last executing test programs: 5m42.993372711s ago: executing program 4 (id=1790): r0 = openat$misdntimer(0xffffffffffffff9c, &(0x7f0000000400), 0x101201, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) r2 = accept(r1, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000740)=[{0x0, 0x0, 0x0}], 0x1, 0x0) recvmsg(r2, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b500)=""/153, 0x99}], 0x1}, 0x0) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000600)=0x14) ioctl$IMADDTIMER(r0, 0x80044940, &(0x7f0000000080)=0x14) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r4, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) close(r0) 5m39.87973931s ago: executing program 4 (id=1799): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = dup(r0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e24, 0x6, @loopback, 0x3}], 0x1c) (async) sendmsg$inet6(r0, &(0x7f0000000800)={&(0x7f0000000080)={0xa, 0x4e24, 0x8, @loopback, 0x4}, 0x1c, &(0x7f0000000380)=[{&(0x7f00000000c0)="88", 0x1}], 0x1}, 0x4048043) (async) r2 = dup(r0) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000000)='bond_slave_1\x00', 0x10) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000400)={0x0, @in={{0x2, 0x4e22, @empty}}, 0x8003, 0xbffc, 0xe652, 0x2, 0x4, 0x8, 0xff}, 0x9c) (async) sendto$inet_nvme_icreq_pdu(r1, &(0x7f0000000280)={{0x0, 0x8, 0x80, 0x2}, 0x0, 0x0, 0x1, 0x9}, 0x80, 0x0, 0x0, 0x0) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a40)={0x0, @in6={{0xa, 0x4e24, 0x5, @loopback, 0x1}}, 0x4, 0x1, 0xf06, 0x0, 0xac, 0x7d, 0x5}, 0x9c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, 0x0, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000140)=@newtaction={0x14, 0x30, 0x1, 0x70bd2b, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x2000c800}, 0x2400c800) (async) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={0x0, @in6={{0xa, 0x4e60, 0xfffffff2, @empty, 0x3}}, 0x1000000, 0x31, 0xffff1896, 0x3, 0x6, 0x8, 0x1b}, 0x9c) r3 = getpid() syz_pidfd_open(r3, 0x0) r4 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0xaee2, 0x0, 0x1, 0xbfdffffc}, &(0x7f00000000c0)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r7 = socket(0x28, 0x1, 0x0) r8 = syz_io_uring_setup(0x512, &(0x7f0000000280)={0x0, 0xc65d, 0x10, 0x8, 0x40}, &(0x7f0000000240)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r9, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async) syz_io_uring_submit(r9, r10, &(0x7f00000000c0)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0, 0x10000, 0x0, {0x3}}) (async) io_uring_enter(r8, 0x47f6, 0xb277, 0x0, 0x0, 0x0) (async) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x85c3}}) (async) io_uring_enter(r4, 0x32d7, 0x0, 0x46, 0x0, 0x0) (async) r11 = socket(0xa, 0x1, 0x0) ioctl(r11, 0x8916, &(0x7f0000000000)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000036000/0x2000)=nil, &(0x7f0000594000/0x4000)=nil, &(0x7f0000f36000/0x2000)=nil, &(0x7f0000918000/0x4000)=nil, &(0x7f0000ff8000/0x4000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000c12000/0x2000)=nil, &(0x7f000003f000/0x1000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0, 0x30}, 0x68) (async) syz_usb_connect(0x3, 0x24, &(0x7f0000000540)={{0x12, 0x1, 0x250, 0x5c, 0xa4, 0xd5, 0x20, 0x46d, 0x8f6, 0x8708, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x6, 0x5, 0x80, 0x6, [{{0x9, 0x4, 0x96, 0x5, 0x0, 0x1, 0x1, 0x25, 0x6a}}]}}]}}, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) io_uring_setup(0xed9, &(0x7f0000000040)={0x0, 0x3fab, 0xc000, 0x8, 0x359}) 5m39.681563579s ago: executing program 4 (id=1801): r0 = socket$qrtr(0x2a, 0x2, 0x0) connect$qrtr(r0, &(0x7f0000000040), 0xc) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x2) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[], 0x0, 0x32, 0x0, 0x0, 0x3ff}, 0x28) syz_open_dev$dri(0x0, 0x5, 0x45a002) r1 = accept4$llc(0xffffffffffffffff, 0x0, 0x0, 0x80800) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, 0x0, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00'}, 0x10) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) syz_genetlink_get_family_id$l2tp(0x0, 0xffffffffffffffff) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) creat(&(0x7f00000011c0)='./file0\x00', 0x21f) mount$nfs(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x400, &(0x7f00000000c0)=ANY=[]) mount(&(0x7f0000000180)=@loop={'/dev/loop', 0x0}, &(0x7f0000000240)='./cgroup\x00', &(0x7f0000000040)='ntfs3\x00', 0x2008008, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) mmap$IORING_OFF_SQ_RING(&(0x7f0000909000/0x2000)=nil, 0x2000, 0xb, 0x80010, 0xffffffffffffffff, 0x0) write$cgroup_pressure(r4, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) 5m39.010065085s ago: executing program 4 (id=1804): openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000180)=ANY=[@ANYBLOB="1201fb0019030320d812010079de01ec020109021b0001000003000904000001785ecc00090585020004"], 0x0) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) io_setup(0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) ioctl$KVM_SET_CPUID2(0xffffffffffffffff, 0x4048aecb, &(0x7f0000000580)={0x7, 0x0, [{0x7, 0xffffffff, 0x1, 0x7, 0x6, 0x6, 0x2}, {0x80000007, 0x4, 0x0, 0x7fff, 0x27, 0x7, 0x5}, {0xb, 0xe5f, 0x1, 0x7, 0x2, 0x6, 0x80000001}, {0xd, 0x2bb, 0x1, 0xd, 0x3, 0x7ff, 0x400}, {0x80000000, 0x100, 0x4, 0x6, 0x3, 0x1, 0x3}, {0x40000000, 0x100, 0x4, 0x4, 0x9, 0xffffffff, 0x4}, {0x4, 0xff, 0x1, 0x3, 0x2, 0x8, 0x4}]}) read$char_usb(r1, &(0x7f0000000000)=""/188, 0xbc) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) inotify_init() r2 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r3, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="0100000000000000064d564b"]) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r4 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = ioctl$USERFAULTFD_IOC_NEW(0xffffffffffffffff, 0xaa00) ioctl$UFFDIO_API(r5, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x446}) r6 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendmsg$nl_generic(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4c00d}, 0x20000000) 5m35.158997609s ago: executing program 4 (id=1812): bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e23, @multicast1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000007"], 0x50) pwrite64(0xffffffffffffffff, &(0x7f0000000000)='L', 0x1, 0x7) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r0, &(0x7f0000000000), 0xd) r1 = syz_open_dev$hiddev(&(0x7f0000000080), 0x1, 0x40042) ioctl$HIDIOCSFLAG(r1, 0x4004480f, &(0x7f00000000c0)=0x1) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7ffff000, 0x0) 5m34.93365537s ago: executing program 4 (id=1813): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, &(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @empty}, 0x2, 0x2, 0x1, 0x3}}, 0x80) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) (async) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000140)=0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) (async) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) 5m18.737277401s ago: executing program 32 (id=1813): socketpair$tipc(0x1e, 0x2, 0x0, 0x0) (async) socketpair$tipc(0x1e, 0x2, 0x0, 0x0) recvfrom(0xffffffffffffffff, 0x0, 0x0, 0x12143, &(0x7f0000000680)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x4e22, @empty}, 0x2, 0x2, 0x1, 0x3}}, 0x80) socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) (async) r2 = syz_open_dev$usbfs(&(0x7f0000003f00), 0x201, 0xa401) ioctl$USBDEVFS_DROP_PRIVILEGES(r2, 0x4004551e, &(0x7f0000000140)=0x4) ioctl$USBDEVFS_DISCONNECT_CLAIM(r2, 0x8108551b, &(0x7f0000000000)={0x0, 0x0, "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"}) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000008c80)=ANY=[@ANYBLOB="2c00000026000506"], 0x2c}}, 0x800) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) (async) recvmmsg(r0, &(0x7f0000007700), 0x318, 0xfc0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x34, 0x10, 0x801, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8000, 0x64}, [@IFLA_GROUP={0x8}, @IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FD={0x8}]}]}, 0x34}}, 0x0) 12.561084691s ago: executing program 3 (id=2657): socket$inet6(0xa, 0x5, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x4, r1, 0x1, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x400080, 0x0) ioctl$SNDCTL_TMR_SOURCE(r4, 0xc0045406) r5 = socket$inet6(0xa, 0x3, 0x3c) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="c40000468a3c69000000000000000000e000d7310002000000000000000000000000000000000000000000000000000000634e4f3f7a7178a6759d0c15384c0001368c7aa7445048b03e6cd19d9601608dddab72d397b060d13556d3dbbfd0f9e781fcb04d760f62c30825524c3dc0d3a7cb2a4a1aea0a538e27f8c084356dfbec662e8e8806b7a6118ab9354f01f6e93d5551d6cd395864de57d6ab97f22f8b556c636e8d5fe4634ca4333debeac9a6f3fdb2aba5d65f12aeca32680b101171591557b0111e3c671716e453989e6f8f60a0c9", @ANYRESDEC=r5, @ANYRES32=0x0, @ANYBLOB="000000000000000000bf429b885e8e5b7e37150000000000000000000000000000000000000010f1ff000000000000000000000000000000000000fbffffffffffffff00000000000000000001000000000000000000"], 0xc4}}, 0x0) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000340)=ANY=[], 0xb8}}, 0x14) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000002100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000090a010400000000000000000a0000040900010073797a310000000008000540000000040900020073797a310000000008000a40fffffffc200011800e000100636f6e6e6c696d69740000000c00028008000140fffff27414000000110001"], 0x84}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x5000, 0x1, @remote, 0x5}, 0x1c) writev(r5, &(0x7f00000000c0)=[{&(0x7f0000000100)=',', 0xffdf}], 0x1) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x4) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) mknod$loop(&(0x7f0000000000)='./file0\x00', 0x1000, 0x0) 11.628199475s ago: executing program 2 (id=2658): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c2bbff02000088918784dba85fa22e00000000000000000000000186009078000000000000b79d528600000000a78c000000eb"], 0x0) r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="0180c20000000180c2bbff02000088918784dba85fa22e00000000000000000000000186009078000000000000b79d528600000000a78c000000eb"], 0x0) (async) syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x18d1, 0x9400, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x10, 0x1, 0x3, 0x0, 0x1, 0x0, {0x9, 0x21, 0x5, 0x0, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) (async) syz_usb_control_io(r0, 0x0, 0x0) (async) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000040)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) (async) 11.12307043s ago: executing program 3 (id=2660): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f00000000c0)={0x38, 0x0, 0x1, 0x401, 0x0, 0x92, 0x55, 0x8, 0x7, 0x8}, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000640)={0x0, @in={{0x2, 0x4e21, @rand_addr=0x64010102}}, 0x0, 0x0, 0x6, 0x4, 0x80, 0x7, 0x4}, 0x9c) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_RUN(r6, 0xae80, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r1, 0x4018620d, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000300)='./binderfs/binder0\x00', 0x0, 0x0) mmap$binder(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x1, 0x11, r1, 0x7) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfffffffffffff000, 0x101, &(0x7f0000000080)) getrusage(0xffffffffffffffff, &(0x7f0000000240)) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000440)="d800000018007b7be00212ba0d0505040a003f00000f040b067c55a1bc000900b80006990300000015000500fe800000000700000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b3162700e06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b11602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5005ccca262f3d40fad95667e04adcdf63cc1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9", 0xce}, {&(0x7f0000000100)="d8bcf4de", 0x4}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 11.057951854s ago: executing program 5 (id=2661): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4e, 0xa, 0x6, 0x0, 0x145dfa6e}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg2\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r6, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000940)=""/180, 0xb4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000340)=""/151, 0x97, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r6, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x1}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000006c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="240003000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcffffff0100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r4], 0x40}}, 0x0) 11.046602689s ago: executing program 0 (id=2662): r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000100)) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f00000001c0), 0x10) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e23, @loopback}}, 0x0, 0x0, 0x4d, 0x0, "9850aefd374fa3fc96567405ccb772853e8109351ec3c12b48638e2f762b40660780cb75ff882832d6a1c6c20a4cb282ea619fda84db39d95685779f5e954229f79180bbeeb9939d81af21c28840e280"}, 0xd8) bind$inet(r1, &(0x7f00000000c0)={0x2, 0x4e20, @loopback}, 0x10) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r2, 0x11c, 0x1, &(0x7f0000001040)=""/4096, &(0x7f0000001000)=0x1000) sendto$inet(r1, &(0x7f0000000140), 0x0, 0x20008005, &(0x7f0000000100)={0x2, 0x4e20, @rand_addr=0x64010102}, 0x10) recvfrom(r1, &(0x7f0000000480)=""/110, 0x168f6f3d, 0x734, 0x0, 0xfffffffffffffecb) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x23, &(0x7f0000000000)=0x1, 0x4) preadv(0xffffffffffffffff, &(0x7f0000004ec0)=[{&(0x7f0000004bc0)=""/68, 0x44}], 0x1, 0x8000, 0x0) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000400), 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)=ANY=[@ANYRES32, @ANYRES32, @ANYBLOB="0200"/12, @ANYRES32=r3, @ANYBLOB="35090a290b643b7da4c7fac1002283d2780d21e37520da211ff7b8f1eb09fce6c5b5fe074b12ec372c807c5b14f1b211904020540d3949835f3850272cbb9c6899f6252736b825fef911bcd17ff2d30c02e3758a2b14e7aa74d868969bffa719a17eb4185fa806ae6159392730ec5a0a7c38cbc90a1fb5599361c24cf81f8a255f3de142cc4f1eaa3e30cd2617198416900a2977e4c01ed3f8080000000ba7edf6c8fa18f6939089dad556200b74b89462fb2aba08a3cce020e85cc1acdde501edff012c9bdf41a1728b63e75118f277281e541751f4233959fa091a47c99da4b7faed71383b9b2f5d05", @ANYRES64], 0x20) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x400, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r5, 0xae60) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r6, 0x4008ae89, 0x0) r7 = dup(r6) ioctl$KVM_SET_VAPIC_ADDR(r7, 0x4008ae93, &(0x7f00000000c0)=0xffff) ioctl$KVM_RUN(r7, 0xae80, 0x0) r8 = userfaultfd(0x1) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f00000002c0)={0xaa, 0x610}) ioctl$UFFDIO_WRITEPROTECT(r8, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000800000/0x800000)=nil, 0x802000}, 0x2}) r9 = fcntl$dupfd(r8, 0x0, r8) ioctl$UFFDIO_CONTINUE(r9, 0xc020aa08, &(0x7f00000000c0)={{&(0x7f0000800000/0x800000)=nil, 0x800000}}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000440)={@cgroup=r7, 0xffffffffffffffff, 0x21, 0x10, 0x0, @void, @value=r9}, 0x20) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) syz_kvm_setup_syzos_vm$x86(0xffffffffffffffff, &(0x7f0000434000/0x400000)=nil) 9.963638472s ago: executing program 0 (id=2664): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000000), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000001b00)={0x1c, 0x2d, 0x1, 0x70bd27, 0x25dfdbfc, {0x4}, [@typed={0x8, 0xc, 0x0, 0x0, @u32=0x2}]}, 0x1c}, 0x1, 0x40000000, 0x0, 0x4c00d}, 0x20000000) 9.378992993s ago: executing program 3 (id=2665): r0 = syz_open_dev$usbmon(&(0x7f0000000040), 0xb, 0x624002) read$usbmon(r0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000180)=ANY=[@ANYRES32], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = fsopen(&(0x7f0000000280)='ceph\x00', 0x0) r5 = socket(0x10, 0x803, 0x2) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) setsockopt$XDP_RX_RING(r5, 0x11b, 0x2, &(0x7f00000003c0)=0x40, 0x4) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000b40)='source', &(0x7f0000000040)='c9::\x00', 0x0) r6 = gettid() sendmsg$inet(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000300)="cdbc5ec809101d90adfae37b979408b87a5e78800a0f6b00548969c0081c478e48a049a5ca70b7c17554422743aba5d343733dd0866966acf7f7b206d9005c0c46ca73e22996b6f59993fcdafe0559a41c0eb334a60a52fffc22682828bfb13ff039b020c4ad995d770f9fdd9fab589f309b44d5e97dd2461f52c00b249ef4ebdb665fac147b9ee54c7bdc342d0cda47161bbc31f90d2c95bb7870dfaee3cc0c41dc29550021b142fd7c16d7b80a95f500888d", 0xb3}, {&(0x7f00000001c0)="3720916e3104b2ccb0d1aeb825e490d9807c8bc7ac21d08f686ed806002f3af71c9759887cd52790", 0x28}], 0x2, &(0x7f0000000600)=[@ip_ttl={{0x14, 0x0, 0x2, 0x99fd}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x6}}], 0x30}, 0x40000c1) fsconfig$FSCONFIG_CMD_CREATE(r4, 0x6, 0x0, 0x0, 0x0) tkill(r6, 0xb) ptrace$ARCH_SHSTK_DISABLE(0x1e, r6, 0x1, 0x5002) pipe2$watch_queue(&(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}, 0x80) ioctl$IOC_WATCH_QUEUE_SET_FILTER(r7, 0x5761, &(0x7f0000000f40)=ANY=[@ANYBLOB="01000000000000000080000007000000146cffff1900000009000000af010000a2b9000001000000100000000800000002000000"]) 9.35717701s ago: executing program 0 (id=2666): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_procfs(0x0, &(0x7f00000003c0)='net/mcfilter6\x00') r4 = userfaultfd(0x80801) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x100}) ioctl$UFFDIO_REGISTER(r4, 0xc020aa00, &(0x7f0000000180)={{&(0x7f0000ffc000/0x4000)=nil, 0x4000}, 0x1}) ioctl$UFFDIO_ZEROPAGE(r4, 0xc020aa08, &(0x7f0000000000)={{&(0x7f0000ffe000/0x2000)=nil, 0x2000}, 0x1}) madvise(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x9) syz_io_uring_submit(0x0, 0x0, 0x0) r5 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) write$6lowpan_enable(0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="50000000020605000000000000000000000000000c00078008000640001000000500010006000000050005000200000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x50}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe0500030008"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) setsockopt$sock_linger(r3, 0x1, 0x3c, &(0x7f0000000140)={0x200000000000001, 0xfffffffd}, 0xffffffffffffffe3) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(r3, 0xc018937d, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0xe}}, './file0\x00'}) connect$inet6(r5, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback={0xff00000000000000}, 0x400}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3e, 0x0, 0x0) 8.123985741s ago: executing program 3 (id=2667): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) listen(0xffffffffffffffff, 0x0) socket$packet(0x11, 0x3, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_usb_connect$cdc_ecm(0x5, 0x5a, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000402505a1a4400001020301090248000101570040090400000002060000052406000005240000000d240f010008000000000000000424020009058103"], 0x0) syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e"], 0x0) syz_usb_disconnect(r3) syz_usb_connect$printer(0x3, 0x2d, &(0x7f0000000240)=ANY=[@ANYBLOB="12010003070102202505a8a440000102030109021b000101ff400209040000020000006e090501020800244700"], 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128008000100687372001c000280050007000100000008000200", @ANYRES32=r1, @ANYBLOB="08000100", @ANYRES32=r4], 0x48}}, 0x0) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYRES8=r5], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x50, '\x00', r4}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608054c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 8.070022396s ago: executing program 1 (id=2668): r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000048c0)={r5, &(0x7f00000047c0), &(0x7f0000004880)=@udp=r4}, 0x20) recvmmsg(r4, &(0x7f0000000b80)=[{{0x0, 0xffffffffffffff6c, 0x0, 0x0, 0x0, 0x52}, 0xa}], 0x360, 0x120, 0x0) r6 = semget$private(0x0, 0x4000000009, 0x0) semop(r6, &(0x7f00000002c0)=[{0x0, 0xec7b, 0x1000}], 0x1) semtimedop(r6, &(0x7f0000000140)=[{0x1, 0x3c, 0x1800}, {0x4, 0xac1b}], 0x2, 0x0) semctl$IPC_RMID(r6, 0x0, 0x0) ioctl$SW_SYNC_IOC_CREATE_FENCE(r0, 0xc0285700, &(0x7f0000000080)={0x0, "4fcb813dd28b42bee2b094a3de6dbfd30a74457bcd1cfd5feffe5c019f45d57f", 0xffffffffffffffff}) ioctl$SYNC_IOC_MERGE(r7, 0xc0303e03, &(0x7f0000000180)={"000000149c0286e08ffad43c40fc0a000000ab65a29e23546aad0281b3aff5eb", r7}) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x81}, 0x0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="50020000", @ANYRES16=r9, @ANYBLOB="4d7e00000000000000002a00000008002f000000000005003600000000000c0005000000000000000000050037000000000008000200", @ANYRES32=r11, @ANYBLOB="06000600000000000600040000000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) 7.99687615s ago: executing program 2 (id=2669): r0 = syz_usb_connect(0x0, 0x24, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000010c0)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="18000000030000000000000026d0000095002b000000000093adffa87d2255f674412d020000000000005ab527ee3697f1ec4436dd1164aa93cc5800075557165397000a63f6b9b3f427f6ba6b34f98125f30e697fffffffffffffffa30b273683626e0003254d570dca6b78ad833488cfe4109eaf009edd3e69613d3cd6aaa300006eee8501000000520a0000151d010000000100bf00000000cc587424363dc6ad7f3bbd424c6e6cafbe9309aba218a52001a3cd000041f0db74596fd72c002a60c1bc7dc8c38b7d2e13c50424b9dd1145d03ff45f70685c6bd9ff41c69b7de4758c1096a1dc52f29e470a000517ebc406e89dcbb7677e6528b0856e31ed9474ac24cf609068f645ce971fc0480737a55ebb0bd701f7ff21e88b3cfc22df01e4bac9d97328fa2a82b5e8741e02056d933bed759ff232cebc68b91af50479387467824262852c7939db5672d07cdbe8e14abf56497e5d56d06c759da324a39f7f51b870b2851c3f0a1aab71587a21c8f1b3369ebfcba105a6ccdd01b0f04edb256c604f068773f6ff000000000000006ffbfe5ca32142b0195531458b7d1e341c6f864f983d745f5865aad41d2915aae7602a2d6cd415e8351ebc4223f54d6bec664709ff03f1aa3dc7f1580ace9bf2afd28d7157e67fb98d121ad6eb372713255012e028cb2654d493a0b4b35faae176c89b745eda2967199cc936859a537e8e4871d4acf3e3dc10e13ef227f627a40000ad1fa253d33fa74f172d3407ae4e1e347c0cff28235a3cbb5d33b09bc30cf2880c586272c3f4d79bc36305745cb1cb385e6add14652003c7cdd3324f07d134d3ed07f1c10900000009dd872ec66ea6c718bbd1aa59114000f0be4c6f8df084c5e9734ae30aa9afdc719bf01ab03a9b1074407136b4506000f0916a39d3057d50183612b39e73aeeb6eaf14652dda68e98ef938e6515a94a71836469e2051d9b7eb85f3f2d5ae2c51944da8d7391d6d6b97419a3b7660df4c5124ca425d374b371867a79b31c6617fc3327191fbf514573f0e30d1d60be2168fe6c2f3dccd599a2cb77f124e22f87673675805494db821f39b50d938d5fd8c6b2a3a324c257b84000000b749ccd74089ed6b86f81ca3d247d8f71d290ed1b1a11f7a67125170c88c3b6a50696332226401b110da9c786eeca22debc99335583b54c13c3130978fa069af8223b38ced735c2d905f51ca85ffa4add5647489b3960127696cf2f16625c0c102000000000000009ef52134842e64171f3963841086e3797a4825d081f2d987f05c5341877386ec55d7dc958fd235d6071619a65d4b82d9c162f3556076b80550d961ca74f1ffdaccf0ea5f02e0fca8b27ff3983ab74fd3d560700a1fbb44e77e312b3b129e000302d613916c9bcf9f0000fac73adb6bfb27f88dba816020be760f7b45e001efada800000000000000fdaf4660402f7b3b79a433e08074ea2462974ab2cbd247eb1cfa2638f56daee57ed14bc74de0fd87a9ce638190f3570e0b4c80ef682df22237270955afb6008846557ee3bc09fda6dbb6542e597300eb82a184c96ffde5a30e5433d86666cb045bdd02c804c22ff2635c7bfbf5c0d586cda5e1e88a4d41dee7cc74f822278d124638fec58faeb48afe324369cc51204158bb440df2a694f4cdcaa4f65c22f000000000000000000000000000d503d79906958102000000000000000000001ffff0ef89b2a635edb2dd163e863315e84498dfb52b7f54da6398cbedaa42cc17c4563c859656a357770289a61faa95a82bf1cfb7f2fd7252e9322abe282c3344fc6738b4467893b9bf0d1c8130ae6b226900110635376413c29f7c6f7b7e29b9f4bddd5e328661f4046e01f7d7dc22174e5e627a6f608ad53a4168d4d8f7fbc71104512efe8e5d7d934aa289b4db2b870000000000000000000000000000000000000000009b777883a0f9cf4ad155110cd3ace2b322ac31bfa27847dc99c8a69a1ea5b98e525e6393ad7fd9795170e7b11e4fa990b9386910a6a1a66a70eaff01247603c2ff49d3979676bffb3049166ab84a0f061991bd57c2566c10c282352a5105b6164e3f2491e4793e590dcc71de10da96fdff40dd44a2c9882d3aa0f8a797b8fea6efcfb5046b7679f15559cdaa977504c40b2f777acb907ebf5fc14add71d0bca37405ded69b77ab4a3d7487fd50c5e22ade17556abb722d9c085b189b5fd1f30e8dc813f60400fde1f88d830b11002135e8e7262f299ed7923bfbe00ad88be179e56b41ff3792cee2fc37eee739c3e3af923e8738d93d583a9cf00b946960fc38cf85aae7cf708f9a9d166f2e352a06d99b8be476d1cc2a53a859ae4fdab2a987925d12422474ac044ffe9fe2bf9bf9bbdf36c4ca89c516647542ac45545337829fa7039d155ebda42d4c14f4ca7f8b5d5842658c62d0a03092b94fa1b19f190000000000000000000000000000009e75a32b9fafeffd890f2759b0fe3add33fa43a4c3995458f86a926ad56b23571c46728c039cd3b4bb7d69dfa27782b953a7b81cc161912b3e5716360686e126311a7e21bfa2efd0f57b90c203528c8f620d3c7b31c7abcffae382f53500f7cd5d00159e5f741d3e2d2cbd1a04b3f39b50a4683daa7d117b7f4a149c954d69d8ab001339e464c8eb5f0c63899010757c9a3b69f4920531b83f71d5a34ef9405819afee15b77c015ea755c95127ff2274bb9a8463ce4b8c08ad70596ad2b2b044e660ed144b9dce372450ea69d25da2b6deed67fac26e765aa7d5532ba1044f62db049486acde2294127cb767c23da7d8f9844d3be5b6aa83ee4ce1876af5130efe1b64ccb6bbd349bcc0e8deec8ab3bd1b35bbc8ab8a152771744baa576b9223d26b5603a7f091be1264cabaf661fe2dbe7990a61f710f923f2337818a3983d06c11a6bee7fccb78a53c56db5c18f920d2194374db665dcadf53b8d0014e682ec721d67a7ab6c817fe53c86f8900000000000000000000000000000060b7b827c56e973a2ab5bc5c558ada68c4ec3762f5957b20b919af5d53c87de056a397bdcb614c34761e2c815698e1f9f5521a385c2910850929040a4eba573e91ca21fc855358120ecd79a5d7007693ef3ff9d2b993d114443d53c53094e516f675b2a7074584714e7a2015e05e507811b4ca89c39281c9ada5f58ceb55893cca783ab09c9a19836a3a2c715b10436a5731549e364679ecd8461a68433ab52b1108831edb9654dc602183c1170d6881647f6dca15d57fb76357d815c5f1000000000000000000f49e327c0b6e511494466cec78650f0a6267"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183}, 0x94) r2 = socket$kcm(0x29, 0x2, 0x0) r3 = socket$inet6(0xa, 0x803, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, 0x0, 0x0) sendto$inet(0xffffffffffffffff, &(0x7f00000003c0)="25c6f84c6b92407c6d29973a26a7e2d723b20a0000000045", 0x18, 0x2400c0c1, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f00000001c0), 0x4) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = memfd_create(&(0x7f0000000000)='\x103q}2\x9a\xce\xaf\x03\xdfy[\xd9\xffR8\xf4\x1c\bi\xe4^\xd5\xfd\xa9\r\xac7A\x94\xa0\x00\x00\x00\x90+\xd6\x05\r\x84\x87\x1c\b\xdb\xe2\x00\x00A\x90m\xb6&\xd0\x9d\x00\x00\xc5\xb8,\f\xd4s\xb2\x99/\xc0\x9a\xf2O\xdb\x00\x00\x00\x00\x00\x00\r\x1b\xd3\xff<\x83z\x80\x8fQ|\xf5d\x10\x10\xd7\x01M\x7fML\x18\'\x1a<\xfee7{l\x16}\xa0I\x7f\xb5)l\xbb\x02\xfa\xb7\xb6\xa0]\xda8\xe0~\x1c \x91\t\x8b\xbd\x1f\xb3834d1i\x9b\x94\xa6\\\x0e\xe2\xfa\xe5!\xd3\xcf\xfc\xce\xba\xe2\x9f\x05xgL5\x14Y+\xb3\x1axi)<\xf7\x98\xc1\xba\xf4|\xe7|\xc4\xd7\x03\x00\x00\x00\x04D\x15E^7%8\x94y\x98\xf0l\xa0\'Q%\xd4\xda\xee\x81}\xcc\xfd\xa2\xe3M~x\x96\xe3]\xd70\xa2\x17\xca\xde\x1b\xaa\xe0l\xfc\x85\x8fc\x1c{|e\x8bs\xb0\x85E\xce;p)\xf8\xa6\xaa&QC4V\x81\x04\xcf\xd2\x81\xdc\xdf\xd7<\x9f\x93\x8bX\xd4\xea\xb2\xff\b\x92\xc7\x00\xef\xff\x00\x93\x1f\x92\xa7dcY\x9c\x9e9O-\xfcF\xbb\xbd{:IR\xea\xd8$\xe2\xa0\xc2\x8b\x1a\xead\xb8\xe1:6\x15M\x1d\xdak\x8c\x909\xd8\xb3\x02\xe0\x04\x9c\xc2\x06|\xf0\x0f\xa6Y&r\x9b\xc7\x1d\xe7jDf\x87@\x8fg\x15RJwe\xe2\xdcunu\xff`\xa40\xce\xffB%\xe4k\xff\x8d\x06\x0e\x89\xd9DC\x9fF\x9c[M=\xe0^\xa8\xed)\xe8Z\xe8\x99&\x87\x04\xa4\t\xaa\xd8\xd6\xd5pG\xcb\xc4\x8b\xf7\xb8#\xcb\xd8|\xa5\xa6S\x8b\x8cv\xb7)\x02k\xf3L\x03\xbb\xfa\xe1\\\xf1\x8cUj\xd5\xa5\x88GL\xe7_\xfd\x17C=G\x0f\xe9u\x1d\xfeg\xfex\xcd\xaa\xad\x906\xd0sy\xc6T\x93\xae\xd5r\xc8G\xc5\xfdS\xff\x04:`\x1e\xe3;l\xcd&\xd4\xf4\x8eum\x04\x00~\xfa\x05\xd7\xe7X\xc7/\xae5\x93wwT\x13\xbd,\xd6\x16\x84\xcd\xd1\xd8\xe1P_\xbf0\xd8\x8d%Yh\xb5\xb4\"\xf5\x93\xdeh\xce\xa5\xe8\xc8\xec\x88\x89\xf07{\x95\xc9\xd0\xee\xe1\x1d\x80\xcc]-\xc2\xa1\x02ELhI\xd9\xf5\xcfk\x8a&i\xc1\xff9T\x8e\xe2rY\xa3\xd2H9\xfe\x0e\x1e\xac\x0f\xc3\xbd{\xd9\xcc\xbe\xa9\x93\xe0\xa4W\x1cn>\xc1\xf1\x9e\"\x93\x19\x19\x1a\xcc\x7fy\xd2~\x05\x99\xe6\x00o\xca\xe0\xc6\xd4\xf5\xa0\xc8P\xd6;\xf3\xc6~E\xacI\xd4\xe9\xa1|>\x91.K\x81\xa9+\xcf\xff\xcb\xfa\x0f\xe7n\x83H\x12\xac\x80\x16\xf8\x87Q\x97Az\n`\xb6\xe13A\xec\x8d(\\D\xec\xa6\t1\xa0h\xfc\x1f\xdd1@-4\xb4:\xf8\xd5wP \x84m\xe2\xd9\xfcb\xa0\xc3\xc9\xe7W\x86\xd7$\xa4ml\xee\x97[\xb7\xfa', 0x2) mmap(&(0x7f0000200000/0x400000)=nil, 0x400000, 0xb, 0x2012, r5, 0x0) read$msr(r4, 0x0, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x4) r7 = dup(r6) write$UHID_INPUT(r7, &(0x7f0000001040)={0xe, {"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", 0x1040}}, 0x1006) syz_io_uring_setup(0x8001f87, &(0x7f0000000080)={0x0, 0x0, 0x2000}, 0x0, &(0x7f0000000280)) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r2, 0x89e0, &(0x7f0000000180)={r3, r1}) syz_usb_control_io$lan78xx(r0, &(0x7f0000000200)={0x14, &(0x7f0000000440)={0x0, 0x5, 0x9a, {0x9a, 0x31, "88c7da07c019a1f50f2f7e919dd3a16243515028b37dc7c89417f13cedd315ef5f2f40a87946f18166fb4d6a320e4c090fccb7f1f3a342a50080d8a78a798cb52d8bf1dc33f37f742fa7808cc7e8c0fcb7b0610a0eed0e42737bd800a3bacaa04a015a4501673a0dc2b01f0b5b3d6d2bbccd0ceae8ed94f76915bbb98130f772f18e25eca8d19fbe8d05a27dc3f1d67cd000f8ac21e2c919"}}, &(0x7f00000001c0)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x2809}}}, &(0x7f00000005c0)={0x34, &(0x7f0000000280)={0x40, 0x3, 0x34, "56f28f548abf7fb6f20c5fdeaf6a7a1c989c99192f98a45bd3d930c20c98d32520c71d0fce4687e007c20aaa5b01d93a767c85f9"}, &(0x7f00000002c0)={0x0, 0xa, 0x1, 0xf3}, &(0x7f0000000380)={0x0, 0x8, 0x1, 0x4}, &(0x7f0000000500)={0xc0, 0xa1, 0x4, 0x4}, &(0x7f0000000540)={0x40, 0xa0, 0x4, 0x80000000}, &(0x7f0000000580)={0xc0, 0xa2, 0x2f, "7f9a6de66506d19fbc58821aac91c260f9a82af4fed8c80684a504335f1ae617a45b87d177d527f8fa40d05de7ec46"}}) prctl$PR_SET_SPECULATION_CTRL(0x35, 0x0) 7.988923123s ago: executing program 5 (id=2670): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1c0000000203030100000000000000000400000a0800010001"], 0x1c}, 0x1, 0x0, 0x0, 0x40841}, 0x2000c010) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000df7000000000000000000000000000000000000000000000c9fadab300a87602c0b0fa603410ec24d06fcc2f0df1b4"], 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x10) 7.237629325s ago: executing program 5 (id=2671): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x4, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000006c0)=""/235, 0xeb}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x1000002, 0x200000005c831, 0xffffffffffffffff, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000150000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB='\\\x00\x00\x00!'], 0x5c}}, 0x0) 7.080073558s ago: executing program 1 (id=2672): syz_emit_ethernet(0x36, &(0x7f0000000bc0)=ANY=[@ANYBLOB="0180c20000000180c200000e86dd6cbdc6f500006cfffc010000000000000000000000000000ff0200000000000000000000000000012a2381cef61b8701f0"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f00000002c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffc, 0x0, 0x0, 0x0, 0x2000000}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000300)={0x60, 0x1, 0x3, 0x301, 0x0, 0x0, {0xa, 0x0, 0x8}, [@NFQA_EXP={0x28, 0xf, 0x0, 0x1, [@CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_ZONE={0x6, 0x7, 0x1, 0x0, 0x2}, @CTA_EXPECT_CLASS={0x8}]}, @NFQA_VLAN={0x24, 0x13, 0x0, 0x1, [@NFQA_VLAN_TCI={0x6, 0x2, 0x1, 0x0, 0xfffc}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}, @NFQA_VLAN_PROTO={0x6, 0x1, 0x1, 0x0, 0x88a8}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x20044800}, 0x4000800) 6.750742051s ago: executing program 1 (id=2673): syz_genetlink_get_family_id$ethtool(&(0x7f00000003c0), 0xffffffffffffffff) r0 = socket(0x2a, 0x2, 0x0) ioctl$SIOCSIFMTU(r0, 0x541b, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0x80000000e) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) ioctl$SG_IO(0xffffffffffffffff, 0x2285, &(0x7f00000033c0)={0x53, 0x0, 0x0, 0xfa, @scatter={0x3, 0x0, &(0x7f0000000a80)=[{0x0}, {&(0x7f00000008c0)=""/132, 0x84}, {&(0x7f0000000980)=""/221, 0xdd}]}, 0x0, 0x0, 0x0, 0x0, 0x800001, 0x0}) r3 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r3}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x3, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) remap_file_pages(&(0x7f0000800000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1750bd030100000000009500000000000000bc2608000000b0ffbf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00'}, 0x48) setsockopt$MRT6_INIT(0xffffffffffffffff, 0x29, 0xc8, &(0x7f0000000340), 0x4) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='net/fib_trie\x00') r5 = openat(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup\x00', 0x0, 0x0) ioctl$TIOCGSID(r4, 0x5429, &(0x7f0000000040)) getdents64(r5, &(0x7f0000001f00)=""/4093, 0xffd) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="5c0000002000010000000000000000000220000000000000000100000500150002000000080009000000000008000b0005000000080017004e214e22080001"], 0x5c}}, 0x0) 6.66669019s ago: executing program 2 (id=2674): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_open_dev$mouse(&(0x7f0000000000), 0xc, 0x40) ioctl$IMCTRLREQ(r1, 0x80044945, &(0x7f0000000040)={0x40, 0x3, 0x5, 0x800}) r2 = epoll_create1(0x80000) pipe2(&(0x7f00000002c0)={0xffffffffffffffff}, 0x4000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r3, &(0x7f0000000300)={0x2}) close_range(r0, 0xffffffffffffffff, 0x0) 6.569643083s ago: executing program 2 (id=2675): r0 = socket$inet6(0xa, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000480)=0x107e) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) listen(0xffffffffffffffff, 0x0) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000240)={0x41, 0x2, 0x1}, 0x10) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(0x0, 0xffffffffffffffff) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r4 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r5, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r4, 0x0, &(0x7f0000000240)=0x0) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000100)) r8 = syz_open_procfs(0x0, &(0x7f0000000100)='numa_maps\x00') pread64(r8, &(0x7f0000001180)=""/4107, 0x100b, 0x200280) setsockopt$IP_VS_SO_SET_ADD(r8, 0x0, 0x482, &(0x7f0000000200)={0x1d, @multicast1, 0x4e20, 0x3, 'nq\x00', 0x4, 0x8, 0x5e}, 0x2c) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYRES8=r3, @ANYRES64=r7, @ANYRES16=r5, @ANYRES32=r6, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="08000100", @ANYRESOCT], 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x40) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x6a855000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) truncate(0x0, 0x181c06) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f00000004c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x34}, @in=@broadcast, 0x0, 0x0, 0xfffe, 0x0, 0xa, 0x0, 0xa0, 0x4f}, {0x0, 0x0, 0x0, 0x401, 0x0, 0x0, 0x2000000000}, {0x0, 0x0, 0x1000, 0xfffffffffffffffe}, 0x4}, {{@in6=@empty, 0x404d3, 0x2b}, 0xa, @in=@empty, 0x0, 0x0, 0x4219126d62c735a2, 0x0, 0xac9, 0x100000}}, 0xe8) socket$key(0xf, 0x3, 0x2) 6.113612291s ago: executing program 0 (id=2676): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000000000008500000070000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder1\x00', 0x0, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mremap(&(0x7f0000532000/0x3000)=nil, 0x3000, 0x1000, 0x3, &(0x7f0000190000/0x1000)=nil) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = gettid() r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(r6, &(0x7f0000001f80)={0x0, 0x0, &(0x7f0000001f00)=[{&(0x7f0000002840)=ANY=[@ANYBLOB], 0x114}], 0x1}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)=0x0) timer_settime(r7, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) ioctl$VIDIOC_ENUM_FMT(0xffffffffffffffff, 0xc0405602, &(0x7f0000000080)={0x80, 0x7, 0x3, "4c6b89bb7b10014f689b2fe5e5d3824ddc481c670f93099b0d70cb64602f483b", 0x59555956}) 4.984650488s ago: executing program 5 (id=2677): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0), 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x22, 0x1028}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) 4.981835186s ago: executing program 0 (id=2678): bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB, @ANYRESDEC, @ANYRES16=0x0, @ANYRES32=0x0, @ANYRES32], 0x48) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[], 0x50) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000e80)={r0, &(0x7f0000000d40), 0x0}, 0x20) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0xcc, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) prlimit64(r1, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000040)=@newlink={0x34, 0x10, 0x401, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x20878, 0x1a201}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipip={{0x9}, {0xffffffffffffff1f}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80d0}, 0x0) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_PROBE_MESH_LINK(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="01002abd7000fddbdf258c00000008000300", @ANYRES32=r10], 0x28}, 0x1, 0x0, 0x0, 0x93ddb44c539533d0}, 0x810) ioctl$TIOCL_SETVESABLANK(r7, 0x560e, &(0x7f0000000140)) ioctl$TIOCL_BLANKSCREEN(r7, 0x541c, &(0x7f0000000040)) r11 = openat$ttyS3(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000040)=0x1) ioctl$TIOCVHANGUP(r11, 0x5437, 0x0) 4.228234858s ago: executing program 1 (id=2679): setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) fsmount(0xffffffffffffffff, 0x0, 0x80) fsconfig$FSCONFIG_SET_BINARY(0xffffffffffffffff, 0x2, 0x0, &(0x7f00000004c0), 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000032680)=""/102392, 0x18ff8) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x75, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698d0a881c51852e4451b57d037ad3c04594282423424d00", "bcfd56f1375461caaa2f19935e6996c7096ffeeb0300000000000064", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x2003}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x9}, 0x94) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000300)={@cgroup, 0xffffffffffffffff, 0x22, 0x1028}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000007c0)}, 0xffffffff}], 0x1, 0x10000, 0x0) 4.000072752s ago: executing program 0 (id=2680): openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f0000000300)=@abs, 0x6e) socket$nl_audit(0x10, 0x3, 0x9) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) pipe(&(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x24}, 0x1, 0x0, 0x0, 0x20040810}, 0x4000004) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsetxattr$trusted_overlay_redirect(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x1) sendmsg(r1, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0xb4e, 0xa, 0x6, 0x0, 0x145dfa6e}, 0x0) add_key(&(0x7f00000000c0)='pkcs7_test\x00', 0x0, 0x0, 0x0, 0xfffffffffffffffc) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000001880)={'wg2\x00', 0x0}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) r6 = openat$vnet(0xffffffffffffff9c, &(0x7f00000005c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r6, 0x4008af00, &(0x7f0000000000)=0x200000000) write$vhost_msg_v2(r6, &(0x7f0000000200)={0x2, 0x0, {&(0x7f0000000940)=""/180, 0xb4, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg_v2(r6, &(0x7f0000000080)={0x2, 0x0, {&(0x7f0000000340)=""/151, 0x97, 0x0, 0x2, 0x2}}, 0x48) write$vhost_msg(r6, &(0x7f0000000540)={0x1, {0x0, 0x0, 0x0, 0x2, 0x1}}, 0x48) write$vhost_msg_v2(r6, &(0x7f00000006c0)={0x2, 0x0, {0x0, 0x0, 0x0, 0x3, 0x3}}, 0x48) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRESOCT=0x0, @ANYBLOB="290a00000000000000000100000008000100", @ANYRES32=r4, @ANYBLOB="240003000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000fcffffff0100000024000300a05ca84f6c9c8e3853e2fd7a70ae0fb20fa152600cb00845174f08076f8d784308000100", @ANYRES32=r4], 0x40}}, 0x0) 3.330026173s ago: executing program 3 (id=2681): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d000000"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x40f00, 0x23, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) creat(0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mlock2(&(0x7f0000627000/0x3000)=nil, 0x3000, 0x0) mlock(&(0x7f0000626000/0x5000)=nil, 0x5000) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="4000000010000305000020000000000000000000", @ANYRES32=0x0, @ANYBLOB="115a0100000000002000128008000100687372001400028008000200", @ANYRES32=r5, @ANYBLOB="08000100", @ANYRES32=r7, @ANYBLOB="6a5b6a91c4aaa05bbbf1b4af1335dbf2d5c43918f0d455edf30c84b1d524e0047a320f44bcff9b29ea7b28b91e7cd37378e14dec4986108e273d82174aef97ee8ed9cb0ee46487952b46999764f97eb653c2e76cdb3d73c9135be2186a026afd8da6d97a06608ec016c4bddc38a952b2dd1b5b3cce757a1a023b187c96a8bfbaebb9e806d2ff8b051c3c8260ed6a139cfb74433fc8b1042f1081a90a8396930a1fe5b36844e82dba140edcb575eacfe9f114e3888e9e08579a06ff9d990688a7257d22f6a6c73cabb137adbce84683f6f167c25c"], 0x40}}, 0x44) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @void, {@ipv4={0x88fb, @gre={{0x5, 0x4, 0x2, 0x1, 0x58, 0x66, 0x0, 0x8, 0x2f, 0x0, @multicast2, @initdev={0xac, 0x1e, 0x81, 0x0}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x1, 0x0, 0x0, 0x1}, {0x1}, {0x8, 0x88be, 0x3, {{0x5, 0x1, 0x6, 0x2, 0x1, 0x1, 0x6, 0x4}, 0x1, {0x500c}}}, {0x8, 0x22eb, 0x4, {{0xe, 0x2, 0xf8, 0x3, 0x1, 0x2, 0x4, 0xf9}, 0x2, {0x1, 0x9, 0x0, 0x3, 0x1, 0x1, 0x1, 0x1}}}, {0x8, 0x6558, 0x3}}}}}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000003c0)={'ip6gre0\x00', 0x0}) 2.163820762s ago: executing program 3 (id=2682): syz_open_dev$sndmidi(0x0, 0x2, 0x141101) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f0000000000000000850000006d00000085"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030041000b05d25a806c8c6394f90324fc60100000000a200200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @loopback}, 0xc) setsockopt$inet_msfilter(r4, 0x0, 0x29, &(0x7f0000000240)=ANY=[@ANYBLOB="e0000002ac1414aa0100000002"], 0x18) syz_emit_ethernet(0x36, &(0x7f0000001800)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaaaa080045000028006400000402907800000000e000000211009078e00000020000000200000000"], 0x0) ioctl$KVM_REINJECT_CONTROL(0xffffffffffffffff, 0xae71, &(0x7f0000000000)={0xc9}) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) userfaultfd(0x800) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x80) r6 = syz_open_dev$dri(&(0x7f0000000300), 0x40100001, 0x189002) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r6, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) 2.149561354s ago: executing program 2 (id=2683): socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="280000bd7000ffdb54ebe31d8b00000000000000", @ANYRES32=0x0, @ANYBLOB="822e00000200000008000a00", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x240008c4}, 0x40054) copy_file_range(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x7, 0x0) r0 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r0, &(0x7f0000000000)=[{&(0x7f00000001c0)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac71036000000ffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) sendmsg$TCPDIAG_GETSOCK(r0, &(0x7f0000000380)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000300)={0x0}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4000) r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000340)={0x2, 0x4e20, @loopback}, 0x57) connect$inet6(r1, &(0x7f00000000c0)={0xa, 0x4e23, 0x8, @local, 0x2}, 0x1c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0xabb7}, 0x1c) socket$can_raw(0x1d, 0x3, 0x1) add_key$keyring(0x0, &(0x7f0000000280)={'syz', 0x0}, 0x0, 0x0, 0xfffffffffffffff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000080)={0x80000000005, 0x100000001000087}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000000c0)=0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) r2 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) fcntl$notify(r2, 0x402, 0x24) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000004c00)=""/102392, 0x18ff8) r4 = userfaultfd(0x80001) ioctl$UFFDIO_API(r4, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x27c}) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x400000, 0x3, &(0x7f0000000000/0x400000)=nil) mremap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x400000, 0x3, &(0x7f0000c00000/0x400000)=nil) syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) r5 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000080)={0xc0, 0x12, 0x905, 0x70bd29, 0x25dfdbfd, {0xa, 0x9, 0x4, 0xfe, {0x4e22, 0x4e24, [0xfffffffb, 0x924, 0x26, 0x6], [0xfffffffd, 0x5, 0x1, 0x2], 0x0, [0x10000, 0x1000]}, 0xd2, 0xffffffff}, [@INET_DIAG_REQ_BYTECODE={0x71, 0x1, "006cae4f89d499a3616b848a0b3f9a23741454aed59b8af6f89e6a6066005654f4034787f26a000000ffcdb376405072b9d28ea842fb58c3219f095d3ac77216d25521e56373878b4b90a80668110511a0b21609f0b3e8b57d02f2cc8a05c4b6e9e2b29561235c21e0f14b9c0d"}]}, 0xc0}, 0x1, 0x0, 0x0, 0x2000051}, 0x800) 2.008650968s ago: executing program 5 (id=2684): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x200404c1}, 0x8000) write$cgroup_pid(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000500), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x81, &(0x7f0000000480)=0x9, 0x4) r4 = pidfd_getfd(0xffffffffffffffff, r1, 0x0) connect$inet6(r4, &(0x7f0000000280)={0xa, 0x4e23, 0x6, @private2, 0x5}, 0x1c) ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x2) r5 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x101001, 0x0) connect$inet6(r4, &(0x7f0000000340)={0xa, 0x4e23, 0x4, @local, 0x200}, 0x1c) ioctl$KVM_SET_DEVICE_ATTR_vm(r5, 0x4018aee1, &(0x7f0000000240)=@attr_other={0x0, 0x8, 0x3, 0x0}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r6 = openat$iommufd(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$IOMMU_IOAS_IOVA_RANGES(r6, 0x3b84, &(0x7f00000000c0)={0x20, 0x0, 0x0, 0x0, 0x0}) sendmmsg$inet(r5, &(0x7f00000026c0)=[{{&(0x7f0000000300)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000640)=[{&(0x7f0000000540)="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", 0xfc}], 0x1, &(0x7f0000002800)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="e0000002ffffffff000000001c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="e0000001ac14141000000000"], 0x258}}, {{&(0x7f0000000b00)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000ec0)=[{&(0x7f0000000b40)="ebc9dd61dc27045c85b0ad7db5d7ceff9f692d9cc16bcd8319b9ef75f24cc28f7fc92eaa98a79e450b4f3665169268af70fea337a03e25acd1df6f026e6914201b4619e3fc53e76497aa8580e317d9f735ff8d08d99008f1ac542a32cc3f0ea01257ef45f7a87f75e42842519271f71077da41c74a8180e93d159527ac1b2d78bf9217792790f20708a9e59c2944825155b30c9480cea4320cbc40835848c01b610b9865bf25bc8e1b70eae588c66131e05ad1", 0xb3}, {&(0x7f0000000c00)="280c74ce1ecf73b28cd6aa1be5221c5c5882260aeeee50d981b40b1784f94aadd32e4f37422a6ba28ab9619a34e2749ff63fab3041d847e28f3702f3e874e3cabf5ddca88888442a9d1d5e8450df689bcbd0e1748a0791a09d30e68a0cfaa4791b1ff4ea0e8a28a2147b2d4570481ba8270201eb18ebd2795f3b45e2c4413cdc412909216207c9fab5f66b8049aaf41edab108a9ccab05ca285c48eeaba639d2cd4259340a0d66e67f59f075c245a863d3cafe4a8316a0c34db41398a8514e1e759a5fe7e0f0599e2edb5dec6ef2cd0e98f165a22b7a74cb250fa6cf4c328f43cc5fbe383bc0", 0xe6}, {&(0x7f0000000d00)="a8f3531f575329", 0x7}, {&(0x7f0000000d40)="ff936c8c5c1e87b3c5ac8aa6f2b8759fd2a87f", 0x13}, {&(0x7f0000000d80)="9d954fefa2c613459fe350e3f24a1b15499e4d8d83ffdf3cd15cb5136b83e4122c789891b7a478aa8f73fa008bdf431cd809cae46e899a8a46300747ab12dba355bbed5ff2e7b03a03377dee9e49d5969f211bbc18ed0df8157dae16b67ef26a9312ad65efdb82b1c5c649f7314e09c5bd9cf87879f420dce0c226c2a13ae89cad5ff720f3b002e2c8a75ef34a8c24dfab1c638bea158fb5", 0x98}, {&(0x7f0000000e40)="e776b4bd7d1425254f87ce3e2e53f306b2c0e435e51fc31e1284b176e6ec83edc076626253cc7d414340f9ed6481ea964df683c14e9fda00240e31f3ba6ad0d5a599e488eb4055c0b3488676a7630944b91ed772b43ca8805bf8e75b1b802a3e3260ab9bfd30dea20aa33325679d9de2233af02f4a1077d6", 0x78}], 0x6, &(0x7f0000000f40)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_ttl={{0x14, 0x0, 0x2, 0x2}}], 0x30}}, {{&(0x7f0000000f80)={0x2, 0x4e24, @remote}, 0x10, &(0x7f00000020c0)=[{&(0x7f0000000fc0)="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", 0x1000}, {&(0x7f0000001fc0)='@', 0x1}, {&(0x7f0000002000)="831672ea35120460a57d746e69abf430638a918a7b1ef3e2ae36dc5d0bc0ef4d4a94b8df9bb5681b83074a148c1c776f77ffd0377c2262c3677d17ed63336cebbc71825ecc1e2e2d725b5497ed7a4e9fdb4a0bd01173d832920519bf9faef84f50377df036470fdd969eb3b728293089cf72364f748479ecf9469cab4dc534ec6d7245dff48b8ef97e6f64879a33830e0ed47cd7d206cf3eb8ef6d480c3bed2225ca01440909b19dc2499d4d", 0xac}], 0x3, &(0x7f0000002100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x80}}, @ip_ttl={{0x14, 0x0, 0x2, 0xde}}], 0x30}}, {{&(0x7f0000002140)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000002280)=[{&(0x7f0000002180)="f4f1f3396873ab1ad8b56219d7cccfd27c7fa5a4c2d97964157895a592935ba684", 0x21}, {&(0x7f00000021c0)="74679982070a5bbda72ee3bfb948d68bbed2210b2dc96e295f9ca8d7496d60ce079ae1b9a396e851d4df6ce1f5ffe850aa1a80835c826767051fdc510b0824b2fb7b61db018dc4bceb2140a5f5592df2237498a71210c455babc79d90d7c41446578f0c2fa766b9bf18c61ff4ab4e5babd78a72bc3637cc9ca2ecaa94c23fdff374d3bc36ec3d8fe4f5ac30487ba207e9ed0edc2397e7efc96ecc35d78ea78a4d01acc06d541e618eb7454206d01d1aa6d5f096b705b5afa463eb0", 0xbb}], 0x2, &(0x7f00000022c0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x1c}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x48}}, {{&(0x7f0000002340)={0x2, 0x4e23, @remote}, 0x10, &(0x7f00000025c0)=[{&(0x7f0000002380)="96b653eb32bb443de814d829dbb4f5736445348e74bf9ec77232b07457774c9569fde9ca14846dbd99a8a5c43b03f6d79ed0fbf5e00255e91990235d1b57e0c80f04972082dc6db123d67d69830a453c77778571a9", 0x55}, {&(0x7f0000002400)="eea4ed3035282ad62768ef3dfa5cb21f7046cc9df147af03a8393178ed56dd735ddae03d6bdec1f363b8bf539527373fefce7e3ab3fab6b3ce24e5f25e00fc256caa55e2f8ebc117c83896790df734a866e432c4d02a4814c46ab332e6c3a935cb7d26c7ef38386b01035aaef6ef015a620af28beb46cc3cbe951aa6b08cf2e8fde82c520007eb6a0d0d01bac092d7eb7d85c0b35e1df8", 0x97}, {&(0x7f00000024c0)="2cf2eefd29c361d004cdfe18c99e23841627134c1ce997292653c1ec030af0c93962f906371c0fefe316e1cb223d7fa03257b33fc0e3d17ce44e37a1149a7baa222b07557d1551eee0a61aaaa57e0089f240815af1e03206795b9a706bbdf80f9e67e8fc38202345cb6f5cbc73b9e891503bd4c3511467c1206dd6d9ea03508b7d67d3a0ee467b16cb3381acbb179c2b403cd4abfe0b571d942914f79c93156ee688c2be87d4e8c717eb9b8102519487c87bdab0d5dc924d9f55ca4996db984b9419e175fd5385b7ef3be88326c3759f6b41f7a3aecb7671727ff5e15bac03a9156a734ba9bdd43c186fcc30ab452c819090114c7d7e", 0xf6}], 0x3, &(0x7f0000002600)=ANY=[@ANYBLOB="1c000000000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac1e0001ac1414aa000000001100000000000000000000000100000004000000000000005400000000000000000000000700000044100bd000000002000000810000000a440000000000000008fffff9e0000001000000f2ffffffff000000047f0000010000000fe000000100000800ac1414aa0000ffff00000000110000000000000000000000010000cd97895e000000000014000000000000000000000001000000ff03000000000000"], 0xc0}}], 0x5, 0x408c2) close(r3) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000100)='hugetlbfs\x00', 0x16, 0x0) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="a00000002100390d000000000000000000000000000000000000000000000000ffffffff000000000000000000000000000000000003000002000000ff000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000050001100ac1414aa000000000000000000000000ffffffff01000000000000000000ffffffff000000000000000000000000ac1414000000000000000000000000000000007700000003110002000000ac61876ce206231be9dc8c4c2691ae22ff933b48d7a84e131c486dcf5392dcdeb8"], 0xa0}}, 0x0) mount$tmpfs(0x0, &(0x7f0000000180)='./file0\x00', 0x0, 0x13e0023, 0x0) 1.896579091s ago: executing program 1 (id=2685): ioctl$BTRFS_IOC_RM_DEV(0xffffffffffffffff, 0x5000940b, &(0x7f0000001f80)={{}, "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"}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa0086dd600a96460014060000000000000000000000000000000000fe8000000000000000000000000000aa00014e", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB='Q'], 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="1b00000000100000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000003000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000010000008500000085000000b70000000000006307009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) socketpair$unix(0x1, 0x5, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0x8000}, {0x6}]}, 0x10) mknodat(0xffffffffffffff9c, &(0x7f00000000c0)='./file2\x00', 0x81c0, 0x0) execveat(0xffffffffffffff9c, &(0x7f0000000280)='./file2\x00', 0x0, 0x0, 0x0) symlink(0x0, &(0x7f0000000000)='./file0\x00') r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = syz_clone(0x11, 0x0, 0x0, 0x0, 0x0, 0x0) ptrace(0x10, r6) rt_tgsigqueueinfo(r6, r6, 0x8, &(0x7f0000000140)={0x3d, 0x5, 0xfffffff9}) tkill(r6, 0x2e) ptrace$peeksig(0x4209, r6, 0xffffffffffffffff, &(0x7f00000004c0)) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000740)=ANY=[@ANYBLOB="b800000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000f0f91fdbaae6fdc047d3225af812da555a83aaf4a6d08d0cd314ddf353acf298d968ee5c2cd4ebb904b7df4bcb0a4bc3f2bbfc13d57e27f0943664f217b1fd6c64e42cf62cacd3ace61c677a787d7506af51590562967a928b29ea5634b69c95c5af9f39ffbf41f94d945d53a60504a88f5160ec771ba3e423cf22e53fda0b20da41ef0500aa65eeb2f5a3d0200d434c563853597bcccc2ea3672d9adb0762fd6e1a85f7aaff456b4b61bb2aba8a0633476ff3388616574535d1062a8ce7eb0bab9123fc", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000000000000000700000000000000000a0000000000000000000000804000000000000000000800"/112], 0xb8}}, 0x0) 961.829506ms ago: executing program 2 (id=2686): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000010000000800000008"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='netlink_extack\x00', r0}, 0x10) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) r1 = syz_create_resource$binfmt(&(0x7f0000000040)='./file1\x00') r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000040), 0x41, 0x0) execveat$binfmt(0xffffffffffffffff, r1, 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000820004000000000000000c00850000000f00000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) r4 = getpid() sched_setscheduler(r4, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file1\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) setgroups(0x0, 0x0) r7 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES16=r2, @ANYRES64=r2, @ANYRES8=r6], 0x38}, 0x1, 0x0, 0x0, 0x20044}, 0x810) sendmsg$RDMA_NLDEV_CMD_DELLINK(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000041401002dbd7000fedbdf250800010000000000ae522d47bb952b061a64cf56198e486268b8fbe9d48c6274045e0477c4616f88b481a26b9439de73c14e33930487151e1890b1bb68d070140c6db16aedda4ba476868a35964d7c6bbbb107a50e5d89c95e7837d0e06afb28b1704bda6bb114461b2b13809167312eabd8aa98d9c0cda02fdaac0e88b922218954"], 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) modify_ldt$write(0x1, &(0x7f0000000040), 0x10) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x161281, 0x0) ioctl$TCSETS(r8, 0x40045431, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "0040001e1d113c812e5d6000"}) syz_open_pts(r8, 0x0) 831.947751ms ago: executing program 5 (id=2687): r0 = syz_open_pts(0xffffffffffffffff, 0x400840) ioctl$TCGETS2(r0, 0x802c542a, &(0x7f0000000000)) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000340)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x5191}, [@map_fd={0x18, 0x5}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0xb, 0x0, 0x0, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x84}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @jmp={0x5, 0x0, 0x6, 0x5, 0x3, 0x30, 0xfffffffffffffff0}, @initr0={0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x5}, @exit, @generic={0x2, 0xe, 0x9, 0xc9}]}, &(0x7f0000000100)='syzkaller\x00', 0x4, 0xd8, &(0x7f0000000140)=""/216, 0x41100, 0x2, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f0000000240)={0x6, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0xb, 0xc, 0xfffffb1e}, 0x10, 0x7295, 0xffffffffffffffff, 0x2, &(0x7f00000002c0)=[0xffffffffffffffff], &(0x7f0000000300)=[{0x4, 0x1, 0x10, 0x4}, {0x0, 0x4, 0xc, 0xc}], 0x10, 0x800}, 0x94) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000400)=@generic={&(0x7f0000000040)='./file0\x00', r1}, 0x18) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000600)={&(0x7f0000000440)="febf571c1e122b6f31e029b57399b2628567ae30b02ba9b609cd06ff03762ae08e68c476569b157e64893de1c071db945263908d1916a73ca71626afcd7b25ebd930c3996c6e56226d071dae56641aa728c88d8486af1c4b8444836d1310c4e52b6f283b", &(0x7f00000004c0)=""/105, &(0x7f0000000540)="865455ff64cd1f525102ec861ea5080f2a71b208371a974edf9a7931d214167a2306cc09ed30376ac9acc442ecdb86542c137275cdd0fcf035bfb5396df10a1768cca3e5f013fd02a6b3f799be952fd0e4b7bc9a3f34", &(0x7f00000005c0)="e42423590374ccd4a88cf7460062308a847c4baabe2425155fcaff6cc2061a0f2db7", 0x0, r1}, 0x38) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000680)=@generic={&(0x7f0000000640)='./file0\x00', r1}, 0x18) ioctl$TCSETA(r0, 0x5406, &(0x7f00000006c0)={0x7, 0x100, 0x2, 0x8, 0x6, "6a7837e36fff0fb2"}) r2 = ioctl$TIOCGPTPEER(0xffffffffffffffff, 0x5441, 0x1) ioctl$KDSKBENT(r2, 0x4b47, &(0x7f0000000700)={0x5d, 0xe2, 0x5}) r3 = openat$selinux_load(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000000780)={'wg0\x00', 0x0}) r5 = syz_open_dev$mouse(&(0x7f00000007c0), 0x2, 0x2) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f0000000940)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000900)={&(0x7f0000000840)={0xb0, 0x1403, 0x8, 0x70bd28, 0x25dfdbfc, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'virt_wifi0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'veth0_vlan\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bond_slave_0\x00'}}]}, 0xb0}, 0x1, 0x0, 0x0, 0x10}, 0x20000011) r6 = syz_open_dev$vcsn(&(0x7f0000000980), 0xfffffffffffffffa, 0x50400) syz_usb_ep_write(0xffffffffffffffff, 0xff, 0x15, &(0x7f00000009c0)="43928a607027ce071e2d1e52fee9c745139112cd71") ioctl$AUTOFS_DEV_IOCTL_ISMOUNTPOINT(r5, 0xc018937e, &(0x7f0000000a00)={{0x1, 0x1, 0x18, r6, {0x4}}, './file0\x00'}) sendfile(r7, r3, &(0x7f0000000a40)=0x7, 0x2) r8 = accept4$tipc(r6, 0x0, &(0x7f0000000a80), 0x80800) bind$tipc(r8, &(0x7f0000000ac0)=@name={0x1e, 0x2, 0x1, {{0x0, 0x2}}}, 0x10) r9 = openat$btrfs_control(0xffffffffffffff9c, &(0x7f0000000b00), 0x20000, 0x0) recvmmsg$unix(r9, &(0x7f0000004ec0)=[{{&(0x7f0000000b40)=@abs, 0x6e, &(0x7f0000001c80)=[{&(0x7f0000000bc0)=""/4096, 0x1000}, {&(0x7f0000001bc0)=""/76, 0x4c}, {&(0x7f0000001c40)=""/10, 0xa}], 0x3, &(0x7f0000001cc0)=[@rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x40}}, {{0x0, 0x0, &(0x7f00000020c0)=[{&(0x7f0000001d00)=""/60, 0x3c}, {&(0x7f0000001d40)=""/82, 0x52}, {&(0x7f0000001dc0)=""/217, 0xd9}, {&(0x7f0000001ec0)=""/73, 0x49}, {&(0x7f0000001f40)=""/233, 0xe9}, {&(0x7f0000002040)=""/114, 0x72}], 0x6, &(0x7f0000002140)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000002200)=@abs, 0x6e, &(0x7f0000003280)=[{&(0x7f0000002280)=""/4096, 0x1000}], 0x1, &(0x7f00000032c0)=[@cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x110}}, {{&(0x7f0000003400)=@abs, 0x6e, &(0x7f0000003580)=[{&(0x7f0000003480)=""/255, 0xff}], 0x1}}, {{0x0, 0x0, &(0x7f0000003680)=[{&(0x7f00000035c0)=""/127, 0x7f}, {&(0x7f0000003640)=""/59, 0x3b}], 0x2, &(0x7f00000036c0)=[@cred={{0x1c}}], 0x20}}, {{&(0x7f0000003700)=@abs, 0x6e, &(0x7f00000048c0)=[{&(0x7f0000003780)=""/8, 0x8}, {&(0x7f00000037c0)=""/4096, 0x1000}, {&(0x7f00000047c0)=""/214, 0xd6}], 0x3, &(0x7f0000004900)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x40}}, {{&(0x7f0000004940)=@abs, 0x6e, &(0x7f0000004a00)=[{&(0x7f00000049c0)=""/47, 0x2f}], 0x1}}, {{&(0x7f0000004a40), 0x6e, &(0x7f0000004d80)=[{&(0x7f0000004ac0)=""/19, 0x13}, {&(0x7f0000004b00)=""/79, 0x4f}, {&(0x7f0000004b80)=""/165, 0xa5}, {&(0x7f0000004c40)=""/42, 0x2a}, {&(0x7f0000004c80)=""/66, 0x42}, {&(0x7f0000004d00)=""/93, 0x5d}], 0x6, &(0x7f0000004e00)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xb8}}], 0x8, 0x10000, &(0x7f00000050c0)) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, &(0x7f0000005100)='{-', &(0x7f0000005140)='/dev/vcs#\x00', 0x0) r13 = openat$selinux_checkreqprot(0xffffffffffffff9c, &(0x7f0000005180), 0x2082, 0x0) waitid$P_PIDFD(0x3, r13, &(0x7f00000051c0), 0x1000000, &(0x7f0000005240)) bpf$OBJ_GET_MAP(0x7, &(0x7f0000005340)=@o_path={&(0x7f0000005300)='./file0\x00', 0x0, 0x18, r12}, 0x18) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1000001, 0x10, r9, 0x4b0e3000) fcntl$notify(r2, 0x402, 0x10) r14 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000053c0)=@generic={&(0x7f0000005380)='./file0\x00'}, 0x18) r15 = bpf$MAP_CREATE(0x0, &(0x7f0000005400)=@bloom_filter={0x1e, 0xbca1, 0x5, 0xb4000000, 0x8200, 0x1, 0x3ff, '\x00', r4, r10, 0x1, 0x5, 0x1, 0x3, @value=r11}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000005480)={r14, r15}, 0xc) 0s ago: executing program 1 (id=2688): ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, &(0x7f0000000000)={0xfe1, 0xffffffffffffffff, 'id0\x00'}) ioctl$PPPOEIOCDFWD(r0, 0xb101, 0x0) write$yama_ptrace_scope(r0, &(0x7f0000000080)='0\x00', 0x2) ioctl$INCFS_IOC_FILL_BLOCKS(r0, 0x80106720, &(0x7f0000003480)={0x7, &(0x7f0000003380)=[{0x21, 0x1000, &(0x7f00000000c0)="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", 0x1, 0x1}, {0x5, 0x4d, &(0x7f00000010c0)="b2d86b7082c9af8fbb3f02ac1e31f8c27d1f4599678a6afc10063531ce3c9cc9ca94d1fec13e78d6592a43faafae731c9d059f25d08492d502899ce0b0b60da6e423271d61d56957255412aae6", 0x0, 0x1}, {0xd, 0xf9, &(0x7f0000001140)="b12913a34001f5ae8398042ef41d81765aac0a34c2c2238c9eeaae641cd97194ec3514d2428b990973ae59324a9abf8985ae3674b7a7df9dcd2a307a397cffdf4df9ef7d9788b8f5b9f9b32f98ddca3db3b937c04f320892769ae9097d38a518bd48c704bcfcb4d3cca5187538a874e49a4541d7dc513e1576b5ca9a91267ce56c880d66afea0d36848a76e8a2fe88d674616c5abc2bd7283e19d7a815b48ca85ce3978bdbaaf121563e6260e67beb5c55f1e96a20dc0546873244c6be71099b49115c4321fb0ffa466575c441d025b2195c4a3068bbee555bb0dceb6870066b5a793f67f8aab00a66457f95d7945a734bb7524cb76a1102f3", 0x0, 0x1}, {0x4, 0x1000, &(0x7f0000001240)="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", 0x1}, {0x4, 0x1000, &(0x7f0000002240)="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", 0x1, 0x1}, {0x2, 0xcb, &(0x7f0000003240)="bcdbeb7afe2ff456fa2c6c72707dee213d4a178791168418d7531d273244e385c304dfcf71424ec30b716e2027a33ab2f7ab3d1cc401e0093f07fcd5cebb8f72e5d7defed0fffbc07b14f5ee60d6b6c5bb51130a14cd52774467e842f7b83ac1a964ed5492fe3e8bc3250fce27462f91818ce445037d346a06150a59f63c412f97d6a155535c10bb94475d5da7574785cf449298abda0df3ef8f10d995573346e4a411b0d39c86aea5cefc6cd5a182300e90d1050140e3c408cd342d60eaedf762d54700a576b69cc72006", 0x1, 0x1}, {0x5, 0x2f, &(0x7f0000003340)="da7075f6abec0bab50dee63d0c865ae9184377a4924f93ae044f94f12cefc8cb85501f346620e72af33ef34288048a", 0x1, 0x1}]}) r1 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000034c0)={r0, 0x0, 0x25, 0x8, @void}, 0x10) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000003500)={0x0, 0x0}, &(0x7f0000003540)=0xc) quotactl_fd$Q_GETQUOTA(r1, 0xffffffff80000700, r2, &(0x7f0000003580)) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000003600)={0x0, 0xe, 0x1}, &(0x7f0000003640)=0x8) getsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, &(0x7f0000003680)={0x1, 0x6, 0xa, 0x1, 0xa, 0x10, 0xfffffff4, 0x3, r4}, &(0x7f00000036c0)=0x20) sendmsg$nl_xfrm(r0, &(0x7f00000039c0)={&(0x7f0000003700)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000003980)={&(0x7f0000003740)=@flushsa={0x22c, 0x1c, 0x4, 0x70bd28, 0x25dfdbfe, {0xff}, [@encap={0x1c, 0x4, {0x0, 0x4e20, 0x4e20, @in=@private=0xa010102}}, @coaddr={0x14, 0xe, @in6=@mcast1}, @algo_auth_trunc={0xbc, 0x14, {{'hmac(sha256)\x00'}, 0x380, 0x180, "5692a39070e6ee206e2edfd8d21db0c59dc4e390b5c754798b47f56909b1dad95d110b56b8a11a69c147e3fd1eaf5a43dcc908c2b6293246adcb73a0d4d1bd59af85e8a0a5447256a6cb2bd8407cee7e6bf8646c1e9677177ae422b48a75ffceb2147cf60390dc8375af048540ea55a5"}}, @algo_comp={0xea, 0x3, {{'lzjh\x00'}, 0x510, "f047eb09d841e1b10f062d2da61ab8d4905d246100cf148ded9014254663109ed0e5d6ddfb1fc65dedc48643551cc023df35175d03a1f70f4ccc0216dfe2d5e093e666b43a3965612a237ec0b781bcd515466f7b175cf50710ed7067b5d98e9e6f6b13aaf20696988a147e2e3469937cb61ecbb60d308852c0adb6e135acad15b6f3ec1184e5b88682029dee699763701cd44c6313df62a88a15248e106611691f2f"}}, @replay_esn_val={0x40, 0x17, {0x9, 0x70bd25, 0x70bd26, 0x70bd2c, 0x70bd29, 0x9, [0x8, 0xffffffff, 0x9, 0x1ff, 0xc, 0x0, 0x80, 0x81, 0x10]}}]}, 0x22c}, 0x1, 0x0, 0x0, 0x40102}, 0x800) ioctl$KVM_KVMCLOCK_CTRL(r0, 0xaead) r5 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r5, 0x81f8943c, &(0x7f0000003a00)) fsetxattr$trusted_overlay_origin(r3, &(0x7f0000003c00), &(0x7f0000003c40), 0x2, 0x3) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f0000003c80)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r0, 0x3b87, &(0x7f0000003cc0)={0x18, 0x1, 0x1, 0x0, r6, 0x18000000000000}) ioctl$FIOCLEX(r5, 0x5451) r7 = syz_open_dev$tty20(0xc, 0x4, 0x1) ioctl$sock_SIOCSIFBR(r3, 0x8941, &(0x7f0000003d80)=@get={0x1, &(0x7f0000003d00)=""/96, 0x7}) ioctl$HIDIOCGRAWINFO(r0, 0x80084803, &(0x7f0000003dc0)=""/112) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000003e80), r0) sendmsg$DEVLINK_CMD_SB_OCC_MAX_CLEAR(r0, &(0x7f0000004000)={&(0x7f0000003e40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000003fc0)={&(0x7f0000003ec0)={0xd0, r8, 0x200, 0x70bd29, 0x25dfdbff, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xfffffff9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x10}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x2}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000800) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000004040)={'vlan0\x00', 0x400}) sendmsg$AUDIT_TTY_GET(r0, &(0x7f0000004140)={&(0x7f0000004080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000004100)={&(0x7f00000040c0)={0x10, 0x3f8, 0x4, 0x70bd25, 0x25dfdbfd, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x24004005}, 0x4000040) ioctl$IOMMU_TEST_OP_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000004180)={0x48, 0x7, r0, 0x0, 0x1, 0x0, 0xe299, 0x9}) ioctl$IOMMU_TEST_OP_DESTROY_ACCESS_PAGES(r0, 0x3ba0, &(0x7f0000004200)={0x48, 0x6, r6, 0x0, r9}) ioctl$TCSETS(r7, 0x5402, &(0x7f0000004280)={0x1b, 0x5, 0x0, 0x80000000, 0x11, "bc6ee2ad592daa8b2f617fc5f189ee12cb95c2"}) ioctl$TCXONC(r0, 0x540a, 0x3) ioctl$UI_SET_EVBIT(r0, 0x40045564, 0x12) kernel console output (not intermixed with test programs): packet: 32 [ 825.125134][T14766] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 825.162784][T13067] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 825.186687][T13067] usb 4-1: config 0 has no interface number 0 [ 825.210457][T13067] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 825.235424][T13067] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.260906][T13067] usb 4-1: Product: syz [ 825.277191][T13067] usb 4-1: Manufacturer: syz [ 825.572330][ T30] audit: type=1400 audit(1757669223.146:993): avc: denied { write } for pid=14773 comm="syz.0.2174" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 826.131567][T13067] usb 4-1: SerialNumber: syz [ 826.232959][T13067] usb 4-1: config 0 descriptor?? [ 827.039649][T13067] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 827.096691][T13067] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 827.351566][ T30] audit: type=1400 audit(1757669224.802:994): avc: denied { name_bind } for pid=14794 comm="syz.5.2177" path="socket:[50046]" dev="sockfs" ino=50046 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 827.463779][T14796] netlink: 'syz.3.2170': attribute type 8 has an invalid length. [ 827.901877][T13067] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 828.328173][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 828.344625][ T30] audit: type=1400 audit(1757669225.485:995): avc: denied { block_suspend } for pid=14794 comm="syz.5.2177" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 828.388210][T13067] usb 4-1: USB disconnect, device number 51 [ 828.507372][T14804] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2178'. [ 828.518045][T13067] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 828.558457][T14804] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 828.571732][T13067] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 828.599028][T13067] quatech2 4-1:0.51: device disconnected [ 828.849570][ T5992] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 829.042411][ T5992] usb 6-1: Using ep0 maxpacket: 8 [ 829.055746][ T5992] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 829.190007][ T5992] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 829.208205][ T5992] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 829.697156][ T5992] usb 6-1: Product: syz [ 829.710281][ T5992] usb 6-1: Manufacturer: syz [ 829.723859][ T5992] usb 6-1: SerialNumber: syz [ 829.734228][ T30] audit: type=1400 audit(1757669227.038:996): avc: denied { lock } for pid=14827 comm="syz.2.2184" path="socket:[49029]" dev="sockfs" ino=49029 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 830.230893][ T5992] usb 6-1: Handspring Visor / Palm OS: No valid connect info available [ 830.239718][T14841] loop2: detected capacity change from 0 to 7 [ 830.260705][ T5992] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 830.282128][T14841] Dev loop2: unable to read RDB block 7 [ 830.285427][T14843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2187'. [ 830.302867][ T5992] usb 6-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 830.305895][T14843] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2187'. [ 830.310888][T14841] loop2: unable to read partition table [ 830.337730][ T5992] usb 6-1: Handspring Visor / Palm OS: Number of ports: 2 [ 830.337944][T14841] loop2: partition table beyond EOD, truncated [ 830.390630][T14841] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 830.461215][ T5992] usb 6-1: palm_os_3_probe - error -71 getting bytes available request [ 830.537667][ T5992] visor 6-1:1.0: Handspring Visor / Palm OS converter detected [ 830.751470][ T5992] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 830.783726][ T5992] usb 6-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 830.794578][ T5992] usb 6-1: USB disconnect, device number 9 [ 831.343383][ T5992] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 832.185072][ T5992] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 832.195041][ T5992] visor 6-1:1.0: device disconnected [ 832.711893][T14870] libceph: resolve 'c9' (ret=-3): failed [ 832.954856][ T5912] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 833.147622][ T5912] usb 6-1: Using ep0 maxpacket: 32 [ 833.181533][ T5912] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 833.189811][ T5912] usb 6-1: config 0 has no interface number 0 [ 833.201469][ T5912] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 833.228413][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 833.236695][ T5912] usb 6-1: Product: syz [ 833.241755][ T5912] usb 6-1: Manufacturer: syz [ 833.257779][ T5912] usb 6-1: SerialNumber: syz [ 833.268621][ T5912] usb 6-1: config 0 descriptor?? [ 833.292487][ T5912] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 833.565432][ T5912] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 833.600599][ T5912] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 833.656517][T14878] netlink: 755 bytes leftover after parsing attributes in process `syz.3.2192'. [ 833.996102][T14885] netlink: 'syz.5.2191': attribute type 8 has an invalid length. [ 835.087525][ T5912] usb 3-1: new high-speed USB device number 64 using dummy_hcd [ 835.111285][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 835.130771][T13996] usb 6-1: USB disconnect, device number 10 [ 835.157937][T13996] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 835.265981][T13996] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 835.307646][T13996] quatech2 6-1:0.51: device disconnected [ 835.364278][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 835.394928][ T5912] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 835.426429][ T5912] usb 3-1: config 0 has no interface number 0 [ 835.455562][ T5912] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 835.486350][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 835.516450][ T5912] usb 3-1: Product: syz [ 835.530190][ T5912] usb 3-1: Manufacturer: syz [ 835.550175][ T5912] usb 3-1: SerialNumber: syz [ 835.569945][ T5912] usb 3-1: config 0 descriptor?? [ 835.594498][ T5912] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 835.932045][T14907] ntfs3(loop5): try to read out of volume at offset 0x0 [ 836.061083][ T5912] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 836.180961][ T5912] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 836.708410][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 836.717609][ T5912] usb 3-1: USB disconnect, device number 64 [ 836.733313][ T5912] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 836.766458][ T5912] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 836.797700][ T5912] quatech2 3-1:0.51: device disconnected [ 837.164309][T14922] blktrace: Concurrent blktraces are not allowed on loop0 [ 837.605332][ T5992] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 837.776744][ T5992] usb 2-1: Using ep0 maxpacket: 8 [ 837.957052][ T5992] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 837.989636][ T5992] usb 2-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 838.113954][ T5992] usb 2-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 838.155490][ T5992] usb 2-1: Product: syz [ 838.159713][ T5992] usb 2-1: Manufacturer: syz [ 838.166130][ T5992] usb 2-1: SerialNumber: syz [ 838.418129][ T5992] usb 2-1: Handspring Visor / Palm OS: No valid connect info available [ 838.570035][ T5992] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 838.598014][ T5992] usb 2-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 838.624379][ T5992] usb 2-1: Handspring Visor / Palm OS: Number of ports: 2 [ 839.086270][ T5992] usb 2-1: palm_os_3_probe - error -71 getting bytes available request [ 839.112624][ T5992] visor 2-1:1.0: Handspring Visor / Palm OS converter detected [ 839.133356][ T5992] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 839.143905][ T5992] usb 2-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 839.535812][ T5992] usb 2-1: USB disconnect, device number 53 [ 839.622271][ T5992] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 839.724418][ T5992] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 839.786708][ T30] audit: type=1326 audit(1757669236.410:997): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f278eba9 code=0x7ffc0000 [ 839.965123][T14950] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 840.494890][ T5992] visor 2-1:1.0: device disconnected [ 840.572084][ T30] audit: type=1326 audit(1757669236.410:998): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=79 compat=0 ip=0x7f06f278eba9 code=0x7ffc0000 [ 840.715811][ T30] audit: type=1326 audit(1757669236.410:999): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f278eba9 code=0x7ffc0000 [ 842.381105][ T30] audit: type=1326 audit(1757669236.410:1000): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f06f278eba9 code=0x7ffc0000 [ 842.857878][ T30] audit: type=1326 audit(1757669236.410:1001): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f278eba9 code=0x7ffc0000 [ 843.105151][ T30] audit: type=1326 audit(1757669236.410:1002): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f06f278d510 code=0x7ffc0000 [ 843.188816][ T30] audit: type=1326 audit(1757669236.410:1003): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f278eba9 code=0x7ffc0000 [ 843.267507][ T30] audit: type=1326 audit(1757669236.410:1004): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f278eba9 code=0x7ffc0000 [ 843.833768][ T30] audit: type=1326 audit(1757669236.410:1005): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f06f278eba9 code=0x7ffc0000 [ 843.860500][ T30] audit: type=1326 audit(1757669236.410:1006): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14944 comm="syz.0.2210" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f06f278eba9 code=0x7ffc0000 [ 844.358523][T14968] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2215'. [ 844.367691][T14968] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 844.476088][T14982] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2216'. [ 844.828271][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 844.840461][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 846.516484][T15001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2222'. [ 846.538933][T15001] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2222'. [ 846.734357][ T30] kauditd_printk_skb: 10 callbacks suppressed [ 846.734372][ T30] audit: type=1400 audit(1757669242.940:1017): avc: denied { write } for pid=15009 comm="syz.0.2225" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 846.863298][T14002] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 846.884601][T13996] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 846.984837][ T30] audit: type=1400 audit(1757669243.173:1018): avc: denied { ioctl } for pid=15009 comm="syz.0.2225" path="socket:[50465]" dev="sockfs" ino=50465 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 847.034442][T14002] usb 6-1: device descriptor read/64, error -71 [ 847.066673][T13996] usb 3-1: Using ep0 maxpacket: 8 [ 847.073939][T13996] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 847.086286][T13996] usb 3-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 847.146995][T13996] usb 3-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 847.196334][T13996] usb 3-1: Product: syz [ 847.204235][T13996] usb 3-1: Manufacturer: syz [ 847.208895][T13996] usb 3-1: SerialNumber: syz [ 847.245633][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2227'. [ 847.279949][T15021] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2227'. [ 847.310299][ T30] audit: type=1400 audit(1757669243.473:1019): avc: denied { name_connect } for pid=15024 comm="syz.3.2229" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=sctp_socket permissive=1 [ 847.330731][T14002] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 847.369518][ T30] audit: type=1400 audit(1757669243.538:1020): avc: denied { read } for pid=15024 comm="syz.3.2229" lport=57094 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 847.392974][ C1] vkms_vblank_simulate: vblank timer overrun [ 847.423442][ T30] audit: type=1400 audit(1757669243.585:1021): avc: denied { setopt } for pid=15024 comm="syz.3.2229" lport=57094 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 847.472656][T14002] usb 6-1: device descriptor read/64, error -71 [ 847.494066][T13996] usb 3-1: Handspring Visor / Palm OS: No valid connect info available [ 847.626590][T14002] usb usb6-port1: attempt power cycle [ 847.639249][T13996] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 847.653767][T13996] usb 3-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 847.681590][T13996] usb 3-1: Handspring Visor / Palm OS: Number of ports: 2 [ 847.706155][T13996] usb 3-1: palm_os_3_probe - error -71 getting bytes available request [ 847.724835][T13996] visor 3-1:1.0: Handspring Visor / Palm OS converter detected [ 847.759339][T13996] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 847.791283][T13996] usb 3-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 847.866209][T13996] usb 3-1: USB disconnect, device number 65 [ 847.886163][T13996] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 847.971184][T13996] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 847.987399][T13996] visor 3-1:1.0: device disconnected [ 848.000137][T14002] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 848.030794][T14002] usb 6-1: device descriptor read/8, error -71 [ 848.300236][T15034] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2230'. [ 848.867655][T14002] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 848.988299][T14002] usb 6-1: device descriptor read/8, error -71 [ 849.176062][T14002] usb usb6-port1: unable to enumerate USB device [ 849.608246][T15042] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2235'. [ 849.617242][T15042] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 850.492251][ T30] audit: type=1400 audit(1757669246.447:1022): avc: denied { bind } for pid=15063 comm="syz.1.2241" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 850.850041][ T5912] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 851.257123][ T5912] usb 6-1: Using ep0 maxpacket: 8 [ 851.264270][ T5912] usb 6-1: config 1 has an invalid descriptor of length 251, skipping remainder of the config [ 851.299712][ T5912] usb 6-1: config 1 interface 0 altsetting 0 endpoint 0x82 has invalid maxpacket 64320, setting to 1024 [ 851.391233][ T5912] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 1024 [ 851.419718][ T5912] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 851.517733][ T5912] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a3, bcdDevice= 0.40 [ 851.527136][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 851.535170][ T5912] usb 6-1: Product: syz [ 851.539393][ T5912] usb 6-1: Manufacturer: syz [ 851.543962][ T5912] usb 6-1: SerialNumber: syz [ 851.561802][T15066] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 851.570994][ T5912] cdc_ether 6-1:1.0: probe with driver cdc_ether failed with error -22 [ 851.579915][ T5912] usbtest 6-1:1.0: couldn't get endpoints, -22 [ 851.586080][ T5912] usbtest 6-1:1.0: probe with driver usbtest failed with error -22 [ 851.855624][ T30] audit: type=1400 audit(1757669247.729:1023): avc: denied { connect } for pid=15052 comm="syz.5.2239" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 851.909770][T15066] usb usb8: usbfs: interface 0 claimed by hub while 'syz.5.2239' resets device [ 851.932160][ T5992] usb 6-1: USB disconnect, device number 15 [ 853.049163][ T30] audit: type=1400 audit(1757669248.823:1024): avc: denied { ioctl } for pid=15096 comm="syz.0.2249" path="socket:[50585]" dev="sockfs" ino=50585 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 853.074015][ T5992] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 853.113855][ T30] audit: type=1400 audit(1757669248.823:1025): avc: denied { bind } for pid=15096 comm="syz.0.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 853.220300][ T30] audit: type=1400 audit(1757669248.833:1026): avc: denied { setopt } for pid=15096 comm="syz.0.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 853.259439][ T30] audit: type=1400 audit(1757669248.842:1027): avc: denied { setopt } for pid=15096 comm="syz.0.2249" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 853.380164][ T5992] usb 4-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 853.389663][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 853.404200][ T5992] usb 4-1: Product: syz [ 853.408521][ T5992] usb 4-1: Manufacturer: syz [ 853.423121][ T5992] usb 4-1: SerialNumber: syz [ 853.447743][ T5992] usb 4-1: config 0 descriptor?? [ 853.691478][ T5992] usb-storage 4-1:0.0: USB Mass Storage device detected [ 853.917785][T15092] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2248'. [ 853.935109][T15092] bond0: entered promiscuous mode [ 853.940163][T15092] bond_slave_0: entered promiscuous mode [ 853.946090][T15092] bond_slave_1: entered promiscuous mode [ 854.169601][T15112] libceph: resolve 'c9' (ret=-3): failed [ 855.020356][T15092] bond0: left promiscuous mode [ 855.052358][T15092] bond_slave_0: left promiscuous mode [ 855.057968][T15092] bond_slave_1: left promiscuous mode [ 855.156889][ T5992] usb 4-1: USB disconnect, device number 52 [ 855.479214][T15125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2254'. [ 855.556145][T15127] netlink: 'syz.5.2255': attribute type 2 has an invalid length. [ 855.574210][T15127] ªªªªª»: renamed from veth1_to_team (while UP) [ 855.662292][T15128] program syz.5.2255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 855.677458][T15127] block device autoloading is deprecated and will be removed. [ 855.685261][ T30] audit: type=1400 audit(1757669251.302:1028): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 855.738798][T15130] program syz.5.2255 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 856.095154][T15130] sd 0:0:1:0: ioctl_internal_command: ILLEGAL REQUEST asc=0x20 ascq=0x0 [ 856.356501][ T5992] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 856.710813][ T5992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.729132][ T30] audit: type=1400 audit(1757669252.284:1029): avc: denied { ioctl } for pid=15141 comm="syz.2.2260" path="socket:[51663]" dev="sockfs" ino=51663 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 856.801438][ T5992] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.869417][ T5992] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 857.073800][ T5992] usb 1-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 857.101861][ T5992] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 857.193048][T15155] rdma_op ffff88805554a1f0 conn xmit_rdma 0000000000000000 [ 857.498912][ T5992] usb 1-1: config 0 descriptor?? [ 857.981117][ T30] audit: type=1400 audit(1757669253.248:1030): avc: denied { read write } for pid=15148 comm="syz.5.2262" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 858.057555][ T5992] plantronics 0003:047F:FFFF.000E: reserved main item tag 0xd [ 858.072725][ T30] audit: type=1400 audit(1757669253.248:1031): avc: denied { open } for pid=15148 comm="syz.5.2262" path="/76/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 858.086224][ T5992] plantronics 0003:047F:FFFF.000E: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.0-1/input0 [ 858.399413][T15134] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 858.784617][T15134] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 858.882593][T13996] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 859.430458][T15182] loop2: detected capacity change from 0 to 7 [ 859.437979][T15182] Dev loop2: unable to read RDB block 7 [ 859.445781][T15182] loop2: unable to read partition table [ 859.457062][T15182] loop2: partition table beyond EOD, truncated [ 859.493675][T15182] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 859.532864][T15184] IPVS: set_ctl: invalid protocol: 108 172.30.0.1:20000 [ 859.567160][ T5222] Dev loop2: unable to read RDB block 7 [ 859.573908][ T5222] loop2: unable to read partition table [ 859.583196][T13996] usb 6-1: Using ep0 maxpacket: 8 [ 859.588479][ T5222] loop2: partition table beyond EOD, truncated [ 859.595651][T13996] usb 6-1: unable to get BOS descriptor or descriptor too short [ 859.606223][T13996] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xEE, changing to 0x8E [ 859.631232][T13996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has an invalid bInterval 0, changing to 7 [ 859.651965][T13996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8E has invalid wMaxPacketSize 0 [ 859.663487][T13996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 859.673292][T13996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xC has invalid wMaxPacketSize 0 [ 859.779227][T13996] usb 6-1: config 0 interface 0 altsetting 0 bulk endpoint 0xC has invalid maxpacket 0 [ 859.810000][T13996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 859.823236][T13996] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x74, changing to 0x4 [ 859.851064][T13996] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x4 has invalid maxpacket 61515, setting to 64 [ 859.873079][T13996] usb 6-1: New USB device found, idVendor=0763, idProduct=1002, bcdDevice=5f.84 [ 859.894228][T13996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 859.902382][ T5912] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 859.921109][T13996] usb 6-1: Product: syz [ 859.925368][T13996] usb 6-1: Manufacturer: syz [ 859.936119][T13996] usb 6-1: SerialNumber: syz [ 859.950943][T13996] usb 6-1: config 0 descriptor?? [ 860.142769][T13996] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 860.191778][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 860.224608][ T5912] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 860.225787][ T5933] usb 1-1: USB disconnect, device number 65 [ 860.345157][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 860.381731][ T5912] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 860.421869][ T5912] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 860.469561][ T5912] usb 3-1: Product: syz [ 860.516658][ T5912] usb 3-1: Manufacturer: syz [ 860.521929][ T5912] usb 3-1: SerialNumber: syz [ 860.554094][ T5912] usb 3-1: config 0 descriptor?? [ 860.565495][T13996] usb 6-1: USB disconnect, device number 16 [ 860.577064][ T5912] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 860.618232][ T5912] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 860.634800][ T6098] udevd[6098]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 860.798708][T15188] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 860.811051][T15188] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 860.879366][ T5912] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 860.885793][ T5912] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 860.964309][ T5912] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 860.978847][ T5912] em28xx 3-1:0.0: No AC97 audio processor [ 860.998053][T15203] FAULT_INJECTION: forcing a failure. [ 860.998053][T15203] name failslab, interval 1, probability 0, space 0, times 0 [ 861.041153][T15203] CPU: 1 UID: 0 PID: 15203 Comm: syz.0.2276 Not tainted syzkaller #0 PREEMPT(full) [ 861.041183][T15203] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 861.041196][T15203] Call Trace: [ 861.041203][T15203] [ 861.041211][T15203] dump_stack_lvl+0x16c/0x1f0 [ 861.041245][T15203] should_fail_ex+0x512/0x640 [ 861.041272][T15203] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 861.041298][T15203] should_failslab+0xc2/0x120 [ 861.041323][T15203] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 861.041346][T15203] ? __alloc_skb+0x2b2/0x380 [ 861.041372][T15203] __alloc_skb+0x2b2/0x380 [ 861.041394][T15203] ? __pfx___alloc_skb+0x10/0x10 [ 861.041426][T15203] alloc_skb_with_frags+0xe0/0x860 [ 861.041452][T15203] ? __might_fault+0xe3/0x190 [ 861.041469][T15203] ? __might_fault+0x13b/0x190 [ 861.041493][T15203] sock_alloc_send_pskb+0x7fb/0x990 [ 861.041515][T15203] ? _copy_from_iter+0x15d/0x1720 [ 861.041547][T15203] ? __pfx_sock_alloc_send_pskb+0x10/0x10 [ 861.041567][T15203] ? __lock_acquire+0xb97/0x1ce0 [ 861.041597][T15203] ? _parse_integer_limit+0x17f/0x1d0 [ 861.041627][T15203] ? _kstrtoull+0x145/0x200 [ 861.041647][T15203] ? iov_iter_advance+0x7d/0x6c0 [ 861.041675][T15203] ? __pfx__kstrtoull+0x10/0x10 [ 861.041702][T15203] tun_get_user+0x7f6/0x3ce0 [ 861.041749][T15203] ? __pfx_tun_get_user+0x10/0x10 [ 861.041779][T15203] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 861.041817][T15203] ? find_held_lock+0x2b/0x80 [ 861.041844][T15203] ? tun_get+0x191/0x370 [ 861.041881][T15203] tun_chr_write_iter+0xdc/0x210 [ 861.041903][T15203] vfs_write+0x7d0/0x11d0 [ 861.041927][T15203] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 861.041950][T15203] ? __pfx_vfs_write+0x10/0x10 [ 861.041969][T15203] ? find_held_lock+0x2b/0x80 [ 861.042014][T15203] ksys_write+0x12a/0x250 [ 861.042035][T15203] ? __pfx_ksys_write+0x10/0x10 [ 861.042065][T15203] do_syscall_64+0xcd/0x4e0 [ 861.042095][T15203] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 861.042117][T15203] RIP: 0033:0x7f06f278eba9 [ 861.042135][T15203] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 861.042155][T15203] RSP: 002b:00007f06f35d5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 861.042176][T15203] RAX: ffffffffffffffda RBX: 00007f06f29d5fa0 RCX: 00007f06f278eba9 [ 861.042191][T15203] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 861.042205][T15203] RBP: 00007f06f35d5090 R08: 0000000000000000 R09: 0000000000000000 [ 861.042218][T15203] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 861.042231][T15203] R13: 00007f06f29d6038 R14: 00007f06f29d5fa0 R15: 00007ffe856a8f78 [ 861.042260][T15203] [ 861.044973][ T5912] usb 3-1: USB disconnect, device number 66 [ 861.333311][ T5912] em28xx 3-1:0.0: Disconnecting em28xx [ 861.344865][ T5912] em28xx 3-1:0.0: Freeing device [ 861.423021][T15213] loop6: detected capacity change from 0 to 6 [ 861.432460][ T6008] Dev loop6: unable to read RDB block 6 [ 861.438829][ T6008] loop6: unable to read partition table [ 861.454241][T15214] netlink: 755 bytes leftover after parsing attributes in process `syz.3.2274'. [ 861.669870][ T6008] loop6: partition table beyond EOD, truncated [ 861.800430][T15213] Dev loop6: unable to read RDB block 6 [ 861.807837][T15213] loop6: unable to read partition table [ 861.817315][T15213] loop6: partition table beyond EOD, truncated [ 861.823748][T15213] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 861.929439][T14002] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 862.403441][ T30] audit: type=1400 audit(1757669257.597:1032): avc: denied { name_bind } for pid=15226 comm="syz.1.2282" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 862.407704][T15227] loop6: detected capacity change from 0 to 7 [ 862.432972][ T6008] Dev loop6: unable to read RDB block 7 [ 862.438616][ T6008] loop6: unable to read partition table [ 862.445670][ T6008] loop6: partition table beyond EOD, truncated [ 862.453618][T15227] Dev loop6: unable to read RDB block 7 [ 862.459290][T15227] loop6: unable to read partition table [ 862.465414][T15227] loop6: partition table beyond EOD, truncated [ 862.471867][T15227] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 862.592801][ T30] audit: type=1400 audit(1757669257.719:1033): avc: denied { mount } for pid=15226 comm="syz.1.2282" name="/" dev="binfmt_misc" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 862.642649][T14002] usb 6-1: Using ep0 maxpacket: 32 [ 862.653300][T14002] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 862.682469][T14002] usb 6-1: config 0 has no interface number 0 [ 862.698847][ T30] audit: type=1400 audit(1757669257.738:1034): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:binfmt_misc_fs_t tclass=filesystem permissive=1 [ 862.933635][ T30] audit: type=1400 audit(1757669257.775:1035): avc: denied { accept } for pid=15229 comm="syz.1.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 862.933657][T15234] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2284'. [ 862.951146][T14002] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 863.120152][T14002] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 863.136415][T14002] usb 6-1: Product: syz [ 863.140671][T14002] usb 6-1: Manufacturer: syz [ 863.148720][T14002] usb 6-1: SerialNumber: syz [ 863.162733][T14002] usb 6-1: config 0 descriptor?? [ 863.174908][T14002] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 864.225517][T14002] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 864.249517][T14002] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 864.696771][T15244] netlink: 'syz.5.2278': attribute type 8 has an invalid length. [ 865.638918][ C0] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 865.647887][T14002] usb 6-1: USB disconnect, device number 17 [ 865.685690][T14002] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 865.730266][ T30] audit: type=1400 audit(1757669260.703:1036): avc: denied { ioctl } for pid=15252 comm="syz.3.2290" path="socket:[51919]" dev="sockfs" ino=51919 ioctlcmd=0x8916 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 865.755566][T14002] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 865.963907][T14002] quatech2 6-1:0.51: device disconnected [ 865.978604][ T30] audit: type=1400 audit(1757669260.843:1037): avc: denied { bind } for pid=15252 comm="syz.3.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 866.046058][ T30] audit: type=1400 audit(1757669260.852:1038): avc: denied { setopt } for pid=15252 comm="syz.3.2290" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 866.080678][ T30] audit: type=1400 audit(1757669260.899:1039): avc: denied { ioctl } for pid=15252 comm="syz.3.2290" path="socket:[50907]" dev="sockfs" ino=50907 ioctlcmd=0x6405 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 866.313856][ T30] audit: type=1400 audit(1757669260.937:1040): avc: denied { getopt } for pid=15254 comm="syz.1.2289" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 866.554441][T15267] loop6: detected capacity change from 0 to 6 [ 866.562421][T15267] Dev loop6: unable to read RDB block 6 [ 866.571229][T15267] loop6: unable to read partition table [ 866.584131][T15267] loop6: partition table beyond EOD, truncated [ 867.055422][ T30] audit: type=1400 audit(1757669261.573:1041): avc: denied { read write } for pid=15263 comm="syz.3.2292" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 867.079746][T15267] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 867.573546][T15276] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2296'. [ 869.465185][T15309] FAULT_INJECTION: forcing a failure. [ 869.465185][T15309] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 869.478412][T15309] CPU: 0 UID: 0 PID: 15309 Comm: syz.1.2306 Not tainted syzkaller #0 PREEMPT(full) [ 869.478440][T15309] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 869.478452][T15309] Call Trace: [ 869.478460][T15309] [ 869.478468][T15309] dump_stack_lvl+0x16c/0x1f0 [ 869.478500][T15309] should_fail_ex+0x512/0x640 [ 869.478532][T15309] _copy_from_iter+0x29f/0x1720 [ 869.478570][T15309] ? __pfx__copy_from_iter+0x10/0x10 [ 869.478600][T15309] ? _copy_from_iter+0x15d/0x1720 [ 869.478641][T15309] skb_copy_datagram_from_iter+0x124/0x740 [ 869.478669][T15309] ? _kstrtoull+0x145/0x200 [ 869.478689][T15309] ? iov_iter_advance+0x7d/0x6c0 [ 869.478723][T15309] tun_get_user+0x185c/0x3ce0 [ 869.478769][T15309] ? __pfx_tun_get_user+0x10/0x10 [ 869.478803][T15309] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 869.478840][T15309] ? find_held_lock+0x2b/0x80 [ 869.478867][T15309] ? tun_get+0x191/0x370 [ 869.478903][T15309] tun_chr_write_iter+0xdc/0x210 [ 869.478929][T15309] vfs_write+0x7d0/0x11d0 [ 869.478952][T15309] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 869.478975][T15309] ? __pfx_vfs_write+0x10/0x10 [ 869.478995][T15309] ? find_held_lock+0x2b/0x80 [ 869.479038][T15309] ksys_write+0x12a/0x250 [ 869.479061][T15309] ? __pfx_ksys_write+0x10/0x10 [ 869.479099][T15309] do_syscall_64+0xcd/0x4e0 [ 869.479129][T15309] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 869.479151][T15309] RIP: 0033:0x7f80c9b8eba9 [ 869.479167][T15309] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 869.479187][T15309] RSP: 002b:00007f80caaba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 869.479208][T15309] RAX: ffffffffffffffda RBX: 00007f80c9dd5fa0 RCX: 00007f80c9b8eba9 [ 869.479222][T15309] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 869.479236][T15309] RBP: 00007f80caaba090 R08: 0000000000000000 R09: 0000000000000000 [ 869.479249][T15309] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 869.479261][T15309] R13: 00007f80c9dd6038 R14: 00007f80c9dd5fa0 R15: 00007ffd815f0f08 [ 869.479290][T15309] [ 869.819792][T15314] futex_wake_op: syz.3.2305 tries to shift op by 36; fix this program [ 869.852776][T15314] overlayfs: conflicting lowerdir path [ 870.265385][T14002] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 870.656107][T14002] usb 1-1: Using ep0 maxpacket: 32 [ 870.672602][T14002] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 870.680783][T14002] usb 1-1: config 0 has no interface number 0 [ 870.700116][T14002] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 870.703060][T15323] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 870.718543][T14002] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 870.718570][T14002] usb 1-1: Product: syz [ 870.718586][T14002] usb 1-1: Manufacturer: syz [ 870.718604][T14002] usb 1-1: SerialNumber: syz [ 870.746900][T14002] usb 1-1: config 0 descriptor?? [ 870.760587][T15324] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 870.766422][T14002] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 871.006854][T15327] netlink: 256 bytes leftover after parsing attributes in process `syz.2.2309'. [ 871.163099][T13067] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 871.384050][T13067] usb 4-1: config 0 interface 0 altsetting 12 bulk endpoint 0x87 has invalid maxpacket 185 [ 871.562071][T14002] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 871.595245][T13067] usb 4-1: config 0 interface 0 has no altsetting 0 [ 871.646085][T15334] netlink: 'syz.0.2304': attribute type 8 has an invalid length. [ 871.817084][T14002] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 871.841813][T13067] usb 4-1: New USB device found, idVendor=06cd, idProduct=0115, bcdDevice=d9.c3 [ 871.854904][T13067] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 871.862972][T13067] usb 4-1: Product: syz [ 871.867427][T13067] usb 4-1: Manufacturer: syz [ 871.872069][T13067] usb 4-1: SerialNumber: syz [ 871.892356][T13067] usb 4-1: config 0 descriptor?? [ 871.897934][T15324] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 872.172669][T13067] keyspan 4-1:0.0: Keyspan 2 port adapter converter detected [ 872.206838][T13067] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 7 [ 872.228276][T13067] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 81 [ 872.250863][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 872.252731][T13067] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 1 [ 872.258824][T14002] usb 1-1: USB disconnect, device number 66 [ 872.295740][T14002] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 872.320258][T14002] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 872.337537][T14002] quatech2 1-1:0.51: device disconnected [ 872.363427][T15339] syz_tun: entered allmulticast mode [ 872.410992][T13067] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 2 [ 872.419050][T13067] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 85 [ 872.427176][T13067] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 5 [ 872.432951][T15339] dvmrp8: entered allmulticast mode [ 872.443958][T13067] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB2 [ 872.459800][T13067] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 83 [ 872.932088][ T5933] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 872.942943][T13067] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 3 [ 872.951149][T13067] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 4 [ 872.962285][T13067] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 86 [ 872.973589][T13067] keyspan 4-1:0.0: found no endpoint descriptor for endpoint 6 [ 873.011629][T13067] usb 4-1: Keyspan 2 port adapter converter now attached to ttyUSB3 [ 873.123717][ T5933] usb 6-1: Using ep0 maxpacket: 8 [ 873.131789][ T5933] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 873.676477][T15337] syz_tun: left allmulticast mode [ 873.692060][ T5933] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 873.703881][T13067] usb 4-1: USB disconnect, device number 53 [ 873.710629][ T5933] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 873.761743][T13067] keyspan_2 ttyUSB2: Keyspan 2 port adapter converter now disconnected from ttyUSB2 [ 873.771864][ T5933] usb 6-1: Product: syz [ 873.778931][ T5933] usb 6-1: Manufacturer: syz [ 873.787624][ T5933] usb 6-1: SerialNumber: syz [ 873.795551][T13067] keyspan_2 ttyUSB3: Keyspan 2 port adapter converter now disconnected from ttyUSB3 [ 873.819136][T13067] keyspan 4-1:0.0: device disconnected [ 874.135585][ T5933] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 874.153786][ T5933] visor 6-1:1.0: probe with driver visor failed with error -110 [ 874.299366][T15357] FAULT_INJECTION: forcing a failure. [ 874.299366][T15357] name failslab, interval 1, probability 0, space 0, times 0 [ 874.312493][T15357] CPU: 0 UID: 0 PID: 15357 Comm: syz.1.2317 Not tainted syzkaller #0 PREEMPT(full) [ 874.312520][T15357] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 874.312532][T15357] Call Trace: [ 874.312540][T15357] [ 874.312548][T15357] dump_stack_lvl+0x16c/0x1f0 [ 874.312579][T15357] should_fail_ex+0x512/0x640 [ 874.312611][T15357] should_failslab+0xc2/0x120 [ 874.312636][T15357] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 874.312659][T15357] ? dst_alloc+0x99/0x1a0 [ 874.312686][T15357] dst_alloc+0x99/0x1a0 [ 874.312710][T15357] rt_dst_alloc+0x35/0x3a0 [ 874.312741][T15357] ip_route_input_slow+0x1671/0x3df0 [ 874.312771][T15357] ? __pfx_ip_route_input_slow+0x10/0x10 [ 874.312796][T15357] ? __lock_acquire+0x62e/0x1ce0 [ 874.312834][T15357] ? __lock_acquire+0x62e/0x1ce0 [ 874.312884][T15357] ip_route_input_noref+0x120/0x2e0 [ 874.312906][T15357] ? __pfx_ip_route_input_noref+0x10/0x10 [ 874.312936][T15357] ? __pfx_nf_hook.constprop.0+0x10/0x10 [ 874.312966][T15357] ip_rcv_finish_core+0x46f/0x22a0 [ 874.312997][T15357] ip_rcv+0x1c0/0x600 [ 874.313022][T15357] ? __pfx_ip_rcv+0x10/0x10 [ 874.313043][T15357] __netif_receive_skb_one_core+0x197/0x1e0 [ 874.313067][T15357] ? __pfx___netif_receive_skb_one_core+0x10/0x10 [ 874.313090][T15357] ? lock_acquire+0x179/0x350 [ 874.313111][T15357] ? __might_fault+0x13b/0x190 [ 874.313136][T15357] __netif_receive_skb+0x1d/0x160 [ 874.313160][T15357] netif_receive_skb+0x137/0x7b0 [ 874.313182][T15357] ? __pfx_netif_receive_skb+0x10/0x10 [ 874.313206][T15357] ? skb_partial_csum_set+0x202/0x3a0 [ 874.313244][T15357] tun_rx_batched.isra.0+0x3ee/0x740 [ 874.313279][T15357] ? __pfx_tun_rx_batched.isra.0+0x10/0x10 [ 874.313317][T15357] ? tun_get_user+0x1d8a/0x3ce0 [ 874.313346][T15357] ? rcu_is_watching+0x12/0xc0 [ 874.313378][T15357] tun_get_user+0x28e4/0x3ce0 [ 874.313423][T15357] ? __pfx_tun_get_user+0x10/0x10 [ 874.313463][T15357] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 874.313501][T15357] ? find_held_lock+0x2b/0x80 [ 874.313528][T15357] ? tun_get+0x191/0x370 [ 874.313564][T15357] tun_chr_write_iter+0xdc/0x210 [ 874.313586][T15357] vfs_write+0x7d0/0x11d0 [ 874.313610][T15357] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 874.313633][T15357] ? __pfx_vfs_write+0x10/0x10 [ 874.313652][T15357] ? find_held_lock+0x2b/0x80 [ 874.313696][T15357] ksys_write+0x12a/0x250 [ 874.313717][T15357] ? __pfx_ksys_write+0x10/0x10 [ 874.313749][T15357] do_syscall_64+0xcd/0x4e0 [ 874.313779][T15357] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 874.313800][T15357] RIP: 0033:0x7f80c9b8eba9 [ 874.313817][T15357] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 874.313836][T15357] RSP: 002b:00007f80caaba038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 874.313855][T15357] RAX: ffffffffffffffda RBX: 00007f80c9dd5fa0 RCX: 00007f80c9b8eba9 [ 874.313870][T15357] RDX: 000000000000004e RSI: 0000200000000280 RDI: 0000000000000003 [ 874.313883][T15357] RBP: 00007f80caaba090 R08: 0000000000000000 R09: 0000000000000000 [ 874.313896][T15357] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 874.313909][T15357] R13: 00007f80c9dd6038 R14: 00007f80c9dd5fa0 R15: 00007ffd815f0f08 [ 874.313939][T15357] [ 874.708830][T15367] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 874.717470][T15367] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 875.193670][T13067] usb 1-1: new full-speed USB device number 67 using dummy_hcd [ 875.496393][T15377] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2322'. [ 875.505700][T15377] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 875.620048][T13067] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 875.653010][T13067] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 875.694987][T13067] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 875.710144][T13067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.753775][T13067] usb 1-1: Product: syz [ 875.763082][T13067] usb 1-1: Manufacturer: syz [ 875.769936][T13067] usb 1-1: SerialNumber: syz [ 875.931075][T14002] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 876.006627][ T5912] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 876.039304][T13996] usb 6-1: USB disconnect, device number 18 [ 876.057134][T13067] usb 1-1: cannot find UAC_HEADER [ 876.106282][T14002] usb 2-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 876.181573][T14002] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 876.182455][T13067] snd-usb-audio 1-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 876.220474][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 876.220490][ T30] audit: type=1400 audit(1757669270.515:1043): avc: denied { accept } for pid=15384 comm="syz.5.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 876.251033][T14002] usb 2-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 876.268206][T13067] usb 1-1: USB disconnect, device number 67 [ 876.395283][ T30] audit: type=1400 audit(1757669270.524:1044): avc: denied { read } for pid=15384 comm="syz.5.2325" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 876.415452][ T5912] usb 4-1: Using ep0 maxpacket: 16 [ 876.423870][T14002] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 876.442950][ T5912] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 876.466867][ T6008] udevd[6008]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 876.511847][ T5912] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 876.523419][T14002] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 876.565232][ T5912] usb 4-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 876.594034][T14002] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 876.670658][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 876.999907][T14002] usb 2-1: invalid MIDI out EP 0 [ 877.006244][T15379] delete_channel: no stack [ 877.012167][ T5912] usb 4-1: Product: syz [ 877.027263][ T5912] usb 4-1: Manufacturer: syz [ 877.047990][ T5912] usb 4-1: SerialNumber: syz [ 877.149207][ T5912] usb 4-1: config 0 descriptor?? [ 877.189985][ T5912] em28xx 4-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 877.261678][ T5912] em28xx 4-1:0.0: Audio interface 0 found (Vendor Class) [ 877.363099][T14002] snd-usb-audio 2-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 877.454816][T14002] usb 2-1: USB disconnect, device number 54 [ 877.513265][T13067] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 877.663446][ T5912] em28xx 4-1:0.0: unknown em28xx chip ID (0) [ 877.671595][ T5912] em28xx 4-1:0.0: Config register raw data: 0xfffffffb [ 877.684349][T13067] usb 6-1: Using ep0 maxpacket: 16 [ 877.715890][T13067] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 877.759099][T13996] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 877.773803][T13067] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 877.816565][T13067] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 877.831660][T13067] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 877.849080][T13067] usb 6-1: Product: syz [ 877.854432][T13067] usb 6-1: Manufacturer: syz [ 877.862591][T13067] usb 6-1: SerialNumber: syz [ 877.875486][T13067] usb 6-1: config 0 descriptor?? [ 877.930423][T13996] usb 3-1: Using ep0 maxpacket: 32 [ 878.022469][T13067] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 878.032801][T13067] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 878.039920][ T5912] em28xx 4-1:0.0: AC97 chip type couldn't be determined [ 878.039941][ T5912] em28xx 4-1:0.0: No AC97 audio processor [ 878.072351][T13996] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 878.083456][T13996] usb 3-1: config 0 has no interface number 0 [ 878.561126][ T5912] usb 4-1: USB disconnect, device number 54 [ 878.572568][ T5912] em28xx 4-1:0.0: Disconnecting em28xx [ 878.584734][T13996] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 878.593874][T13996] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 878.602841][ T5912] em28xx 4-1:0.0: Freeing device [ 878.610121][T13996] usb 3-1: Product: syz [ 878.612132][T15397] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 878.614378][T13996] usb 3-1: Manufacturer: syz [ 878.627261][T13996] usb 3-1: SerialNumber: syz [ 878.633245][T13996] usb 3-1: config 0 descriptor?? [ 878.687549][T15397] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 878.722610][T13996] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 878.754390][T15409] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 878.775807][T13067] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 878.782237][T13067] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 878.793148][T13067] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 878.800147][T13067] em28xx 6-1:0.0: No AC97 audio processor [ 878.825238][T13067] usb 6-1: USB disconnect, device number 19 [ 878.847117][T13067] em28xx 6-1:0.0: Disconnecting em28xx [ 878.860761][T13067] em28xx 6-1:0.0: Freeing device [ 878.868773][T13996] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 878.908629][T13996] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 879.209902][T15418] netlink: 'syz.2.2328': attribute type 8 has an invalid length. [ 879.499384][T15421] qnx6: wrong signature (magic) at position (0x2000) - will try alternative position (0x0000). [ 879.542779][T15421] qnx6: wrong signature (magic) in superblock #1. [ 879.590918][T15421] qnx6: unable to read the first superblock [ 879.944280][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 879.952810][T13996] usb 3-1: USB disconnect, device number 67 [ 879.969213][T13996] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 880.290907][ T30] audit: type=1400 audit(1757669274.322:1045): avc: denied { sqpoll } for pid=15420 comm="syz.3.2333" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 880.391539][T13996] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 880.494335][T13996] quatech2 3-1:0.51: device disconnected [ 880.866661][ T30] audit: type=1400 audit(1757669274.865:1046): avc: denied { load_policy } for pid=15434 comm="syz.1.2336" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 880.867138][T15436] SELinux: failed to load policy [ 881.242366][T15447] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2338'. [ 882.859703][T15459] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 884.021426][T15464] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2343'. [ 884.030741][T15464] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 884.294556][T15456] ntfs3(loop1): try to read out of volume at offset 0x0 [ 884.745832][T15469] block nbd5: Attempted send on invalid socket [ 884.775451][T15469] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 884.957786][T10408] block nbd5: Attempted send on invalid socket [ 884.964984][T10408] I/O error, dev nbd5, sector 256 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 885.438670][T15469] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 885.448842][T15469] block nbd5: Attempted send on invalid socket [ 885.455017][T15469] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 885.468911][T15469] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 885.488459][T15469] block nbd5: Attempted send on invalid socket [ 885.494689][T15469] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 885.505800][T15469] block nbd5: Attempted send on invalid socket [ 885.512078][T15469] I/O error, dev nbd5, sector 512 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 885.522609][T15469] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 885.533842][T15469] block nbd5: Attempted send on invalid socket [ 885.540080][T15469] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 885.550258][T15469] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 885.631159][T15469] block nbd5: Attempted send on invalid socket [ 885.645128][T15469] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 885.655189][T15469] block nbd5: Attempted send on invalid socket [ 886.008453][T15469] I/O error, dev nbd5, sector 1024 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 886.018900][T15469] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 886.030197][T15469] block nbd5: Attempted send on invalid socket [ 886.044488][T15469] I/O error, dev nbd5, sector 2048 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 886.081421][T15469] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 886.112788][T15469] block nbd5: Attempted send on invalid socket [ 886.125633][T15469] I/O error, dev nbd5, sector 64 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 2 [ 886.169356][T15469] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=256, location=256 [ 886.190908][T15469] UDF-fs: error (device nbd5): udf_read_tagged: read failed, block=512, location=512 [ 886.200703][T15469] UDF-fs: warning (device nbd5): udf_fill_super: No partition found (1) [ 886.215483][ T5912] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 886.306223][ T30] audit: type=1400 audit(1757669279.953:1047): avc: denied { mounton } for pid=15486 comm="syz.2.2349" path="/dev/binderfs" dev="binder" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 [ 886.326039][T15488] binder: Bad value for 'stats' [ 886.329260][ C1] vkms_vblank_simulate: vblank timer overrun [ 886.345031][T15488] kvm: MWAIT instruction emulated as NOP! [ 886.376939][ T5912] usb 2-1: Using ep0 maxpacket: 16 [ 886.390472][ T5912] usb 2-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice=29.00 [ 886.426212][ T5912] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 886.509410][ T5912] usb 2-1: Product: syz [ 886.514198][ T5912] usb 2-1: Manufacturer: syz [ 886.520097][ T5912] usb 2-1: SerialNumber: syz [ 886.677576][ T5912] usb 2-1: config 0 descriptor?? [ 886.771300][T15500] libceph: resolve 'c9' (ret=-3): failed [ 887.174455][ T5912] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 887.183392][ T5912] usb 2-1: Detected FT4233HP [ 887.416919][ T5912] ftdi_sio ttyUSB0: Unable to read latency timer: -32 [ 887.478310][ T5912] usb 2-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 887.519926][ T30] audit: type=1400 audit(1757669280.973:1048): avc: denied { read } for pid=15498 comm="syz.5.2352" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 887.604284][T15501] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 887.746847][ T5912] usb 2-1: USB disconnect, device number 55 [ 888.077228][T15501] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 888.106472][ T5912] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 888.143234][ T5912] ftdi_sio 2-1:0.0: device disconnected [ 888.570800][T14002] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 888.782252][T15513] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2355'. [ 889.151575][T15510] ntfs3(loop1): try to read out of volume at offset 0x0 [ 889.203255][T14002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 889.310645][T14002] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 889.322806][T14002] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 889.332398][T14002] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 889.372299][T14002] usb 6-1: config 0 descriptor?? [ 891.044535][ T30] audit: type=1400 audit(1757669284.368:1049): avc: denied { write } for pid=15505 comm="syz.5.2354" path="socket:[53576]" dev="sockfs" ino=53576 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 891.279999][T14002] usbhid 6-1:0.0: can't add hid device: -71 [ 891.305146][T14002] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 891.346566][T14002] usb 6-1: USB disconnect, device number 20 [ 891.420914][ T30] audit: type=1400 audit(1757669284.668:1050): avc: denied { mount } for pid=15525 comm="syz.1.2360" name="/" dev="ramfs" ino=53586 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ramfs_t tclass=filesystem permissive=1 [ 891.640157][T15535] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2361'. [ 891.649319][T15535] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 891.927414][ T30] audit: type=1800 audit(1757669285.192:1051): pid=15532 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed comm="syz.1.2360" name="bus" dev="ramfs" ino=53591 res=0 errno=0 [ 892.595239][T15540] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 892.710224][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2364'. [ 892.719469][T15552] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2364'. [ 892.726327][T15553] mkiss: ax0: crc mode is auto. [ 893.010225][T15560] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 893.087734][T15560] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2367'. [ 893.097281][ T30] audit: type=1400 audit(1757669286.295:1052): avc: denied { bind } for pid=15556 comm="syz.0.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 893.313911][T13067] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 893.389132][T15565] netlink: 256 bytes leftover after parsing attributes in process `syz.3.2368'. [ 893.820503][ T30] audit: type=1400 audit(1757669286.295:1053): avc: denied { name_bind } for pid=15556 comm="syz.0.2367" src=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=icmp_socket permissive=1 [ 893.937172][T13067] usb 3-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 893.956246][ T30] audit: type=1400 audit(1757669286.295:1054): avc: denied { node_bind } for pid=15556 comm="syz.0.2367" saddr=224.0.0.2 src=255 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=icmp_socket permissive=1 [ 894.010162][T13067] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 894.011753][ T30] audit: type=1400 audit(1757669286.305:1055): avc: denied { setopt } for pid=15556 comm="syz.0.2367" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 894.143060][T13067] usb 3-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 894.167031][T15567] ntfs3(loop1): try to read out of volume at offset 0x0 [ 894.230396][T13067] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 894.300865][T13067] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 894.508804][T15575] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 896.632272][ T30] audit: type=1400 audit(1757669289.616:1056): avc: denied { write } for pid=15578 comm="syz.1.2373" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 896.670958][ T5912] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 897.113763][ T5912] usb 6-1: Using ep0 maxpacket: 32 [ 897.177815][T15583] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2374'. [ 897.187109][T15583] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 897.222096][ T5912] usb 6-1: config 0 has an invalid interface number: 231 but max is 0 [ 897.232095][ T5912] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.291098][ T5912] usb 6-1: config 0 has no interface number 0 [ 897.312262][ T5912] usb 6-1: config 0 interface 231 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 897.392101][ T5912] usb 6-1: New USB device found, idVendor=067b, idProduct=27a1, bcdDevice=b0.9b [ 897.413561][T13067] usb 3-1: can't set config #27, error -71 [ 897.425518][ T5912] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 897.447209][ T5912] usb 6-1: Product: syz [ 897.447331][T13067] usb 3-1: USB disconnect, device number 68 [ 897.451789][ T5912] usb 6-1: Manufacturer: syz [ 897.465518][T15559] delete_channel: no stack [ 897.488804][ T5912] usb 6-1: SerialNumber: syz [ 897.822829][ T5912] usb 6-1: config 0 descriptor?? [ 897.884638][ T5912] plusb 6-1:0.231: probe with driver plusb failed with error -22 [ 898.913991][T15577] netlink: zone id is out of range [ 898.945045][T15577] netlink: zone id is out of range [ 898.961545][T15577] netlink: zone id is out of range [ 898.966685][T15577] netlink: zone id is out of range [ 898.979555][T15577] netlink: zone id is out of range [ 898.989165][T15577] netlink: zone id is out of range [ 899.000715][T15607] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2372'. [ 899.001861][T15577] netlink: zone id is out of range [ 899.379811][T15577] netlink: zone id is out of range [ 899.452093][T15607] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=15607 comm=syz.5.2372 [ 899.549222][T15577] netlink: zone id is out of range [ 899.649286][T15616] tipc: Enabling of bearer rejected, failed to enable media [ 900.460236][T13067] usb 6-1: USB disconnect, device number 21 [ 900.961047][T15640] netlink: 755 bytes leftover after parsing attributes in process `syz.1.2387'. [ 901.686418][T15633] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2386'. [ 901.915453][T15648] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 903.183896][T15662] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2394'. [ 904.924446][T15679] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 905.549375][ T30] audit: type=1400 audit(1757669297.960:1057): avc: denied { connect } for pid=15684 comm="syz.1.2400" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 906.177840][T15700] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 908.747601][T15721] loop2: detected capacity change from 0 to 7 [ 908.775124][T15721] Dev loop2: unable to read RDB block 7 [ 908.780807][T15721] loop2: unable to read partition table [ 908.868825][T15719] ntfs3(loop0): try to read out of volume at offset 0x0 [ 908.882584][T15721] loop2: partition table beyond EOD, truncated [ 908.888747][T15721] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 909.332585][T15728] loop9: detected capacity change from 0 to 7 [ 909.367241][ T6008] Buffer I/O error on dev loop9, logical block 0, async page read [ 909.395900][ T6008] Buffer I/O error on dev loop9, logical block 0, async page read [ 909.416448][ T6008] Buffer I/O error on dev loop9, logical block 0, async page read [ 909.455638][ T6008] Buffer I/O error on dev loop9, logical block 0, async page read [ 909.492151][ T6008] Buffer I/O error on dev loop9, logical block 0, async page read [ 909.533043][ T30] audit: type=1400 audit(1757669301.683:1058): avc: denied { read } for pid=15733 comm="syz.2.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 910.468682][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 910.493765][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 910.541817][ T30] audit: type=1400 audit(1757669301.701:1059): avc: denied { append } for pid=15733 comm="syz.2.2414" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 910.564750][ C0] vkms_vblank_simulate: vblank timer overrun [ 911.023912][ T30] audit: type=1400 audit(1757669303.067:1060): avc: denied { connect } for pid=15733 comm="syz.2.2414" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 912.415327][T15767] libceph: resolve 'c9' (ret=-3): failed [ 912.529006][T15768] ntfs3(loop1): try to read out of volume at offset 0x0 [ 913.037664][ T30] audit: type=1400 audit(1757669304.957:1061): avc: denied { read } for pid=15772 comm="syz.0.2426" name="usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 913.075009][ T30] audit: type=1400 audit(1757669304.957:1062): avc: denied { open } for pid=15772 comm="syz.0.2426" path="/dev/usbmon9" dev="devtmpfs" ino=743 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 913.173426][T15781] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 913.200647][T15781] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 913.546709][ T30] audit: type=1400 audit(1757669304.957:1063): avc: denied { create } for pid=15772 comm="syz.0.2426" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 913.807894][T13996] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 914.299604][T13996] usb 4-1: Using ep0 maxpacket: 8 [ 914.312477][T13996] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 914.330570][T13996] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 914.368667][T13996] usb 4-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 914.421695][T13996] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 914.457606][T13996] usb 4-1: Product: syz [ 914.473059][T13996] usb 4-1: Manufacturer: syz [ 914.502723][T13996] usb 4-1: SerialNumber: syz [ 914.525515][T13996] usb 4-1: config 0 descriptor?? [ 914.727214][T13067] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 914.776866][T13996] usb 4-1: USB disconnect, device number 55 [ 914.975475][T13067] usb 1-1: Using ep0 maxpacket: 32 [ 915.016228][T13067] usb 1-1: config 0 has an invalid interface number: 196 but max is 0 [ 915.024531][T13067] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 915.530719][T13067] usb 1-1: config 0 has no interface number 0 [ 915.558244][T13067] usb 1-1: config 0 interface 196 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 915.585139][T13067] usb 1-1: config 0 interface 196 has no altsetting 0 [ 915.594614][T13067] usb 1-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 915.604108][T13067] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 915.623347][T13067] usb 1-1: Product: syz [ 915.627867][T13067] usb 1-1: Manufacturer: syz [ 915.633599][T13067] usb 1-1: SerialNumber: syz [ 915.650200][T13067] usb 1-1: config 0 descriptor?? [ 915.739350][T15804] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2430'. [ 916.842482][T15824] mkiss: ax0: crc mode is auto. [ 917.025628][T13067] usb 1-1: USB disconnect, device number 68 [ 917.253635][T15828] ntfs3(loop3): try to read out of volume at offset 0x0 [ 917.785113][T13996] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 918.039122][T15845] libceph: resolve 'c9' (ret=-3): failed [ 918.522356][T13996] usb 6-1: Using ep0 maxpacket: 32 [ 918.533137][T13996] usb 6-1: config 0 has an invalid interface number: 95 but max is 0 [ 918.541225][T13996] usb 6-1: config 0 has no interface number 0 [ 918.550518][T13996] usb 6-1: config 0 interface 95 has no altsetting 0 [ 918.559731][T13996] usb 6-1: New USB device found, idVendor=04e8, idProduct=6889, bcdDevice=d4.52 [ 918.576212][T13996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 918.584207][T13996] usb 6-1: Product: syz [ 918.610739][T13996] usb 6-1: Manufacturer: syz [ 918.615351][T13996] usb 6-1: SerialNumber: syz [ 918.623499][T13996] usb 6-1: config 0 descriptor?? [ 918.782857][T13996] kalmia 6-1:0.95: probe with driver kalmia failed with error -22 [ 918.854107][T13996] usb 6-1: USB disconnect, device number 22 [ 919.454158][T15863] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2445'. [ 919.858797][ T5912] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 920.190642][ T5912] usb 1-1: Using ep0 maxpacket: 32 [ 920.213460][ T5912] usb 1-1: config 0 has an invalid interface number: 51 but max is 0 [ 920.496738][ T5912] usb 1-1: config 0 has no interface number 0 [ 920.524916][ T5912] usb 1-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 920.547549][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 920.573658][ T5912] usb 1-1: Product: syz [ 920.590631][ T5912] usb 1-1: Manufacturer: syz [ 920.605599][ T5912] usb 1-1: SerialNumber: syz [ 920.624985][ T5912] usb 1-1: config 0 descriptor?? [ 920.633799][ T5912] quatech2 1-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 921.070711][T15871] netlink: 755 bytes leftover after parsing attributes in process `syz.2.2448'. [ 921.568909][ T5912] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 921.596832][ T5912] usb 1-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 922.039211][T15874] ntfs3(loop1): try to read out of volume at offset 0x0 [ 922.335175][T15879] netlink: 'syz.0.2446': attribute type 8 has an invalid length. [ 922.492103][ T5933] usb 6-1: new full-speed USB device number 23 using dummy_hcd [ 922.553122][T15878] CIFS: VFS: Malformed UNC in devname [ 922.757876][ T5933] usb 6-1: config 0 has an invalid interface number: 110 but max is 0 [ 922.766514][ T5933] usb 6-1: config 0 has no interface number 0 [ 922.773277][ T5933] usb 6-1: config 0 interface 110 has no altsetting 0 [ 922.784730][ T5933] usb 6-1: New USB device found, idVendor=0547, idProduct=2720, bcdDevice=af.55 [ 922.793831][ T5933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 922.801880][ T5933] usb 6-1: Product: syz [ 922.820068][T14002] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 923.044594][T14002] usb 4-1: Using ep0 maxpacket: 32 [ 923.074478][T14002] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 923.107123][T14002] usb 4-1: config 0 has no interface number 0 [ 923.204985][ T5933] usb 6-1: Manufacturer: syz [ 923.209669][ T5933] usb 6-1: SerialNumber: syz [ 923.215113][ C0] usb 1-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 923.221800][ T5933] usb 6-1: config 0 descriptor?? [ 923.230588][T14002] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 923.240762][T14002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 923.241213][T13067] usb 1-1: USB disconnect, device number 69 [ 923.250929][T14002] usb 4-1: Product: syz [ 923.265330][T14002] usb 4-1: Manufacturer: syz [ 923.266076][T13067] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 923.272017][T14002] usb 4-1: SerialNumber: syz [ 923.295736][T14002] usb 4-1: config 0 descriptor?? [ 923.302285][T13067] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 923.315609][T13067] quatech2 1-1:0.51: device disconnected [ 923.319817][T14002] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 923.454741][ T5933] cdc_subset 6-1:0.110: probe with driver cdc_subset failed with error -22 [ 923.596373][T14002] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 923.618282][T14002] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 923.670594][T15877] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 923.687791][T15877] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 924.151452][T15897] netlink: 'syz.3.2451': attribute type 8 has an invalid length. [ 925.029642][T15905] netlink: 204732 bytes leftover after parsing attributes in process `syz.1.2454'. [ 925.057446][T14002] usb 6-1: USB disconnect, device number 23 [ 925.252808][ T30] audit: type=1326 audit(1757669316.387:1064): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15910 comm="syz.0.2458" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06f278eba9 code=0x0 [ 926.598904][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 926.667946][ T5912] usb 4-1: USB disconnect, device number 56 [ 926.909519][ T5912] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 927.958588][ T5912] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 927.980042][ T5912] quatech2 4-1:0.51: device disconnected [ 928.276511][T15905] netlink: 'syz.1.2454': attribute type 10 has an invalid length. [ 928.288152][T15905] netlink: 'syz.1.2454': attribute type 10 has an invalid length. [ 928.296424][T15905] netlink: 2 bytes leftover after parsing attributes in process `syz.1.2454'. [ 928.812055][T15935] ntfs3(loop3): try to read out of volume at offset 0x0 [ 929.655881][T15943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2466'. [ 930.776245][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2466'. [ 931.786409][T15955] loop2: detected capacity change from 0 to 7 [ 931.801008][T15955] Dev loop2: unable to read RDB block 7 [ 931.806611][T15955] loop2: unable to read partition table [ 932.035293][T15955] loop2: partition table beyond EOD, truncated [ 932.151393][T15955] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 932.216281][ T30] audit: type=1400 audit(1757669322.898:1065): avc: denied { write } for pid=15954 comm="syz.3.2468" name="binder1" dev="binder" ino=8 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 932.308584][T15965] block nbd3: shutting down sockets [ 932.333475][T15968] Device name cannot be null; rc = [-22] [ 932.342887][ T30] audit: type=1400 audit(1757669323.019:1066): avc: denied { read } for pid=15964 comm="syz.5.2471" path="socket:[56385]" dev="sockfs" ino=56385 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 933.118021][ T5912] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 933.335812][ T5912] usb 1-1: config 0 has an invalid interface number: 69 but max is 0 [ 933.781463][T15985] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2475'. [ 933.795558][ T5912] usb 1-1: config 0 has no interface number 0 [ 933.810293][ T5912] usb 1-1: config 0 interface 69 altsetting 0 bulk endpoint 0x8 has invalid maxpacket 1023 [ 933.820350][ T5912] usb 1-1: config 0 interface 69 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 933.882158][ T5912] usb 1-1: New USB device found, idVendor=0c4b, idProduct=0100, bcdDevice=d7.ca [ 934.008889][T15992] ntfs3(loop5): try to read out of volume at offset 0x0 [ 934.440492][ T5912] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 934.512158][ T5912] usb 1-1: Product: syz [ 934.555539][ T5912] usb 1-1: Manufacturer: syz [ 934.599128][ T5912] usb 1-1: SerialNumber: syz [ 934.623973][ T5912] usb 1-1: config 0 descriptor?? [ 934.630028][T15972] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 934.656727][ T5912] cyberjack 1-1:0.69: Reiner SCT Cyberjack USB card reader converter detected [ 934.767275][ T5912] usb 1-1: Reiner SCT Cyberjack USB card reader converter now attached to ttyUSB0 [ 935.010289][T15972] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 935.554770][T15972] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 936.010170][ T5933] kernel write not supported for file /input/event2 (pid: 5933 comm: kworker/1:4) [ 936.022978][ T5912] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 936.172604][ T5912] usb 3-1: device descriptor read/64, error -71 [ 936.253877][T13996] usb 1-1: USB disconnect, device number 70 [ 936.289926][T13996] cyberjack ttyUSB0: Reiner SCT Cyberjack USB card reader converter now disconnected from ttyUSB0 [ 936.810437][T16019] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 938.631131][ T5912] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 938.678828][T13996] cyberjack 1-1:0.69: device disconnected [ 939.317684][T16030] loop2: detected capacity change from 0 to 7 [ 939.328349][ T6008] Dev loop2: unable to read RDB block 7 [ 939.333913][ T6008] loop2: unable to read partition table [ 939.339945][ T6008] loop2: partition table beyond EOD, truncated [ 939.431459][T16032] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2482'. [ 939.444533][ T5933] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 939.787908][T16030] Dev loop2: unable to read RDB block 7 [ 939.793514][T16030] loop2: unable to read partition table [ 939.818398][T16030] loop2: partition table beyond EOD, truncated [ 939.846811][T16030] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 940.349533][ T30] audit: type=1400 audit(1757669330.502:1067): avc: denied { read write } for pid=16036 comm="syz.0.2486" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 940.376305][ T30] audit: type=1400 audit(1757669330.502:1068): avc: denied { open } for pid=16036 comm="syz.0.2486" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 940.406078][ T5912] usb 3-1: device descriptor read/64, error -71 [ 940.428670][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 940.435103][ T5933] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 940.446092][ T5933] usb 4-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 940.456268][T16039] comedi comedi1: comedi_config --init_data is deprecated [ 940.463697][ T30] audit: type=1400 audit(1757669330.596:1069): avc: denied { accept } for pid=16036 comm="syz.0.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 940.484408][ T5933] usb 4-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 940.509288][ T5933] usb 4-1: Product: syz [ 940.527532][ T5933] usb 4-1: Manufacturer: syz [ 940.527775][ T5912] usb usb3-port1: attempt power cycle [ 940.532191][ T5933] usb 4-1: SerialNumber: syz [ 940.890771][ T5933] usb 4-1: Handspring Visor / Palm OS: No valid connect info available [ 940.908662][ T5933] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 940.918551][ T5933] usb 4-1: Handspring Visor / Palm OS: port 0, is for Generic use [ 940.970827][T16047] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2487'. [ 940.983525][ T5933] usb 4-1: Handspring Visor / Palm OS: Number of ports: 2 [ 941.105866][T16023] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 941.117801][T16023] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 941.694947][ T5933] usb 4-1: palm_os_3_probe - error -71 getting bytes available request [ 941.710364][ T5912] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 941.725840][ T5933] visor 4-1:1.0: Handspring Visor / Palm OS converter detected [ 941.749184][ T5912] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 941.754497][ T5933] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB0 [ 941.768684][ T5912] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 941.781821][ T5933] usb 4-1: Handspring Visor / Palm OS converter now attached to ttyUSB1 [ 941.782486][ T5912] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 941.796524][ T5933] usb 4-1: USB disconnect, device number 57 [ 941.853803][ T5933] visor ttyUSB0: Handspring Visor / Palm OS converter now disconnected from ttyUSB0 [ 941.931504][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 942.058390][ T5933] visor ttyUSB1: Handspring Visor / Palm OS converter now disconnected from ttyUSB1 [ 942.068600][ T5933] visor 4-1:1.0: device disconnected [ 942.206662][T16056] ntfs3(loop1): try to read out of volume at offset 0x0 [ 942.500339][ T5912] usb 3-1: can't set config #27, error -71 [ 942.595611][ T5912] usb 3-1: USB disconnect, device number 71 [ 944.521542][T16074] mmap: syz.0.2494 (16074): VmData 37728256 exceed data ulimit 8. Update limits or use boot option ignore_rlimit_data. [ 944.551161][T16063] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 944.577262][T16063] overlayfs: missing 'lowerdir' [ 944.758685][T16083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2498'. [ 946.364945][T16090] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2498'. [ 946.933137][T16098] BFS-fs: bfs_fill_super(): No BFS filesystem on nullb0 (magic=00000000) [ 948.568133][T16104] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2500'. [ 949.664158][ T5933] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 949.674821][T16104] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2500'. [ 951.016254][T16130] SELinux: syz.3.2508 (16130) set checkreqprot to 1. This is no longer supported. [ 951.029259][ T30] audit: type=1400 audit(1757669340.483:1070): avc: denied { setcheckreqprot } for pid=16127 comm="syz.3.2508" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 951.236528][T16138] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2510'. [ 951.257058][T16138] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2510'. [ 951.492281][ T5933] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 951.717027][T13067] usb 6-1: new high-speed USB device number 24 using dummy_hcd [ 951.759599][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 951.771730][ T5933] usb 4-1: unable to get BOS descriptor or descriptor too short [ 951.788430][ T5933] usb 4-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice= e.bf [ 951.802814][ T5933] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 951.819379][ T5933] usb 4-1: Product: syz [ 951.842622][ T5933] usb 4-1: Manufacturer: syz [ 951.850339][ T5933] usb 4-1: SerialNumber: syz [ 951.887795][T13067] usb 6-1: Using ep0 maxpacket: 8 [ 952.850971][ T5933] usb 4-1: selecting invalid altsetting 1 [ 952.872740][T13067] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 7 [ 952.895327][ T5933] catc 4-1:8.0: Can't set altsetting 1. [ 952.914160][ T5933] catc 4-1:8.0: probe with driver catc failed with error -5 [ 952.935808][T13067] usb 6-1: New USB device found, idVendor=082d, idProduct=0100, bcdDevice=70.4b [ 952.961927][T13067] usb 6-1: New USB device strings: Mfr=44, Product=2, SerialNumber=3 [ 952.980421][ T5933] usb 4-1: USB disconnect, device number 58 [ 953.006278][T13067] usb 6-1: Product: syz [ 953.040433][T13067] usb 6-1: Manufacturer: syz [ 953.070726][T13067] usb 6-1: SerialNumber: syz [ 953.801679][T13067] usb 6-1: palm_os_3_probe - error -110 getting connection information [ 953.812915][ T5992] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 953.821473][T13067] visor 6-1:1.0: probe with driver visor failed with error -110 [ 954.104755][ T5992] usb 1-1: Using ep0 maxpacket: 16 [ 954.111938][ T5992] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 954.120114][ T5992] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 954.130839][ T5992] usb 1-1: config 0 has no interface number 0 [ 954.140488][ T5992] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 954.151736][ T5992] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 954.170689][T16168] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2519'. [ 954.284237][ T5992] usb 1-1: Product: syz [ 954.288573][ T5992] usb 1-1: Manufacturer: syz [ 954.306139][ T5992] usb 1-1: SerialNumber: syz [ 954.336197][T16172] libceph: resolve 'c9' (ret=-3): failed [ 954.687147][T16173] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2519'. [ 955.138406][ T5992] usb 1-1: config 0 descriptor?? [ 955.155868][ T5992] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 955.163021][ T5992] usb 1-1: No valid video chain found. [ 955.379676][ T5933] usb 1-1: USB disconnect, device number 71 [ 955.918313][T16182] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 956.082551][T16182] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 956.832165][ T5912] usb 6-1: USB disconnect, device number 24 [ 957.778388][T14002] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 957.860650][T16202] binder: 16185:16202 ioctl 4008af75 200000000180 returned -22 [ 957.960178][T14002] usb 4-1: Using ep0 maxpacket: 8 [ 957.968889][T16204] bridge5: entered promiscuous mode [ 958.008183][T14002] usb 4-1: unable to get BOS descriptor or descriptor too short [ 958.025516][T14002] usb 4-1: config index 0 descriptor too short (expected 16420, got 36) [ 958.202507][T14002] usb 4-1: config 7 has an invalid interface number: 6 but max is 0 [ 958.214630][T14002] usb 4-1: config 7 has an invalid descriptor of length 0, skipping remainder of the config [ 958.236206][T14002] usb 4-1: config 7 has no interface number 0 [ 958.251821][T14002] usb 4-1: config 7 interface 6 altsetting 254 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 958.297199][T14002] usb 4-1: config 7 interface 6 has no altsetting 0 [ 958.333637][T14002] usb 4-1: New USB device found, idVendor=1a8d, idProduct=100d, bcdDevice=10.9e [ 958.344952][ T5912] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 958.359650][T14002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 958.369597][T14002] usb 4-1: Product: syz [ 958.373803][T14002] usb 4-1: Manufacturer: syz [ 958.381085][T14002] usb 4-1: SerialNumber: syz [ 958.526618][ T5912] usb 3-1: Using ep0 maxpacket: 32 [ 958.533378][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 958.546454][ T5912] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 958.598496][ T5912] usb 3-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 958.639431][T14002] option 4-1:7.6: GSM modem (1-port) converter detected [ 958.657277][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.683909][T14002] usb 4-1: USB disconnect, device number 59 [ 958.710002][ T5912] usb 3-1: config 0 descriptor?? [ 958.729767][T13067] usb 6-1: new high-speed USB device number 25 using dummy_hcd [ 958.735322][T14002] option 4-1:7.6: device disconnected [ 958.755847][ T5912] hub 3-1:0.0: USB hub found [ 958.973790][ T5912] hub 3-1:0.0: 1 port detected [ 958.997004][T13067] usb 6-1: Using ep0 maxpacket: 32 [ 959.089493][T13067] usb 6-1: config 0 has an invalid interface number: 51 but max is 0 [ 959.108338][T16214] Invalid source name [ 959.121499][T13067] usb 6-1: config 0 has no interface number 0 [ 959.183290][T13067] usb 6-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 959.194520][T13067] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 959.231075][T13067] usb 6-1: Product: syz [ 959.243688][T13067] usb 6-1: Manufacturer: syz [ 959.268953][T13067] usb 6-1: SerialNumber: syz [ 959.441085][T13067] usb 6-1: config 0 descriptor?? [ 959.453432][T13067] quatech2 6-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 959.979154][T13067] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 960.028897][T13067] usb 6-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 960.076818][ T5912] hub 3-1:0.0: hub_hub_status failed (err = -32) [ 960.099374][ T5912] hub 3-1:0.0: config failed, can't get hub status (err -32) [ 960.139535][ T5912] usbhid 3-1:0.0: can't add hid device: -32 [ 960.158107][ T5912] usbhid 3-1:0.0: probe with driver usbhid failed with error -32 [ 960.237344][T14002] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 960.814777][T14002] usb 2-1: Using ep0 maxpacket: 16 [ 960.859809][T16239] netlink: 'syz.5.2529': attribute type 8 has an invalid length. [ 961.063179][T14002] usb 2-1: config 0 has an invalid interface number: 105 but max is 0 [ 961.213063][T14002] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 961.237971][T14002] usb 2-1: config 0 has no interface number 0 [ 961.259264][T14002] usb 2-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 961.268499][T14002] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 961.313294][T14002] usb 2-1: Product: syz [ 961.317589][T14002] usb 2-1: Manufacturer: syz [ 961.332426][ C1] usb 6-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 961.333587][T13996] usb 6-1: USB disconnect, device number 25 [ 961.347384][T14002] usb 2-1: SerialNumber: syz [ 961.360366][T13067] usb 3-1: USB disconnect, device number 73 [ 961.361459][T14002] usb 2-1: config 0 descriptor?? [ 961.384324][T13996] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 961.499913][T14002] usb 2-1: Found UVC 0.00 device syz (046d:08f3) [ 961.526556][T13996] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 961.541589][T14002] usb 2-1: No valid video chain found. [ 961.573762][T13996] quatech2 6-1:0.51: device disconnected [ 961.720853][T14002] usb 2-1: USB disconnect, device number 56 [ 961.788905][T16253] vivid-002: disconnect [ 961.859237][T16248] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2537'. [ 961.919690][T16252] vivid-002: reconnect [ 962.251742][ T30] audit: type=1400 audit(1757669350.941:1071): avc: denied { write } for pid=16254 comm="syz.3.2540" path="socket:[57053]" dev="sockfs" ino=57053 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 963.609843][T16262] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.2542'. [ 963.621845][T16262] netlink: 'syz.3.2542': attribute type 10 has an invalid length. [ 963.656822][T16262] netlink: 'syz.3.2542': attribute type 10 has an invalid length. [ 963.664774][T16262] netlink: 2 bytes leftover after parsing attributes in process `syz.3.2542'. [ 963.932592][T16271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2544'. [ 963.945108][T16271] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2544'. [ 964.109476][ T30] audit: type=1326 audit(1757669352.737:1072): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16268 comm="syz.0.2545" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f06f278eba9 code=0x0 [ 964.236729][T16273] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2545'. [ 965.290661][T16285] netlink: 388 bytes leftover after parsing attributes in process `syz.1.2549'. [ 965.300231][T16285] netlink: 336 bytes leftover after parsing attributes in process `syz.1.2549'. [ 966.223988][ T30] audit: type=1400 audit(1757669353.878:1073): avc: denied { remount } for pid=16281 comm="syz.1.2549" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 966.393290][ T30] audit: type=1400 audit(1757669354.748:1074): avc: denied { unmount } for pid=5860 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 966.395212][T16290] netlink: 160 bytes leftover after parsing attributes in process `syz.3.2550'. [ 966.477015][ T30] audit: type=1400 audit(1757669354.813:1075): avc: denied { map } for pid=16282 comm="syz.0.2548" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 966.691706][T16305] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2551'. [ 966.789086][T16302] FAULT_INJECTION: forcing a failure. [ 966.789086][T16302] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 966.808516][T16302] CPU: 0 UID: 0 PID: 16302 Comm: syz.1.2551 Not tainted syzkaller #0 PREEMPT(full) [ 966.808543][T16302] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 966.808552][T16302] Call Trace: [ 966.808556][T16302] [ 966.808562][T16302] dump_stack_lvl+0x16c/0x1f0 [ 966.808582][T16302] should_fail_ex+0x512/0x640 [ 966.808600][T16302] _copy_from_user+0x2e/0xd0 [ 966.808617][T16302] copy_msghdr_from_user+0x98/0x160 [ 966.808633][T16302] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 966.808654][T16302] ___sys_sendmsg+0xfe/0x1d0 [ 966.808669][T16302] ? __pfx____sys_sendmsg+0x10/0x10 [ 966.808701][T16302] __sys_sendmsg+0x16d/0x220 [ 966.808715][T16302] ? __pfx___sys_sendmsg+0x10/0x10 [ 966.808739][T16302] do_syscall_64+0xcd/0x4e0 [ 966.808755][T16302] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 966.808767][T16302] RIP: 0033:0x7f80c9b8eba9 [ 966.808777][T16302] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 966.808788][T16302] RSP: 002b:00007f80caaba038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 966.808800][T16302] RAX: ffffffffffffffda RBX: 00007f80c9dd5fa0 RCX: 00007f80c9b8eba9 [ 966.808807][T16302] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000008 [ 966.808814][T16302] RBP: 00007f80caaba090 R08: 0000000000000000 R09: 0000000000000000 [ 966.808821][T16302] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 966.808828][T16302] R13: 00007f80c9dd6038 R14: 00007f80c9dd5fa0 R15: 00007ffd815f0f08 [ 966.808843][T16302] [ 966.981404][T13996] libceph: connect (1)[c::]:6789 error -101 [ 966.987499][T13996] libceph: mon0 (1)[c::]:6789 connect error [ 967.261810][T13996] libceph: connect (1)[c::]:6789 error -101 [ 967.270506][T16310] ceph: No mds server is up or the cluster is laggy [ 967.278459][T13996] libceph: mon0 (1)[c::]:6789 connect error [ 967.560171][T13067] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 967.838282][T13067] usb 3-1: device descriptor read/64, error -71 [ 968.029406][ T30] audit: type=1400 audit(1757669356.394:1076): avc: denied { read } for pid=16329 comm="syz.0.2558" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 968.053817][ C1] vkms_vblank_simulate: vblank timer overrun [ 968.163299][ T30] audit: type=1400 audit(1757669356.394:1077): avc: denied { open } for pid=16329 comm="syz.0.2558" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 968.201438][ T30] audit: type=1400 audit(1757669356.553:1078): avc: denied { map } for pid=16331 comm="syz.5.2559" path="socket:[57188]" dev="sockfs" ino=57188 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 968.698547][T13067] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 968.722226][ T30] audit: type=1400 audit(1757669356.656:1079): avc: denied { ioctl } for pid=16329 comm="syz.0.2558" path="/dev/loop-control" dev="devtmpfs" ino=646 ioctlcmd=0x4c80 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 968.782482][ T30] audit: type=1400 audit(1757669356.955:1080): avc: denied { accept } for pid=16329 comm="syz.0.2558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 969.008074][T13067] usb 3-1: device descriptor read/64, error -71 [ 969.206003][T13067] usb usb3-port1: attempt power cycle [ 971.220442][T16364] __nla_validate_parse: 2 callbacks suppressed [ 971.220476][T16364] netlink: 204732 bytes leftover after parsing attributes in process `syz.2.2565'. [ 971.797676][T16364] netlink: 'syz.2.2565': attribute type 10 has an invalid length. [ 972.119002][T16377] loop2: detected capacity change from 0 to 7 [ 972.148134][T16377] Dev loop2: unable to read RDB block 7 [ 972.153709][T16377] loop2: unable to read partition table [ 972.213624][T16377] loop2: partition table beyond EOD, truncated [ 972.225166][T16378] netlink: 'syz.2.2565': attribute type 10 has an invalid length. [ 972.237443][T16378] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2565'. [ 972.419672][T16377] loop_reread_partitions: partition scan of loop2 (þ被xü—ŸÑà– ) failed (rc=-5) [ 972.437010][T16371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2566'. [ 972.452794][T16371] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2566'. [ 973.771277][T16388] ntfs3(loop5): try to read out of volume at offset 0x0 [ 975.162959][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2577'. [ 975.472352][T16415] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2577'. [ 975.839781][T16417] netlink: 160 bytes leftover after parsing attributes in process `syz.2.2579'. [ 976.150900][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 976.158369][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 977.747727][T16431] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2581'. [ 977.756869][T16431] net_ratelimit: 3 callbacks suppressed [ 977.756880][T16431] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 978.247719][T16447] netlink: 755 bytes leftover after parsing attributes in process `syz.1.2584'. [ 978.860299][T16451] 9pnet_fd: Insufficient options for proto=fd [ 979.045898][T16456] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=0 sclass=netlink_tcpdiag_socket pid=16456 comm=syz.2.2586 [ 979.959642][ T30] audit: type=1400 audit(1757669367.554:1081): avc: denied { create } for pid=16463 comm="syz.5.2590" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 981.437609][T13067] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 981.464814][T16480] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2593'. [ 981.662708][T13067] usb 2-1: Using ep0 maxpacket: 32 [ 981.669151][T13067] usb 2-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 981.678334][T13067] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 981.689581][T13067] usb 2-1: config 0 descriptor?? [ 982.306318][T13067] dvb-usb: found a 'Elgato EyeTV Sat' in cold state, will try to load a firmware [ 982.331734][T13067] usb 2-1: Direct firmware load for dvb-usb-az6027-03.fw failed with error -2 [ 982.368714][ T30] audit: type=1400 audit(1757669369.817:1082): avc: denied { firmware_load } for pid=13067 comm="kworker/1:3" scontext=system_u:system_r:kernel_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 982.368737][T13067] usb 2-1: Falling back to sysfs fallback for: dvb-usb-az6027-03.fw [ 982.632896][T16490] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2596'. [ 982.642290][T16490] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2596'. [ 982.750305][ T30] audit: type=1400 audit(1757669370.098:1083): avc: denied { read } for pid=16487 comm="syz.5.2596" dev="sockfs" ino=57613 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 983.299339][T13996] usb 6-1: new high-speed USB device number 26 using dummy_hcd [ 983.472102][T13996] usb 6-1: Using ep0 maxpacket: 32 [ 983.484453][T13996] usb 6-1: config 0 has an invalid interface number: 196 but max is 0 [ 983.512972][T13996] usb 6-1: config 0 has no interface number 0 [ 983.535633][T13996] usb 6-1: config 0 interface 196 has no altsetting 0 [ 983.553692][ T30] audit: type=1400 audit(1757669370.912:1084): avc: denied { mount } for pid=16494 comm="syz.0.2598" name="/" dev="autofs" ino=57625 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 983.603480][T13996] usb 6-1: New USB device found, idVendor=05ac, idProduct=77c2, bcdDevice=eb.3a [ 983.615408][T13996] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 983.626042][ T30] audit: type=1400 audit(1757669370.977:1085): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 983.648658][T13996] usb 6-1: Product: syz [ 983.653149][T13996] usb 6-1: Manufacturer: syz [ 983.864774][T13996] usb 6-1: SerialNumber: syz [ 984.011065][T13996] usb 6-1: config 0 descriptor?? [ 984.214757][ T30] audit: type=1400 audit(1757669371.538:1086): avc: denied { shutdown } for pid=16498 comm="syz.1.2600" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 984.435418][ T5933] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 984.438037][ T30] audit: type=1400 audit(1757669371.744:1087): avc: denied { mount } for pid=16506 comm="syz.1.2603" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 984.761769][ T5933] usb 1-1: Using ep0 maxpacket: 16 [ 985.525855][ T5933] usb 1-1: config 0 has an invalid interface number: 105 but max is 0 [ 985.537968][ T5933] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 985.548282][ T5933] usb 1-1: config 0 has no interface number 0 [ 985.556344][ T5933] usb 1-1: New USB device found, idVendor=046d, idProduct=08f3, bcdDevice= b.28 [ 985.565873][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 985.686151][ T5933] usb 1-1: Product: syz [ 985.687160][T13996] ipheth 6-1:0.196: Unable to find endpoints [ 985.690326][ T5933] usb 1-1: Manufacturer: syz [ 985.700921][ T5933] usb 1-1: SerialNumber: syz [ 985.708192][ T5933] usb 1-1: config 0 descriptor?? [ 985.725853][ T5933] usb 1-1: Found UVC 0.00 device syz (046d:08f3) [ 985.732201][ T5933] usb 1-1: No valid video chain found. [ 985.744175][T13996] usb 6-1: USB disconnect, device number 26 [ 985.972992][ T5933] usb 1-1: USB disconnect, device number 72 [ 986.514654][ T5912] usb 4-1: new high-speed USB device number 60 using dummy_hcd [ 986.949548][ T5912] usb 4-1: config 9 has an invalid descriptor of length 127, skipping remainder of the config [ 987.041099][ T5912] usb 4-1: config 9 has 0 interfaces, different from the descriptor's value: 1 [ 987.074250][ T5912] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 987.300543][ T5912] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 987.320592][ T5912] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 987.431851][ T5912] usb 4-1: no configuration chosen from 1 choice [ 987.823697][T16535] netlink: 48 bytes leftover after parsing attributes in process `syz.5.2607'. [ 987.832958][T16535] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2607'. [ 988.050534][T16535] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2607'. [ 989.380541][ T30] audit: type=1400 audit(1757669376.318:1088): avc: denied { write } for pid=16542 comm="syz.2.2611" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 989.555862][ T5933] usb 4-1: USB disconnect, device number 60 [ 990.393701][T14002] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 990.844792][T14002] usb 3-1: config 118 interface 0 has no altsetting 0 [ 991.162812][T14002] usb 3-1: New USB device found, idVendor=13d3, idProduct=3211, bcdDevice=7a.67 [ 991.232006][T14002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.243902][T16566] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2615'. [ 991.258013][T16566] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2615'. [ 991.303332][T16568] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2613'. [ 991.337938][T14002] usb 3-1: Product: syz [ 991.342109][T14002] usb 3-1: Manufacturer: syz [ 991.352417][T14002] usb 3-1: SerialNumber: syz [ 991.375662][T14002] usb 3-1: can't set config #118, error -71 [ 991.442321][T14002] usb 3-1: USB disconnect, device number 77 [ 991.550657][ T5992] usb 4-1: new high-speed USB device number 61 using dummy_hcd [ 991.710391][ T5992] usb 4-1: Using ep0 maxpacket: 32 [ 991.720853][ T5992] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 991.729315][ T5992] usb 4-1: config 0 has no interface number 0 [ 991.738792][ T5992] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 991.748157][ T5992] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 991.780289][ T5992] usb 4-1: Product: syz [ 991.787477][ T5992] usb 4-1: Manufacturer: syz [ 991.796558][ T5992] usb 4-1: SerialNumber: syz [ 991.812421][ T5992] usb 4-1: config 0 descriptor?? [ 991.841700][ T5992] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 992.216021][ T5992] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 992.509701][ T5992] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 992.651882][T16571] netlink: 'syz.3.2617': attribute type 8 has an invalid length. [ 993.279028][ C1] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 993.288471][T14002] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 993.315200][ T5992] usb 4-1: USB disconnect, device number 61 [ 993.347432][ T5992] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 993.394657][ T5992] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 993.417693][T16591] netlink: 'syz.0.2623': attribute type 1 has an invalid length. [ 993.435247][ T5992] quatech2 4-1:0.51: device disconnected [ 993.518513][T14002] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 993.535707][T14002] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 993.549050][T14002] usb 3-1: config 1 has no interface number 0 [ 993.555713][T14002] usb 3-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 993.566675][T14002] usb 3-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 993.580530][T14002] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 993.595116][ T30] audit: type=1400 audit(1757669380.312:1089): avc: denied { read } for pid=16574 comm="syz.5.2618" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 993.600784][T14002] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 993.637013][T14002] usb 3-1: Product: syz [ 993.644404][T14002] usb 3-1: Manufacturer: syz [ 993.650824][ T30] audit: type=1400 audit(1757669380.340:1090): avc: denied { open } for pid=16574 comm="syz.5.2618" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 993.655169][T14002] usb 3-1: SerialNumber: syz [ 993.720175][ T30] audit: type=1400 audit(1757669380.359:1091): avc: denied { setopt } for pid=16592 comm="syz.1.2624" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 994.480987][T16602] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2625'. [ 994.526593][T16602] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 994.533828][T16602] IPv6: NLM_F_CREATE should be set when creating new route [ 994.597683][T16585] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 994.607939][T16585] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 994.642337][T14002] cdc_ncm 3-1:1.1: failed GET_NTB_PARAMETERS [ 994.648357][T14002] cdc_ncm 3-1:1.1: bind() failure [ 994.706270][T14002] usb 3-1: USB disconnect, device number 78 [ 994.831942][ T5933] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 995.136593][ T5912] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 995.152711][ T5933] usb 1-1: Using ep0 maxpacket: 32 [ 995.210793][T16615] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2628'. [ 995.221130][T16615] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2628'. [ 995.290465][ T5933] usb 1-1: config 0 has an invalid interface number: 192 but max is 0 [ 995.300387][ T5933] usb 1-1: config 0 has no interface number 0 [ 995.306963][ T5933] usb 1-1: config 0 interface 192 has no altsetting 0 [ 995.320411][ T5933] usb 1-1: New USB device found, idVendor=0bfd, idProduct=0022, bcdDevice=f4.c6 [ 995.329835][ T5933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.349888][ T5933] usb 1-1: Product: syz [ 995.357874][ T5933] usb 1-1: Manufacturer: syz [ 995.362598][ T5933] usb 1-1: SerialNumber: syz [ 995.397105][ T5912] usb 4-1: New USB device found, idVendor=13d8, idProduct=0011, bcdDevice=d0.62 [ 995.426093][ T5912] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 995.444973][ T5912] usb 4-1: Product: syz [ 995.449155][ T5912] usb 4-1: Manufacturer: syz [ 995.564357][ T5933] usb 1-1: config 0 descriptor?? [ 995.584680][ T5933] kvaser_usb 1-1:0.192: error -ENODEV: Cannot get usb endpoint(s) [ 995.597932][ T5912] usb 4-1: SerialNumber: syz [ 996.076923][ T5912] usb 4-1: config 0 descriptor?? [ 996.164995][ T5912] usb 4-1: selecting invalid altsetting 1 [ 996.176844][ T5912] comedi comedi5: could not switch to alternate setting 1 [ 996.197783][ T5912] usbduxfast 4-1:0.0: driver 'usbduxfast' failed to auto-configure device. [ 996.304416][T16626] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2629'. [ 996.497481][ T5912] usb 4-1: USB disconnect, device number 62 [ 998.211175][ T5912] usb 1-1: USB disconnect, device number 73 [ 998.552574][T14002] usb 4-1: new high-speed USB device number 63 using dummy_hcd [ 998.846536][T16660] netlink: 256 bytes leftover after parsing attributes in process `syz.5.2639'. [ 998.990630][T14002] usb 4-1: Using ep0 maxpacket: 32 [ 999.177327][T16648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2635'. [ 999.197158][T14002] usb 4-1: config 0 has an invalid interface number: 51 but max is 0 [ 999.207592][T14002] usb 4-1: config 0 has no interface number 0 [ 999.215943][T14002] usb 4-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 999.225182][T14002] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 999.233294][T14002] usb 4-1: Product: syz [ 999.237736][T14002] usb 4-1: Manufacturer: syz [ 999.242423][T14002] usb 4-1: SerialNumber: syz [ 999.248966][T14002] usb 4-1: config 0 descriptor?? [ 999.257511][T14002] quatech2 4-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 999.505966][T14002] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 999.525239][T14002] usb 4-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 999.613093][T16665] loop6: detected capacity change from 0 to 6 [ 999.637063][T16322] Dev loop6: unable to read RDB block 6 [ 999.651882][T16322] loop6: unable to read partition table [ 999.663355][T16322] loop6: partition table beyond EOD, truncated [ 999.674143][T16665] Dev loop6: unable to read RDB block 6 [ 999.679903][T16665] loop6: unable to read partition table [ 999.686837][T16665] loop6: partition table beyond EOD, truncated [ 999.706005][T16665] loop_reread_partitions: partition scan of loop6 (þ被xü—ŸÑà– ) failed (rc=-5) [ 999.842056][T16667] netlink: 'syz.3.2636': attribute type 8 has an invalid length. [ 1000.479808][T16673] comedi comedi1: bad chanlist[0]=0x00000004 chan=4 range length=1 [ 1000.510885][ C0] usb 4-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1000.519954][ T5912] usb 4-1: USB disconnect, device number 63 [ 1000.545096][ T5912] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1000.578945][T16675] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2643'. [ 1000.586411][ T5912] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1000.610311][ T5912] quatech2 4-1:0.51: device disconnected [ 1000.643656][T16675] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2643'. [ 1001.560944][T16686] netlink: 755 bytes leftover after parsing attributes in process `syz.5.2646'. [ 1002.447166][ T30] audit: type=1400 audit(1757669388.496:1092): avc: denied { ioctl } for pid=16678 comm="syz.2.2645" path="socket:[57942]" dev="sockfs" ino=57942 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 1003.255529][ T30] audit: type=1400 audit(1757669388.505:1093): avc: denied { write } for pid=16678 comm="syz.2.2645" lport=45010 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1003.279097][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.288745][ T30] audit: type=1400 audit(1757669388.505:1094): avc: denied { mount } for pid=16678 comm="syz.2.2645" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 1003.310895][ C0] vkms_vblank_simulate: vblank timer overrun [ 1003.546637][T16695] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2648'. [ 1003.745644][T16687] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2645'. [ 1003.827928][T16701] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1004.068562][T16703] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2650'. [ 1005.090451][T16709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1005.116578][T16709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1005.446123][ T30] audit: type=1400 audit(1757669391.396:1095): avc: denied { setattr } for pid=16715 comm="syz.5.2655" name="/" dev="9p" ino=18230837186159307689 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 [ 1005.469946][ C0] vkms_vblank_simulate: vblank timer overrun [ 1006.667019][ T5912] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1006.706648][T16720] tmpfs: Unknown parameter 'quotÜa•ÝTÉ' [ 1006.742558][T16720] overlayfs: missing 'lowerdir' [ 1006.827235][ T5912] usb 3-1: Using ep0 maxpacket: 16 [ 1006.835278][ T5912] usb 3-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1006.846921][ T5912] usb 3-1: config 0 interface 0 has no altsetting 0 [ 1006.863458][ T5912] usb 3-1: New USB device found, idVendor=18d1, idProduct=9400, bcdDevice= 0.00 [ 1006.920729][ T5912] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1007.004649][ T5912] usb 3-1: config 0 descriptor?? [ 1007.542809][ T5912] stadia 0003:18D1:9400.000F: unknown main item tag 0x0 [ 1007.551685][ T5912] stadia 0003:18D1:9400.000F: unknown main item tag 0x0 [ 1007.562912][ T5912] stadia 0003:18D1:9400.000F: unknown main item tag 0x0 [ 1007.577811][ T5912] stadia 0003:18D1:9400.000F: unknown main item tag 0x0 [ 1007.592065][ T5912] stadia 0003:18D1:9400.000F: unknown main item tag 0x0 [ 1007.625448][ T5912] stadia 0003:18D1:9400.000F: hidraw0: USB HID v0.05 Device [HID 18d1:9400] on usb-dummy_hcd.2-1/input0 [ 1007.655034][ T5912] stadia 0003:18D1:9400.000F: no inputs found [ 1007.669899][ T5912] stadia 0003:18D1:9400.000F: force feedback init failed [ 1007.784259][T16751] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1007.802401][T16751] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1008.261951][T16758] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2663'. [ 1008.874191][T16767] libceph: resolve 'c9' (ret=-3): failed [ 1009.303410][ T30] audit: type=1400 audit(1757669395.006:1096): avc: denied { setopt } for pid=16760 comm="syz.0.2666" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1009.534225][T16769] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2663'. [ 1009.837782][T13064] usb 3-1: USB disconnect, device number 79 [ 1010.644067][T16779] vxcan1 speed is unknown, defaulting to 1000 [ 1010.825104][T14013] usb 4-1: new high-speed USB device number 64 using dummy_hcd [ 1011.096227][T16788] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1011.154632][T16788] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2671'. [ 1011.202206][T14013] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.214878][T14013] usb 4-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1011.335859][T14013] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1011.389263][T14013] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1011.525370][T16799] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2673'. [ 1011.566775][T14013] usb 4-1: Product: syz [ 1011.574887][T14013] usb 4-1: Manufacturer: syz [ 1011.607318][T14013] usb 4-1: SerialNumber: syz [ 1012.601021][T16776] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1012.670194][T16776] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1012.788002][T14013] cdc_ether 4-1:1.0: probe with driver cdc_ether failed with error -22 [ 1012.800132][T14013] usb 4-1: USB disconnect, device number 64 [ 1012.956417][T16811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2678'. [ 1013.197008][T16815] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2678'. [ 1013.592039][T14013] usb 4-1: new high-speed USB device number 65 using dummy_hcd [ 1013.894696][T14013] usb 4-1: Using ep0 maxpacket: 8 [ 1013.905463][T14013] usb 4-1: config index 0 descriptor too short (expected 301, got 72) [ 1013.913647][T14013] usb 4-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 1013.946267][T14013] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 1013.997305][T14013] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 1014.116236][T14013] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 1014.230326][T14013] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1014.397335][T14013] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1014.476732][T14013] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 1014.577084][T14013] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1014.639851][T14013] usb 4-1: can't set config #16, error -71 [ 1014.658363][T14013] usb 4-1: USB disconnect, device number 65 [ 1015.001415][T16831] syz_tun: entered promiscuous mode [ 1015.011955][T16831] batadv_slave_0: entered promiscuous mode [ 1015.031279][T16831] hsr1: entered allmulticast mode [ 1015.036400][T16831] syz_tun: entered allmulticast mode [ 1015.041841][T16831] batadv_slave_0: entered allmulticast mode [ 1016.784050][ T30] audit: type=1400 audit(1757669401.376:1097): avc: denied { mount } for pid=16837 comm="syz.5.2684" name="/" dev="hugetlbfs" ino=58231 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1016.908541][T16841] netlink: 204732 bytes leftover after parsing attributes in process `syz.3.2682'. [ 1017.022775][ T30] audit: type=1400 audit(1757669401.376:1098): avc: denied { remount } for pid=16837 comm="syz.5.2684" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1017.100191][ T30] audit: type=1400 audit(1757669402.274:1099): avc: denied { unmount } for pid=13266 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:hugetlbfs_t tclass=filesystem permissive=1 [ 1017.708244][ T30] audit: type=1400 audit(1757669402.864:1100): avc: denied { read } for pid=16850 comm="syz.5.2687" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1017.742068][ T30] audit: type=1400 audit(1757669402.864:1101): avc: denied { open } for pid=16850 comm="syz.5.2687" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1017.782197][ T30] audit: type=1400 audit(1757669402.864:1102): avc: denied { map } for pid=16850 comm="syz.5.2687" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 1017.808666][T16853] smc: removing ib device syz2 [ 1018.371990][T16853] ------------[ cut here ]------------ [ 1018.377486][T16853] WARNING: CPU: 1 PID: 16853 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 1018.388255][T16853] Modules linked in: [ 1018.392318][T16853] CPU: 1 UID: 0 PID: 16853 Comm: syz.2.2686 Not tainted syzkaller #0 PREEMPT(full) [ 1018.401718][T16853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1018.411762][T16853] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 1018.417222][T16853] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 25 f6 fc f8 e8 20 f6 fc f8 90 <0f> 0b 90 5b e9 16 f6 fc f8 e8 81 55 63 f9 eb da 66 66 2e 0f 1f 84 [ 1018.436823][T16853] RSP: 0018:ffffc900046ef1c8 EFLAGS: 00010246 [ 1018.442867][T16853] RAX: 0000000000080000 RBX: ffff88803371d358 RCX: ffffc9000f813000 [ 1018.450825][T16853] RDX: 0000000000080000 RSI: ffffffff88bea8b0 RDI: ffff88803371d3d8 [ 1018.458784][T16853] RBP: ffffffff88bd0d50 R08: 0000000000000005 R09: 0000000000000001 [ 1018.466729][T16853] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88803371c698 [ 1018.474696][T16853] R13: ffff88803371bfe0 R14: ffff88803371bfe0 R15: ffff88803371d0b8 [ 1018.482718][T16853] FS: 00007fa30dbac6c0(0000) GS:ffff8881247b3000(0000) knlGS:0000000000000000 [ 1018.491659][T16853] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 1018.498218][T16853] CR2: 0000001b326eaff8 CR3: 000000001fb8c000 CR4: 00000000003526f0 [ 1018.506178][T16853] Call Trace: [ 1018.509446][T16853] [ 1018.512379][T16853] rxe_dealloc+0x25/0xc0 [ 1018.516604][T16853] ib_dealloc_device+0x46/0x230 [ 1018.521518][T16853] __ib_unregister_device+0x396/0x480 [ 1018.526900][T16853] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1018.532782][T16853] ib_unregister_device_and_put+0x5a/0x80 [ 1018.538504][T16853] nldev_dellink+0x21f/0x320 [ 1018.543072][T16853] ? __pfx_nldev_dellink+0x10/0x10 [ 1018.548215][T16853] ? cap_capable+0xb3/0x250 [ 1018.552697][T16853] ? bpf_lsm_capable+0x9/0x10 [ 1018.557362][T16853] ? security_capable+0x7e/0x260 [ 1018.562290][T16853] ? ns_capable+0xd7/0x110 [ 1018.566734][T16853] ? __pfx_nldev_dellink+0x10/0x10 [ 1018.571824][T16853] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1018.576578][T16853] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1018.581843][T16853] ? __lock_acquire+0x62e/0x1ce0 [ 1018.586804][T16853] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 1018.593199][T16853] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1018.600144][T16853] ? netlink_deliver_tap+0x1ae/0xd30 [ 1018.605406][T16853] ? selinux_netlink_send+0x578/0x830 [ 1018.610763][T16853] ? is_vmalloc_addr+0x86/0xa0 [ 1018.615503][T16853] netlink_unicast+0x5aa/0x870 [ 1018.620273][T16853] ? __pfx_netlink_unicast+0x10/0x10 [ 1018.625540][T16853] netlink_sendmsg+0x8d1/0xdd0 [ 1018.630294][T16853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1018.635573][T16853] ____sys_sendmsg+0xa98/0xc70 [ 1018.640348][T16853] ? copy_msghdr_from_user+0x10a/0x160 [ 1018.645783][T16853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1018.651131][T16853] ? __pfx_futex_wake_mark+0x10/0x10 [ 1018.656396][T16853] ___sys_sendmsg+0x134/0x1d0 [ 1018.661059][T16853] ? __pfx____sys_sendmsg+0x10/0x10 [ 1018.666272][T16853] __sys_sendmsg+0x16d/0x220 [ 1018.670852][T16853] ? __pfx___sys_sendmsg+0x10/0x10 [ 1018.675964][T16853] ? __x64_sys_futex+0x1e0/0x4c0 [ 1018.680885][T16853] do_syscall_64+0xcd/0x4e0 [ 1018.685380][T16853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1018.691261][T16853] RIP: 0033:0x7fa30f98eba9 [ 1018.695687][T16853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1018.715300][T16853] RSP: 002b:00007fa30dbac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1018.723700][T16853] RAX: ffffffffffffffda RBX: 00007fa30fbd6180 RCX: 00007fa30f98eba9 [ 1018.731657][T16853] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 1018.739637][T16853] RBP: 00007fa30fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1018.747594][T16853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1018.755551][T16853] R13: 00007fa30fbd6218 R14: 00007fa30fbd6180 R15: 00007ffce417de08 [ 1018.763520][T16853] [ 1018.766515][T16853] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 1018.773766][T16853] CPU: 1 UID: 0 PID: 16853 Comm: syz.2.2686 Not tainted syzkaller #0 PREEMPT(full) [ 1018.783105][T16853] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 1018.793133][T16853] Call Trace: [ 1018.796441][T16853] [ 1018.799361][T16853] dump_stack_lvl+0x3d/0x1f0 [ 1018.803930][T16853] vpanic+0x6e8/0x7a0 [ 1018.807883][T16853] ? __pfx_vpanic+0x10/0x10 [ 1018.812363][T16853] ? rxe_pool_cleanup+0x41/0x60 [ 1018.817190][T16853] panic+0xca/0xd0 [ 1018.820886][T16853] ? __pfx_panic+0x10/0x10 [ 1018.825296][T16853] check_panic_on_warn+0xab/0xb0 [ 1018.830217][T16853] __warn+0xf6/0x3c0 [ 1018.834085][T16853] ? rxe_pool_cleanup+0x41/0x60 [ 1018.838911][T16853] report_bug+0x3c3/0x580 [ 1018.843214][T16853] ? rxe_pool_cleanup+0x41/0x60 [ 1018.848040][T16853] handle_bug+0x184/0x210 [ 1018.852348][T16853] exc_invalid_op+0x17/0x50 [ 1018.856831][T16853] asm_exc_invalid_op+0x1a/0x20 [ 1018.861652][T16853] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 1018.867089][T16853] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 25 f6 fc f8 e8 20 f6 fc f8 90 <0f> 0b 90 5b e9 16 f6 fc f8 e8 81 55 63 f9 eb da 66 66 2e 0f 1f 84 [ 1018.886688][T16853] RSP: 0018:ffffc900046ef1c8 EFLAGS: 00010246 [ 1018.892742][T16853] RAX: 0000000000080000 RBX: ffff88803371d358 RCX: ffffc9000f813000 [ 1018.900687][T16853] RDX: 0000000000080000 RSI: ffffffff88bea8b0 RDI: ffff88803371d3d8 [ 1018.908629][T16853] RBP: ffffffff88bd0d50 R08: 0000000000000005 R09: 0000000000000001 [ 1018.916573][T16853] R10: 0000000000000002 R11: 0000000000000000 R12: ffff88803371c698 [ 1018.924522][T16853] R13: ffff88803371bfe0 R14: ffff88803371bfe0 R15: ffff88803371d0b8 [ 1018.932483][T16853] ? __pfx_rxe_dealloc+0x10/0x10 [ 1018.937398][T16853] ? rxe_pool_cleanup+0x40/0x60 [ 1018.942225][T16853] ? rxe_pool_cleanup+0x40/0x60 [ 1018.947048][T16853] rxe_dealloc+0x25/0xc0 [ 1018.951266][T16853] ib_dealloc_device+0x46/0x230 [ 1018.956107][T16853] __ib_unregister_device+0x396/0x480 [ 1018.961456][T16853] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 1018.967331][T16853] ib_unregister_device_and_put+0x5a/0x80 [ 1018.973030][T16853] nldev_dellink+0x21f/0x320 [ 1018.977599][T16853] ? __pfx_nldev_dellink+0x10/0x10 [ 1018.982723][T16853] ? cap_capable+0xb3/0x250 [ 1018.987204][T16853] ? bpf_lsm_capable+0x9/0x10 [ 1018.991856][T16853] ? security_capable+0x7e/0x260 [ 1018.996771][T16853] ? ns_capable+0xd7/0x110 [ 1019.001165][T16853] ? __pfx_nldev_dellink+0x10/0x10 [ 1019.006267][T16853] rdma_nl_rcv_msg+0x38a/0x6e0 [ 1019.011022][T16853] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 1019.016287][T16853] ? __lock_acquire+0x62e/0x1ce0 [ 1019.021210][T16853] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 1019.027605][T16853] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 1019.034522][T16853] ? netlink_deliver_tap+0x1ae/0xd30 [ 1019.039781][T16853] ? selinux_netlink_send+0x578/0x830 [ 1019.045135][T16853] ? is_vmalloc_addr+0x86/0xa0 [ 1019.049877][T16853] netlink_unicast+0x5aa/0x870 [ 1019.054633][T16853] ? __pfx_netlink_unicast+0x10/0x10 [ 1019.059902][T16853] netlink_sendmsg+0x8d1/0xdd0 [ 1019.064645][T16853] ? __pfx_netlink_sendmsg+0x10/0x10 [ 1019.069910][T16853] ____sys_sendmsg+0xa98/0xc70 [ 1019.074740][T16853] ? copy_msghdr_from_user+0x10a/0x160 [ 1019.080186][T16853] ? __pfx_____sys_sendmsg+0x10/0x10 [ 1019.085453][T16853] ? __pfx_futex_wake_mark+0x10/0x10 [ 1019.090730][T16853] ___sys_sendmsg+0x134/0x1d0 [ 1019.095412][T16853] ? __pfx____sys_sendmsg+0x10/0x10 [ 1019.100620][T16853] __sys_sendmsg+0x16d/0x220 [ 1019.105187][T16853] ? __pfx___sys_sendmsg+0x10/0x10 [ 1019.110272][T16853] ? __x64_sys_futex+0x1e0/0x4c0 [ 1019.115192][T16853] do_syscall_64+0xcd/0x4e0 [ 1019.119685][T16853] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1019.125551][T16853] RIP: 0033:0x7fa30f98eba9 [ 1019.129941][T16853] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1019.149519][T16853] RSP: 002b:00007fa30dbac038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1019.157903][T16853] RAX: ffffffffffffffda RBX: 00007fa30fbd6180 RCX: 00007fa30f98eba9 [ 1019.165849][T16853] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 000000000000000b [ 1019.173791][T16853] RBP: 00007fa30fa11e19 R08: 0000000000000000 R09: 0000000000000000 [ 1019.181733][T16853] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1019.189687][T16853] R13: 00007fa30fbd6218 R14: 00007fa30fbd6180 R15: 00007ffce417de08 [ 1019.197641][T16853] [ 1019.200835][T16853] Kernel Offset: disabled [ 1019.205135][T16853] Rebooting in 86400 seconds..