340499][ T5905] usb 6-1: SerialNumber: syz [ 390.361696][ T7173] usb 3-1: New USB device found, idVendor=07ab, idProduct=fc01, bcdDevice=14.56 [ 390.371123][ T7173] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 390.379177][ T7173] usb 3-1: Product: syz [ 390.383385][ T7173] usb 3-1: Manufacturer: syz [ 390.387978][ T7173] usb 3-1: SerialNumber: syz [ 390.411179][ T5905] usb 6-1: config 0 descriptor?? [ 390.416907][ T7173] usb 3-1: config 0 descriptor?? [ 390.429366][ T5905] ums-onetouch 6-1:0.0: USB Mass Storage device detected [ 390.494916][T10598] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 390.507305][T10598] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.525660][ T29] audit: type=1326 audit(1730349187.297:545): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10589 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cdd7e719 code=0x7ffc0000 [ 390.550346][ T29] audit: type=1326 audit(1730349187.297:546): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10589 comm="syz.0.1471" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fb5cdd7e719 code=0x7ffc0000 [ 390.637662][ T7173] ums-freecom 3-1:0.237: USB Mass Storage device detected [ 390.958093][ T7173] usb 3-1: USB disconnect, device number 50 [ 391.076003][T10603] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 391.141046][T10603] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 391.207991][ T5824] usb 7-1: clie_3_5_startup: get interface number failed: -71 [ 391.216020][ T5824] visor 7-1:0.0: probe with driver visor failed with error -71 [ 391.226560][ T5824] usb 7-1: USB disconnect, device number 12 [ 391.246742][ T5876] usb 6-1: USB disconnect, device number 22 [ 392.138085][ T29] audit: type=1400 audit(1730349188.897:547): avc: denied { write } for pid=10633 comm="syz.4.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 392.157661][ T29] audit: type=1400 audit(1730349188.897:548): avc: denied { connect } for pid=10633 comm="syz.4.1484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 392.185016][T10637] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 392.196689][ T29] audit: type=1400 audit(1730349188.967:549): avc: denied { map } for pid=10633 comm="syz.4.1484" path="socket:[26323]" dev="sockfs" ino=26323 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 393.228996][ T5824] usb 1-1: USB disconnect, device number 36 [ 393.365058][T10650] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1485'. [ 393.634308][ T29] audit: type=1400 audit(1730349190.407:550): avc: denied { append } for pid=10654 comm="syz.0.1491" name="001" dev="devtmpfs" ino=744 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 393.884737][T10660] netlink: 165 bytes leftover after parsing attributes in process `syz.0.1491'. [ 394.350351][ T29] audit: type=1326 audit(1730349191.117:551): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10658 comm="syz.6.1492" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7ff1ca97e719 code=0x0 [ 396.242566][ T29] audit: type=1400 audit(1730349192.567:552): avc: denied { setopt } for pid=10682 comm="syz.6.1499" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 397.274119][ T7173] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 397.403622][ T5876] usb 6-1: new high-speed USB device number 23 using dummy_hcd [ 397.438780][ T7173] usb 3-1: device descriptor read/64, error -71 [ 397.469564][T10704] FAULT_INJECTION: forcing a failure. [ 397.469564][T10704] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 397.483221][T10704] CPU: 1 UID: 0 PID: 10704 Comm: syz.4.1506 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 397.493991][T10704] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 397.504031][T10704] Call Trace: [ 397.507293][T10704] [ 397.510206][T10704] dump_stack_lvl+0x16c/0x1f0 [ 397.514884][T10704] should_fail_ex+0x497/0x5b0 [ 397.519552][T10704] _copy_to_user+0x32/0xd0 [ 397.523958][T10704] simple_read_from_buffer+0xd0/0x160 [ 397.529319][T10704] proc_fail_nth_read+0x198/0x270 [ 397.534329][T10704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.539860][T10704] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 397.545390][T10704] vfs_read+0x1df/0xbe0 [ 397.549539][T10704] ? __fget_files+0x23a/0x3f0 [ 397.554211][T10704] ? fdget_pos+0x24c/0x360 [ 397.558614][T10704] ? __pfx_lock_release+0x10/0x10 [ 397.563623][T10704] ? trace_lock_acquire+0x14a/0x1d0 [ 397.568809][T10704] ? __pfx_vfs_read+0x10/0x10 [ 397.573472][T10704] ? __pfx___mutex_lock+0x10/0x10 [ 397.578587][T10704] ? __fget_files+0x244/0x3f0 [ 397.583260][T10704] ksys_read+0x12f/0x260 [ 397.587492][T10704] ? __pfx_ksys_read+0x10/0x10 [ 397.592251][T10704] do_syscall_64+0xcd/0x250 [ 397.596745][T10704] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.602633][T10704] RIP: 0033:0x7f1c0e97d15c [ 397.607030][T10704] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 397.626619][T10704] RSP: 002b:00007f1c0f758030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 397.635016][T10704] RAX: ffffffffffffffda RBX: 00007f1c0eb35f80 RCX: 00007f1c0e97d15c [ 397.642970][T10704] RDX: 000000000000000f RSI: 00007f1c0f7580a0 RDI: 0000000000000003 [ 397.650923][T10704] RBP: 00007f1c0f758090 R08: 0000000000000000 R09: 0000000000000000 [ 397.658891][T10704] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 397.666853][T10704] R13: 0000000000000000 R14: 00007f1c0eb35f80 R15: 00007fff4bce2be8 [ 397.674832][T10704] [ 397.677905][ T5833] usb 1-1: new high-speed USB device number 37 using dummy_hcd [ 397.709546][ T5876] usb 6-1: New USB device found, idVendor=1d50, idProduct=606f, bcdDevice=9f.d4 [ 397.722852][ T5876] usb 6-1: New USB device strings: Mfr=188, Product=0, SerialNumber=0 [ 397.731116][ T5876] usb 6-1: Manufacturer: syz [ 397.748006][ T5876] usb 6-1: config 0 descriptor?? [ 397.812653][ T5833] usb 1-1: device descriptor read/64, error -71 [ 398.895358][T10720] No such timeout policy "syz0" [ 398.958540][ T5833] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 399.362664][ T5833] usb 1-1: device descriptor read/64, error -71 [ 399.473018][ T5833] usb usb1-port1: attempt power cycle [ 399.583905][ T29] audit: type=1400 audit(1730349196.347:553): avc: denied { watch watch_reads } for pid=10723 comm="syz.4.1511" path="/proc/987/net/udplite6" dev="proc" ino=4026533344 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 400.012844][ T5876] gs_usb 6-1:0.0: Couldn't get device config: (err=-110) [ 400.020620][ T5876] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -110 [ 400.082729][ T5834] usb 7-1: new low-speed USB device number 13 using dummy_hcd [ 400.141051][T10734] netlink: 284 bytes leftover after parsing attributes in process `syz.4.1514'. [ 400.171944][ T5876] usb 6-1: USB disconnect, device number 23 [ 400.631835][ T29] audit: type=1400 audit(1730349197.397:554): avc: denied { append } for pid=10733 comm="syz.4.1514" name="video6" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 400.669215][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 400.680986][ T5834] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 400.685344][T10738] evm: overlay not supported [ 400.693991][ T5834] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 400.712866][ T5834] usb 7-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 400.722004][ T5834] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 400.737312][ T5834] usb 7-1: config 0 descriptor?? [ 400.912672][ T5905] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 400.985141][ T29] audit: type=1400 audit(1730349197.757:555): avc: denied { ioctl } for pid=10725 comm="syz.6.1512" path="socket:[26501]" dev="sockfs" ino=26501 ioctlcmd=0x89eb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 401.122177][ T29] audit: type=1400 audit(1730349197.837:556): avc: denied { connect } for pid=10739 comm="syz.5.1516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 401.142884][ T5905] usb 5-1: Using ep0 maxpacket: 16 [ 401.452965][ T5875] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 401.884068][ T5834] a4tech 0003:09DA:022B.0004: item fetching failed at offset 5/7 [ 401.898203][ T5834] a4tech 0003:09DA:022B.0004: parse failed [ 401.898303][ T5905] usb 5-1: New USB device found, idVendor=2040, idProduct=d854, bcdDevice=82.38 [ 401.922904][ T5834] a4tech 0003:09DA:022B.0004: probe with driver a4tech failed with error -22 [ 401.933383][ T5905] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.954498][ T5834] usb 7-1: USB disconnect, device number 13 [ 401.963060][ T5905] usb 5-1: Product: syz [ 401.972538][ T5905] usb 5-1: Manufacturer: syz [ 401.978991][ T5905] usb 5-1: SerialNumber: syz [ 401.994696][ T5905] usb 5-1: config 0 descriptor?? [ 402.001829][ T5905] usb 5-1: dvb_usb_v2: found a 'Hauppauge 138xxx DVBT' in warm state [ 402.011432][ T5905] usb 5-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 402.027745][ T5905] dvbdev: DVB: registering new adapter (Hauppauge 138xxx DVBT) [ 402.035795][ T5905] usb 5-1: media controller created [ 402.059792][ T5905] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 402.100264][ T5905] usb 5-1: selecting invalid altsetting 2 [ 402.124934][ T5905] set interface failed [ 402.126005][ T5905] usb 5-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 402.136464][ T5905] error writing reg: 0xff, val: 0x00 [ 402.149170][T10751] FAULT_INJECTION: forcing a failure. [ 402.149170][T10751] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.150599][ T5905] dvb_usb_mxl111sf 5-1:0.0: probe with driver dvb_usb_mxl111sf failed with error -22 [ 402.156727][T10751] CPU: 0 UID: 0 PID: 10751 Comm: syz.5.1519 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 402.187784][T10751] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 402.197815][T10751] Call Trace: [ 402.201080][T10751] [ 402.204007][T10751] dump_stack_lvl+0x16c/0x1f0 [ 402.208683][T10751] should_fail_ex+0x497/0x5b0 [ 402.213348][T10751] _copy_from_user+0x32/0x100 [ 402.218014][T10751] copy_msghdr_from_user+0x99/0x160 [ 402.223198][T10751] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 402.228992][T10751] ? kfree+0x274/0x4b0 [ 402.233048][T10751] ? __pfx___lock_acquire+0x10/0x10 [ 402.238232][T10751] ___sys_recvmsg+0xdc/0x1a0 [ 402.242806][T10751] ? __pfx____sys_recvmsg+0x10/0x10 [ 402.247988][T10751] ? find_held_lock+0x2d/0x110 [ 402.252749][T10751] ? lock_acquire+0x2f/0xb0 [ 402.257241][T10751] ? __pfx___might_resched+0x10/0x10 [ 402.262512][T10751] ? __might_fault+0xe3/0x190 [ 402.267180][T10751] do_recvmmsg+0x2ba/0x750 [ 402.271582][T10751] ? __pfx_do_recvmmsg+0x10/0x10 [ 402.276594][T10751] ? vfs_write+0x306/0x1150 [ 402.281101][T10751] ? __mutex_unlock_slowpath+0x164/0x650 [ 402.286730][T10751] ? __fget_files+0x244/0x3f0 [ 402.291402][T10751] __x64_sys_recvmmsg+0x239/0x290 [ 402.296414][T10751] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 402.301949][T10751] do_syscall_64+0xcd/0x250 [ 402.306446][T10751] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.312333][T10751] RIP: 0033:0x7f13c977e719 [ 402.316731][T10751] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.336323][T10751] RSP: 002b:00007f13ca63f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 402.344723][T10751] RAX: ffffffffffffffda RBX: 00007f13c9935f80 RCX: 00007f13c977e719 [ 402.352682][T10751] RDX: 0000000000000344 RSI: 0000000020005c80 RDI: 0000000000000003 [ 402.360637][T10751] RBP: 00007f13ca63f090 R08: 0000000000000000 R09: 0000000000000000 [ 402.368595][T10751] R10: 0000000000010122 R11: 0000000000000246 R12: 0000000000000002 [ 402.376551][T10751] R13: 0000000000000000 R14: 00007f13c9935f80 R15: 00007ffd7f8b11f8 [ 402.384530][T10751] [ 402.402786][ T5875] usb 3-1: Using ep0 maxpacket: 16 [ 402.448246][ T5875] usb 3-1: config 0 has an invalid interface number: 153 but max is 0 [ 402.529111][ T5875] usb 3-1: config 0 has no interface number 0 [ 402.686445][ T5875] usb 3-1: config 0 interface 153 has no altsetting 0 [ 402.694519][ T29] audit: type=1400 audit(1730349199.447:557): avc: denied { create } for pid=10733 comm="syz.4.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 402.827896][ T5875] usb 3-1: New USB device found, idVendor=0bda, idProduct=8191, bcdDevice=7a.45 [ 402.867772][ T5875] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.894076][ T29] audit: type=1400 audit(1730349199.447:558): avc: denied { setopt } for pid=10733 comm="syz.4.1514" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 402.914011][ T5875] usb 3-1: Product: syz [ 402.918187][ T5875] usb 3-1: Manufacturer: syz [ 402.922951][ T5875] usb 3-1: SerialNumber: syz [ 402.929599][ T5875] usb 3-1: config 0 descriptor?? [ 402.960479][ T5875] usb 5-1: USB disconnect, device number 31 [ 403.007173][T10760] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 403.024551][T10760] kvm: pic: non byte read [ 403.532667][ T5875] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 404.305898][ T5875] usb 7-1: device descriptor read/64, error -71 [ 405.305984][T10778] ceph: No mds server is up or the cluster is laggy [ 405.582264][T10785] No such timeout policy "syz0" [ 406.083724][ T5833] usb 3-1: USB disconnect, device number 53 [ 406.112684][ T5875] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 406.219962][T10793] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1531'. [ 511.272457][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 511.279420][ C0] rcu: 1-...!: (2 ticks this GP) idle=e46c/1/0x4000000000000000 softirq=31602/31602 fqs=0 [ 511.290323][ C0] rcu: (detected by 0, t=10502 jiffies, g=26229, q=584 ncpus=2) [ 511.298041][ C0] Sending NMI from CPU 0 to CPUs 1: [ 511.298064][ C1] NMI backtrace for cpu 1 [ 511.298074][ C1] CPU: 1 UID: 0 PID: 10789 Comm: syz.0.1528 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 511.298088][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 511.298096][ C1] RIP: 0010:check_preemption_disabled+0xf/0xe0 [ 511.298119][ C1] Code: 0f 0b 90 e9 53 fc ff ff 0f 1f 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 41 54 55 53 48 83 ec 08 65 8b 1d 5d be e0 74 <65> 8b 05 52 be e0 74 a9 ff ff ff 7f 74 0f 48 83 c4 08 89 d8 5b 5d [ 511.298131][ C1] RSP: 0018:ffffc90000a18bd0 EFLAGS: 00000082 [ 511.298143][ C1] RAX: 0000000000000001 RBX: 0000000000000001 RCX: ffffffff816a9e29 [ 511.298151][ C1] RDX: fffffbfff20bea42 RSI: ffffffff8bd1ad40 RDI: ffffffff8bd1ad80 [ 511.298160][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: fffffbfff20bea41 [ 511.298167][ C1] R10: ffffffff905f520f R11: ffffffff8b6f8740 R12: ffffffff9aa92b30 [ 511.298176][ C1] R13: ffff88802aa1a340 R14: 000000000003dbcc R15: ffffffff9aa92b10 [ 511.298185][ C1] FS: 00007fb5ceab36c0(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 511.298199][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 511.298208][ C1] CR2: 000000110c2e2d63 CR3: 00000000329ee000 CR4: 00000000003526f0 [ 511.298216][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 511.298224][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 511.298232][ C1] Call Trace: [ 511.298237][ C1] [ 511.298244][ C1] ? nmi_cpu_backtrace+0x1d8/0x390 [ 511.298261][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 511.298281][ C1] ? nmi_handle+0x1a9/0x5c0 [ 511.298294][ C1] ? check_preemption_disabled+0xf/0xe0 [ 511.298306][ C1] ? default_do_nmi+0x6a/0x160 [ 511.298321][ C1] ? exc_nmi+0x170/0x1e0 [ 511.298334][ C1] ? end_repeat_nmi+0xf/0x53 [ 511.298354][ C1] ? lock_release+0xa9/0x6f0 [ 511.298367][ C1] ? check_preemption_disabled+0xf/0xe0 [ 511.298379][ C1] ? check_preemption_disabled+0xf/0xe0 [ 511.298392][ C1] ? check_preemption_disabled+0xf/0xe0 [ 511.298403][ C1] [ 511.298408][ C1] [ 511.298412][ C1] rcu_is_watching+0x12/0xc0 [ 511.298428][ C1] lock_release+0x4f6/0x6f0 [ 511.298438][ C1] ? debug_object_activate+0x34d/0x540 [ 511.298456][ C1] ? __pfx_lock_release+0x10/0x10 [ 511.298467][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 511.298482][ C1] ? lock_acquire+0x2f/0xb0 [ 511.298492][ C1] ? debug_object_activate+0x199/0x540 [ 511.298509][ C1] _raw_spin_unlock_irqrestore+0x1a/0x80 [ 511.298526][ C1] debug_object_activate+0x34d/0x540 [ 511.298543][ C1] ? __pfx_debug_object_activate+0x10/0x10 [ 511.298560][ C1] ? rcu_is_watching+0x12/0xc0 [ 511.298575][ C1] ? do_raw_spin_lock+0x12d/0x2c0 [ 511.298589][ C1] ? __pfx_advance_sched+0x10/0x10 [ 511.298604][ C1] ? enqueue_hrtimer+0x25/0x3c0 [ 511.298615][ C1] enqueue_hrtimer+0x25/0x3c0 [ 511.298627][ C1] __hrtimer_run_queues+0x903/0xae0 [ 511.298643][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 511.298657][ C1] ? ktime_get_update_offsets_now+0x201/0x310 [ 511.298676][ C1] hrtimer_interrupt+0x31b/0x800 [ 511.298693][ C1] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 511.298707][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 511.298724][ C1] [ 511.298728][ C1] [ 511.298732][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 511.298750][ C1] RIP: 0010:lock_release+0x54/0x6f0 [ 511.298762][ C1] Code: 24 08 48 c7 44 24 10 b3 8a b5 41 48 c1 eb 03 48 c7 44 24 18 78 45 7a 8d 48 01 d8 48 c7 44 24 20 80 9d 6a 81 c7 00 f1 f1 f1 f1 40 04 f1 f1 04 f2 c7 40 08 04 f3 f3 f3 65 48 8b 04 25 28 00 00 [ 511.298773][ C1] RSP: 0018:ffffc900035ef2b8 EFLAGS: 00000286 [ 511.298783][ C1] RAX: fffff520006bde59 RBX: 1ffff920006bde59 RCX: ffffc9000b1b2000 [ 511.298791][ C1] RDX: 0000000000040000 RSI: ffffffff8224e5fd RDI: ffff888036e9f120 [ 511.298800][ C1] RBP: ffff888036e9f088 R08: 0000000000000003 R09: 00000000000001ff [ 511.298807][ C1] R10: 0000000000000000 R11: 0000000000000000 R12: ffff888036e9f120 [ 511.298815][ C1] R13: 0000000000000000 R14: ffffc900035ef410 R15: ffff888036e9f0b8 [ 511.298827][ C1] ? __dquot_alloc_space+0x92d/0xde0 [ 511.298845][ C1] ? __dquot_alloc_space+0x92d/0xde0 [ 511.298861][ C1] ? __pfx_lock_release+0x10/0x10 [ 511.298872][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 511.298886][ C1] ? lock_acquire+0x2f/0xb0 [ 511.298896][ C1] ? inode_add_bytes+0x24/0xf0 [ 511.298912][ C1] _raw_spin_unlock+0x16/0x50 [ 511.298927][ C1] __dquot_alloc_space+0x92d/0xde0 [ 511.298944][ C1] ? xas_nomem+0x189/0x2c0 [ 511.298960][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 511.298976][ C1] ? __pfx___dquot_alloc_space+0x10/0x10 [ 511.298994][ C1] ? __pfx_shmem_add_to_page_cache+0x10/0x10 [ 511.299013][ C1] ? __pfx___might_resched+0x10/0x10 [ 511.299029][ C1] shmem_inode_acct_blocks+0x264/0x450 [ 511.299048][ C1] shmem_alloc_and_add_folio+0x689/0xc00 [ 511.299068][ C1] ? __pfx_shmem_alloc_and_add_folio+0x10/0x10 [ 511.299088][ C1] ? shmem_allowable_huge_orders+0xcd/0x3f0 [ 511.299102][ C1] shmem_get_folio_gfp+0x689/0x1530 [ 511.299122][ C1] ? __pfx_shmem_get_folio_gfp+0x10/0x10 [ 511.299135][ C1] ? filemap_map_pages+0xf93/0x16a0 [ 511.299150][ C1] shmem_fault+0x200/0xae0 [ 511.299162][ C1] ? __pfx_shmem_fault+0x10/0x10 [ 511.299176][ C1] ? do_pte_missing+0xdc2/0x3e50 [ 511.299192][ C1] ? __pfx_lock_release+0x10/0x10 [ 511.299205][ C1] __do_fault+0x10a/0x490 [ 511.299224][ C1] do_pte_missing+0xea8/0x3e50 [ 511.299239][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 511.299251][ C1] ? rcu_is_watching+0x12/0xc0 [ 511.299266][ C1] __handle_mm_fault+0x100a/0x2a10 [ 511.299283][ C1] ? __pfx___handle_mm_fault+0x10/0x10 [ 511.299298][ C1] ? __pfx_lock_release+0x10/0x10 [ 511.299312][ C1] ? follow_page_pte+0x50d/0x1eb0 [ 511.299328][ C1] handle_mm_fault+0x3fa/0xaa0 [ 511.299344][ C1] __get_user_pages+0x8d9/0x3b50 [ 511.299360][ C1] ? __pfx_mt_find+0x10/0x10 [ 511.299373][ C1] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 511.299385][ C1] ? __pfx___get_user_pages+0x10/0x10 [ 511.299402][ C1] populate_vma_page_range+0x27f/0x3a0 [ 511.299418][ C1] ? __pfx_populate_vma_page_range+0x10/0x10 [ 511.299432][ C1] ? __pfx_find_vma_intersection+0x10/0x10 [ 511.299446][ C1] ? vm_mmap_pgoff+0x25b/0x360 [ 511.299461][ C1] __mm_populate+0x1d6/0x380 [ 511.299476][ C1] ? __pfx___mm_populate+0x10/0x10 [ 511.299491][ C1] ? up_write+0x1b2/0x520 [ 511.299506][ C1] vm_mmap_pgoff+0x293/0x360 [ 511.299521][ C1] ? __pfx_vm_mmap_pgoff+0x10/0x10 [ 511.299537][ C1] ? __x64_sys_futex+0x1e1/0x4c0 [ 511.299553][ C1] ? __x64_sys_futex+0x1ea/0x4c0 [ 511.299569][ C1] ksys_mmap_pgoff+0x7d/0x5c0 [ 511.299582][ C1] ? rcu_is_watching+0x12/0xc0 [ 511.299597][ C1] __x64_sys_mmap+0x125/0x190 [ 511.299611][ C1] do_syscall_64+0xcd/0x250 [ 511.299629][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.299646][ C1] RIP: 0033:0x7fb5cdd7e719 [ 511.299656][ C1] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.299667][ C1] RSP: 002b:00007fb5ceab3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000009 [ 511.299679][ C1] RAX: ffffffffffffffda RBX: 00007fb5cdf35f80 RCX: 00007fb5cdd7e719 [ 511.299687][ C1] RDX: b635773f06ebbeee RSI: 0000000000b36000 RDI: 0000000020000000 [ 511.299695][ C1] RBP: 00007fb5cddf132e R08: ffffffffffffffff R09: 0000000000000000 [ 511.299703][ C1] R10: 0000000000008031 R11: 0000000000000246 R12: 0000000000000000 [ 511.299712][ C1] R13: 0000000000000000 R14: 00007fb5cdf35f80 R15: 00007ffc7a6d28b8 [ 511.299725][ C1] [ 511.300060][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g26229 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=0 [ 512.056089][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 512.066140][ C0] rcu: RCU grace-period kthread stack dump: [ 512.072034][ C0] task:rcu_preempt state:R running task stack:27008 pid:17 tgid:17 ppid:2 flags:0x00004000 [ 512.083780][ C0] Call Trace: [ 512.087051][ C0] [ 512.089981][ C0] __schedule+0xe55/0x5730 [ 512.094402][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 512.099628][ C0] ? __pfx___schedule+0x10/0x10 [ 512.104482][ C0] ? schedule+0x298/0x350 [ 512.108810][ C0] ? __pfx_lock_release+0x10/0x10 [ 512.113825][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 512.119026][ C0] ? lock_acquire+0x2f/0xb0 [ 512.123520][ C0] ? schedule+0x1fd/0x350 [ 512.127850][ C0] schedule+0xe7/0x350 [ 512.131919][ C0] schedule_timeout+0x136/0x2a0 [ 512.136774][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 512.142144][ C0] ? __pfx_process_timeout+0x10/0x10 [ 512.147436][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 512.153242][ C0] ? prepare_to_swait_event+0xf3/0x470 [ 512.158722][ C0] rcu_gp_fqs_loop+0x1eb/0xb00 [ 512.163485][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 512.168765][ C0] ? rcu_gp_init+0xc82/0x1630 [ 512.173440][ C0] ? _raw_spin_unlock_irq+0x2e/0x50 [ 512.178647][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 512.184476][ C0] rcu_gp_kthread+0x271/0x380 [ 512.189152][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 512.194345][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 512.199545][ C0] ? __kthread_parkme+0x148/0x220 [ 512.204570][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 512.210198][ C0] kthread+0x2c1/0x3a0 [ 512.214263][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.219459][ C0] ? __pfx_kthread+0x10/0x10 [ 512.224045][ C0] ret_from_fork+0x45/0x80 [ 512.228455][ C0] ? __pfx_kthread+0x10/0x10 [ 512.233042][ C0] ret_from_fork_asm+0x1a/0x30 [ 512.237817][ C0] [ 512.240828][ C0] rcu: Stack dump where RCU GP kthread last ran: [ 512.247140][ C0] CPU: 0 UID: 0 PID: 3818 Comm: kworker/u8:9 Not tainted 6.12.0-rc5-syzkaller-00047-g4236f913808c #0 [ 512.257982][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 512.268030][ C0] Workqueue: events_unbound toggle_allocation_gate [ 512.274533][ C0] RIP: 0010:smp_call_function_many_cond+0x458/0x1300 [ 512.281205][ C0] Code: 0c 00 85 ed 74 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 f4 4c 89 f5 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 8a 1b 0c 00 f3 90 <41> 0f b6 04 24 40 38 c5 7c 08 84 c0 0f 85 a4 0c 00 00 8b 43 08 31 [ 512.300806][ C0] RSP: 0018:ffffc9000d2df998 EFLAGS: 00000293 [ 512.306866][ C0] RAX: 0000000000000000 RBX: ffff8880b8744cc0 RCX: ffffffff8181611c [ 512.314834][ C0] RDX: ffff8880342ca440 RSI: ffffffff818160f6 RDI: 0000000000000005 [ 512.322800][ C0] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 512.330761][ C0] R10: 0000000000000001 R11: 0000000000000000 R12: ffffed10170e8999 [ 512.338721][ C0] R13: 0000000000000001 R14: ffff8880b8744cc8 R15: ffff8880b8640100 [ 512.346686][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 512.355617][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 512.362194][ C0] CR2: 0000000000000000 CR3: 000000000df7c000 CR4: 00000000003526f0 [ 512.370164][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 512.378129][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 512.386098][ C0] Call Trace: [ 512.389368][ C0] [ 512.392203][ C0] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 512.398550][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 512.403745][ C0] ? rcu_sched_clock_irq+0x23d7/0x32a0 [ 512.409212][ C0] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 512.414844][ C0] ? tmigr_requires_handle_remote+0x141/0x480 [ 512.421278][ C0] ? __pfx_tmigr_requires_handle_remote+0x10/0x10 [ 512.427696][ C0] ? hrtimer_run_queues+0x97/0x450 [ 512.432806][ C0] ? rcu_read_lock_sched_held+0x3e/0x70 [ 512.438370][ C0] ? update_process_times+0x178/0x220 [ 512.443765][ C0] ? __pfx_update_process_times+0x10/0x10 [ 512.449499][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 512.454962][ C0] ? update_wall_time+0x1c/0x40 [ 512.459817][ C0] ? tick_nohz_handler+0x376/0x530 [ 512.464929][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 512.470387][ C0] ? __hrtimer_run_queues+0x5fb/0xae0 [ 512.475762][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 512.481478][ C0] ? ktime_get_update_offsets_now+0x201/0x310 [ 512.487552][ C0] ? hrtimer_interrupt+0x31b/0x800 [ 512.492667][ C0] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 512.498825][ C0] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 512.504631][ C0] [ 512.507558][ C0] [ 512.510482][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 512.517074][ C0] ? smp_call_function_many_cond+0x47c/0x1300 [ 512.523143][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 512.529222][ C0] ? smp_call_function_many_cond+0x458/0x1300 [ 512.535282][ C0] ? smp_call_function_many_cond+0x456/0x1300 [ 512.541341][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 512.546368][ C0] ? __pfx_do_sync_core+0x10/0x10 [ 512.551388][ C0] on_each_cpu_cond_mask+0x40/0x90 [ 512.556495][ C0] text_poke_bp_batch+0x22b/0x760 [ 512.561537][ C0] ? arch_jump_label_transform_apply+0x17/0x30 [ 512.567708][ C0] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 512.573259][ C0] ? __jump_label_patch+0x1db/0x400 [ 512.578475][ C0] ? arch_jump_label_transform_queue+0xc0/0x120 [ 512.584726][ C0] text_poke_finish+0x30/0x40 [ 512.589406][ C0] arch_jump_label_transform_apply+0x1c/0x30 [ 512.595388][ C0] jump_label_update+0x1d7/0x400 [ 512.600324][ C0] static_key_enable_cpuslocked+0x1b7/0x270 [ 512.606209][ C0] static_key_enable+0x1a/0x20 [ 512.610968][ C0] toggle_allocation_gate+0xfc/0x260 [ 512.616248][ C0] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 512.622132][ C0] ? trace_lock_acquire+0x14a/0x1d0 [ 512.627325][ C0] ? preempt_schedule_common+0x44/0xc0 [ 512.632781][ C0] ? process_one_work+0x921/0x1ba0 [ 512.637918][ C0] ? lock_acquire+0x2f/0xb0 [ 512.642414][ C0] ? process_one_work+0x921/0x1ba0 [ 512.647518][ C0] process_one_work+0x9c5/0x1ba0 [ 512.652455][ C0] ? __pfx_nsim_dev_trap_report_work+0x10/0x10 [ 512.658607][ C0] ? __pfx_process_one_work+0x10/0x10 [ 512.663977][ C0] ? assign_work+0x1a0/0x250 [ 512.668746][ C0] worker_thread+0x6c8/0xf00 [ 512.673339][ C0] ? __kthread_parkme+0x148/0x220 [ 512.678360][ C0] ? __pfx_worker_thread+0x10/0x10 [ 512.683462][ C0] kthread+0x2c1/0x3a0 [ 512.687524][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 512.692733][ C0] ? __pfx_kthread+0x10/0x10 [ 512.697337][ C0] ret_from_fork+0x45/0x80 [ 512.701758][ C0] ? __pfx_kthread+0x10/0x10 [ 512.706357][ C0] ret_from_fork_asm+0x1a/0x30 [ 512.711139][ C0]