last executing test programs: 22m16.903692361s ago: executing program 3 (id=113): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) ioctl$vim2m_VIDIOC_S_FMT(0xffffffffffffffff, 0xc0d05605, &(0x7f0000000140)={0x2, @pix_mp={0x7f, 0x0, 0x34324152, 0x4, 0xa, [{0x0, 0xf}, {0x20010}, {}, {}, {}, {}, {0x0, 0x800}], 0xf}}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[], 0x30}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000047c0)={0x60, r4, 0x405, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r5}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10104}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r5, {}, {}, {0x8, 0x5}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x8881}, 0x0) syz_usb_connect(0x0, 0x24, 0x0, 0x0) r8 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r8, &(0x7f0000000080)={0x2, 0x4e22, @empty}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000400)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) socket$packet(0x11, 0x0, 0x300) syz_open_procfs(0x0, &(0x7f0000000000)='ns\x00') creat(&(0x7f0000000100)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', 0x44) 22m12.839469639s ago: executing program 3 (id=123): pipe2(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020100000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a32000000001400000011001f"], 0x7c}}, 0x0) r2 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='setgroups\x00') r3 = syz_usb_connect(0x0, 0x2d, &(0x7f00000012c0)=ANY=[@ANYBLOB="120100001ddf8208c007121522300000000109021b0001000000010904000001faf40d000905820349"], 0x0) syz_usb_control_io(r3, 0x0, 0x0) r4 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) read$char_usb(r4, &(0x7f0000000000)=""/73, 0x49) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_ep_write$ath9k_ep1(r3, 0x82, 0x0, 0x0) close_range(r2, 0xffffffffffffffff, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000d84000)={0xa, 0x2, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0x9}, 0x1c) setsockopt$inet6_tcp_int(r5, 0x6, 0x2000000000000022, &(0x7f0000000240)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='dctcp\x00', 0x6) sendto$inet6(r5, &(0x7f00000000c0)="04", 0x1, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000001c0)='dctcp\x00', 0x6) r6 = userfaultfd(0x801) ioctl$UFFDIO_API(r6, 0xc018aa3f, &(0x7f0000000140)={0xaa, 0x298}) ioctl$UFFDIO_REGISTER(r6, 0xc020aa00, &(0x7f0000000080)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x2}) ioctl$UFFDIO_COPY(r6, 0xc028aa03, &(0x7f0000000040)={&(0x7f00002b9000/0x400000)=nil, &(0x7f00005cf000/0x4000)=nil, 0x400000, 0x0, 0x2}) r7 = userfaultfd(0x801) ioctl$UFFDIO_API(r7, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_CONTINUE(r7, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000280), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, 0x0, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) 22m9.117802555s ago: executing program 3 (id=138): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x9, @private1, 0x9}, 0x1c) r2 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x101042, 0x0) pwrite64(r2, &(0x7f0000000140)='2', 0xfdef, 0xfecc) ioctl$SW_SYNC_IOC_CREATE_FENCE(r2, 0xc0285700, &(0x7f0000000040)={0x7, "ea133ae9a555dbcc3d6453d3417de8e11b8476b6ea4754c39e6d7ab203b75f23"}) bind$netlink(0xffffffffffffffff, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x10000}, 0xc) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, &(0x7f00000002c0)) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(0xffffffffffffffff, 0x84, 0x7c, &(0x7f00000062c0)={0x0, 0x7f, 0x90}, &(0x7f0000006680)=0x8) bind$netlink(r3, &(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc) r4 = socket$inet6(0xa, 0x80003, 0x6) connect$inet6(r4, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000340)={{{@in=@broadcast, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x0, 0x0, 0x4}, {0x0, 0x4, 0x0, 0xa78a}, 0xfffffffe, 0x0, 0x1}, {{@in=@private, 0x0, 0x33}, 0x0, @in=@rand_addr=0x64010101, 0x0, 0x3, 0x1, 0x7}}, 0xe8) r6 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r6, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[], 0x50}}, 0x0) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x2, 0x6, 0x2, 0x0, 0x2, 0x0, 0x2}, 0x10}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x2000000000000022, 0x0, 0x0) 22m8.958053556s ago: executing program 3 (id=140): mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000100)='./file0\x00', &(0x7f0000000180)='./file0\x00', 0x0, 0x18d811, 0x0) mount$bind(&(0x7f0000000300)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) umount2(0x0, 0x0) 22m8.207276301s ago: executing program 3 (id=142): r0 = syz_open_dev$hiddev(&(0x7f0000000540), 0x0, 0x0) ioctl$HIDIOCINITREPORT(r0, 0x4805, 0x0) 22m7.803763608s ago: executing program 3 (id=144): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setgroups(0x4000000000000190, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_create1(0x80000) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) 22m6.950317815s ago: executing program 32 (id=144): socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) setgroups(0x4000000000000190, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xa4, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x0, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1d, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r3, &(0x7f0000000140)={0x2, 0x4e22, @multicast2}, 0x10) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r4, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) epoll_create1(0x80000) epoll_create1(0x0) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_usbip_server_init(0x4) syz_usbip_server_init(0x1) 13m19.560061596s ago: executing program 1 (id=1397): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x80000100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) write$usbip_server(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 13m18.026287445s ago: executing program 1 (id=1401): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000080)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x7, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x4, 0x9, 0x0, 0x2, 0x300}, {0x6e}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 13m16.659281224s ago: executing program 1 (id=1406): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = io_uring_setup(0x177d, &(0x7f00000002c0)={0x0, 0x572e, 0x2, 0x2, 0xfffffffe}) mkdir(&(0x7f0000000340)='./file0\x00', 0x0) r4 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) read$FUSE(r4, &(0x7f000000e280)={0x2020, 0x0, 0x0}, 0x2020) mknod$loop(&(0x7f00000002c0)='./file0/../file0/file0\x00', 0x60, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x0, 0x0) write$FUSE_INIT(r4, &(0x7f0000000380)={0x50, 0x0, r5, {0x7, 0x28, 0x0, 0x44c88860, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x24522716a989086f}}, 0x50) syz_fuse_handle_req(r4, &(0x7f0000008280)="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", 0x2000, &(0x7f0000000a00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)={0x90, 0x0, 0x0, {0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x80000, {0x0, 0x5, 0x3, 0x0, 0x0, 0x0, 0x0, 0xfffffffe, 0x1000000, 0x0, 0x0, 0x0, 0x0, 0x2}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) close_range(r3, 0xffffffffffffffff, 0x200000000000000) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='mem_disconnect\x00', r6}, 0x10) 13m15.483218013s ago: executing program 1 (id=1409): r0 = syz_open_dev$evdev(&(0x7f0000000100), 0x0, 0x0) syz_open_dev$usbmon(&(0x7f0000000080), 0x0, 0x0) pselect6(0x40, &(0x7f00000000c0)={0x2, 0xb5c, 0x6, 0x8000000000000001, 0x1a, 0x4, 0x20005, 0xe5c}, &(0x7f0000000140)={0x9, 0x24bcc8f3, 0x6, 0x597, 0x5, 0x6, 0x0, 0xffffffff00000001}, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x19, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x0, 0x0, 0x0, 0xfa78}}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x804}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_io_uring_submit(0x0, 0x0, 0x0) getsockopt$inet6_mptcp_buf(0xffffffffffffffff, 0x11c, 0x4, &(0x7f0000002340)=""/112, &(0x7f00000023c0)=0x70) syz_emit_ethernet(0x4a, &(0x7f00000002c0)=ANY=[], 0x0) mount$pvfs2(&(0x7f00000001c0), 0x0, &(0x7f0000000300), 0x20, &(0x7f0000000280)={[{'#$'}, {'\x00'}, {'#'}, {'/dev/vim2m\x00'}], [{@func={'func', 0x3d, 'KEXEC_KERNEL_CHECK'}}, {@smackfsroot={'smackfsroot', 0x3d, '++'}}]}) socket$alg(0x26, 0x5, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x110) read$FUSE(0xffffffffffffffff, &(0x7f0000000300)={0x2020}, 0x2020) r4 = syz_open_dev$hidraw(&(0x7f0000002300), 0x1, 0x14a042) ioctl$HIDIOCGRDESC(r4, 0x40305829, &(0x7f0000000400)={0x63, "7954bbc8aae250bd23544617d50e1cc7f8275833e30707cff3a2cd9c7d6ad2c66e2b1bc4cbde489455d596e5aa945a899c1a09b09ab2a8c7621919a5269263991af83969fe81172ba1c1b69de4ec6da3be320aaeb31b6f2fbbea00a70dd10c18bbd4d4"}) ioctl$EVIOCGBITSND(r0, 0x80404532, &(0x7f0000000280)=""/189) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_ADD_COUNTERS(r5, 0x0, 0x61, &(0x7f0000000040)={'filter\x00', 0x4}, 0x64) 13m13.850312615s ago: executing program 1 (id=1415): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0xffffffffffffff2b, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_RES_GET(0xffffffffffffffff, 0x0, 0x20000001) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) syz_io_uring_setup(0x1000110d, &(0x7f0000000140)={0x0, 0xbcb4, 0x1, 0x1}, &(0x7f00000000c0), &(0x7f0000000280)) io_uring_setup(0xaab, &(0x7f0000000340)={0x0, 0x40000001}) bpf$PROG_LOAD(0x5, &(0x7f0000000d80)={0x9, 0x0, 0x0, 0x0, 0x25b, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @cgroup_sock=0x22, 0xffffffffffffffff, 0x8, &(0x7f00000009c0)={0x2, 0x1}, 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x76, @void, @value}, 0x94) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r3, 0x0, 0x0, 0x2000c851, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback={0x30}, 0xffffffff}, 0x1c) r4 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000001f40)=[{{&(0x7f0000001080)={0xa, 0x4e22, 0x0, @private0, 0x5}, 0x1c, &(0x7f0000001140)=[{&(0x7f00000010c0)="a2ac021ce49963f155d2a823e78181fd7712392ffeccf1da422063969f39519b2e139da19ed1e2aa5cd5", 0x2a}, {&(0x7f00000011c0)="d32587424433b400e1651d52f19e573e1515d7eb5456851ebb653aee0d2da2ac70f46f2ef510d7b77621c816899b1c71fddf6f4f014ba001e57a12f709f50bd116ffdeebaedf90681cee8c6755889b8d1eebb0fda5efd0b80ce231", 0x5b}, {&(0x7f0000001280)="21e0b5b6b4139194de592e9c5ff7bb4b992d4ad5b6898a2f4539a8ab3341bdd4db8e9c92992d29f566ec36e551683ca77a1020ec8d6811d89e92355bcf1c6f362f88f909a789699b593480de27d91d8c0e77db09720fb9b660ff0b2f3eec673501b597556a1088b4e236e11a8b74e781edd2d3c27a5d5e5ef4c1c401969c96746f852af9f980beeda8a97fc53ef99149b360679905e20f1d0e3eb264c5882d8b0a75d6e86ad7", 0xa6}], 0x3, &(0x7f0000001400)=[@hopopts_2292={{0x40, 0x29, 0x36, {0x10d, 0x4, '\x00', [@calipso={0x7, 0x18, {0x2, 0x4, 0x54, 0x2, [0x8000000000000001, 0x0]}}, @padn={0x1, 0x3, [0x0, 0x0, 0x0]}, @ra={0x5, 0x2, 0x9}, @pad1]}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x5e, 0x1, '\x00', [@pad1, @jumbo]}}}, @pktinfo={{0x24, 0x29, 0x32, {@loopback}}}, @pktinfo={{0x24, 0x29, 0x32, {@private0}}}], 0xb8}}], 0x1, 0x81) shutdown(r5, 0x1) getsockopt$bt_hci(r5, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) 13m12.543753125s ago: executing program 1 (id=1418): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$usbip_server(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 12m57.039527406s ago: executing program 33 (id=1418): openat$procfs(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x3) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) syz_clone(0x600, 0x0, 0x33, 0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) write$usbip_server(0xffffffffffffffff, 0x0, 0x0) setsockopt(0xffffffffffffffff, 0x107, 0x1, 0x0, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x9, 0x1, 0xb0}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 7m56.658271185s ago: executing program 4 (id=2251): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r3 = userfaultfd(0x80001) ioctl$UFFDIO_API(r3, 0xc018aa3f, &(0x7f0000000000)={0xaa, 0x60}) ioctl$UFFDIO_REGISTER(r3, 0xc020aa00, &(0x7f0000000100)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x1}) readv(r3, &(0x7f0000000240)=[{&(0x7f0000000140)=""/201, 0xc9}], 0x6) close(r3) mremap(&(0x7f0000638000/0x1000)=nil, 0x6aa000, 0x2000, 0x3, &(0x7f00005c0000/0x2000)=nil) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) io_cancel(0x0, 0xfffffffffffffffc, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x18e) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1/file4\x00', 0x1d8) mknodat(0xffffffffffffffff, &(0x7f0000000380)='./file1/file4/file5\x00', 0x81c0, 0x80) mkdirat(0xffffffffffffff9c, 0x0, 0x1c0) landlock_create_ruleset(&(0x7f00000002c0)={0xb001, 0x2, 0x1}, 0x6c, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random="c000002000"}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) 7m55.671572215s ago: executing program 4 (id=2252): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) ioctl$KVM_RUN(r2, 0xae80, 0x0) 7m55.375229642s ago: executing program 4 (id=2253): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000000c0)='sched_switch\x00', r1, 0x0, 0xfffffffffffffffb}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) socket$inet_udp(0x2, 0x2, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = socket(0x11, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f00000001c0)) kcmp$KCMP_EPOLL_TFD(0xffffffffffffffff, 0xffffffffffffffff, 0x7, 0xffffffffffffffff, 0x0) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x25, &(0x7f0000000040)=0xd8be, 0x4) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r6, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) shutdown(r6, 0x1) bind$netrom(0xffffffffffffffff, &(0x7f0000000340)={{0x6, @rose, 0x1}, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @default, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) r7 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r7, 0xae60) r8 = syz_open_procfs(0x0, &(0x7f0000000580)='net/tcp6\x00') preadv(r8, &(0x7f0000002800)=[{&(0x7f00000003c0)=""/203, 0xcb}, {0x0}], 0x2, 0x7, 0x7fff) r9 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) write$P9_RSTATu(r9, &(0x7f0000000900)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0xee01], 0x21e) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000007c0)=ANY=[@ANYBLOB="b80000001900674c0000000000000000fe800000000000000000000000000008e000000200000000000000000000000000000000000000000a00000000000000", @ANYRESOCT=r8, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fcffffffffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000005f40757f73abc8dfb855b4746fb4a1aa890aaca07019ded3aa12435ddf14ec3a84d2e655c2162c7803836b9d577d1f1a589d3f73c1682a88dfafc37d03c697f5284a47b01d888913313d700ea366f4f693b9cabf1f3b77838f5dc418"], 0xb8}}, 0x4000000) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) 7m54.32812172s ago: executing program 4 (id=2254): socket$inet_udp(0x2, 0x2, 0x0) r0 = openat$kvm(0x0, &(0x7f0000000040), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$nvram(0xffffffffffffff9c, &(0x7f0000000100), 0x40203, 0x0) lseek(r2, 0x400000000000000, 0x3) ioctl$KVM_CAP_HYPERV_ENFORCE_CPUID(r2, 0x4068aea3, &(0x7f00000000c0)={0xc7, 0x0, 0x1}) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_CPUID2(r3, 0x4048aecb, &(0x7f0000000080)=ANY=[@ANYRES16=r1]) 7m54.06226039s ago: executing program 4 (id=2255): r0 = socket$kcm(0x10, 0x2, 0x0) clock_getres(0x2, &(0x7f00000000c0)) r1 = open(&(0x7f0000000300)='.\x00', 0x0, 0x0) r2 = socket$inet6(0xa, 0x6, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000040)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}}, 0x1c) listen(r2, 0xb) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f00000001c0)=0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='lp\x00', 0x3) recvmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004140)=[{&(0x7f0000001140)=""/4055, 0xfd7}, {&(0x7f0000004680)=""/4094, 0xffe}], 0x2}, 0x0) r3 = openat$kvm(0xffffffffffffff9c, &(0x7f00000000c0), 0x200, 0x0) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x2, 0x4, 0x4, 0x4, 0x1004, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) close(0x3) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x20, 0xffffffff, 0x1, 0x1, 0xfffffffe, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000000bae3000000000000000000850000007b00000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000300000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x2, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000640)='kfree\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="0a00000002000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x14, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0xdc8cc7b5046e9396, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r10, 0x0, 0x0}, 0x10) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000080)=[@text64={0x40, &(0x7f0000001140)="b805000000b9050000000f01d9f3450f01df66b8e0008ee0c4017c2b9b00000000f345a4c74424007c000000c74424022c000000ff1c240f015f000f01c4660f72e769de7d4d", 0x46}], 0x1, 0x40, 0x0, 0x0) openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x141200, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)='\x00', 0x1) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, &(0x7f0000000280)) ioctl$KVM_RUN(r5, 0xae80, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xf2, 0x87, 0x34, 0x20, 0xa12, 0x5d10, 0xa839, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x20, 0x0, [{{0x9, 0x4, 0x42, 0x5, 0x1, 0x68, 0xf4, 0xa5, 0xc3, [], [{{0x9, 0x5, 0xf, 0x0, 0x10, 0x4, 0x67, 0x51}}]}}]}}]}}, 0x0) 7m50.65174805s ago: executing program 4 (id=2266): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) poll(0x0, 0x0, 0x9) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) io_uring_setup(0xaac, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x15) poll(&(0x7f0000000300)=[{r8, 0x1080}], 0x1, 0xffbffff5) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x200000b4) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x12) 7m34.505141375s ago: executing program 34 (id=2266): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x101000, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, 0x0) poll(0x0, 0x0, 0x9) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, 0x0, 0x0) syz_usb_connect(0x0, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) io_uring_setup(0xaac, 0x0) sendmsg$IPSET_CMD_LIST(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)={0x34, r7, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) r8 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000140)=0x15) poll(&(0x7f0000000300)=[{r8, 0x1080}], 0x1, 0xffbffff5) sendmsg$ETHTOOL_MSG_WOL_SET(r1, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x2c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {}, [@ETHTOOL_A_WOL_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan0\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8814}, 0x200000b4) ioctl$TIOCSETD(r8, 0x5423, &(0x7f0000000080)=0x12) 16.769332478s ago: executing program 2 (id=3659): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x2, "b9fa"}, 0x0, 0x0}) 16.068143882s ago: executing program 6 (id=3660): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df8726343276cf23eef0845cd00fd72ed6a08652151c4e7a2bff588c4168c6f1aeb437a524873ec066482aee0a434c6ee053cebc5768783ab7a8c0e0652f14edf0de118edc4e46d53783ad0f25a5e704f4cbee714e21ac6ec6e5a4348cb8452fd16a2788426dc103620bcb1843bb81c695fa9895cee03760a6af66c64c855b3de7034daccfbf6c13ec133da0dfb4c4b278d19719a0f5f805add789b2e0ef37274f430f9b2bd6ea84b1baf3", 0xcc}, {&(0x7f00000004c0)="891a13fb274229a7cd36b9f11574cd3d5abf0abc3ad62227a18b09570774abc58e478a2529625e9d110feaa6db16c1fe5a7e47dc3b54a5ec00809ac42c2a6a25fad6ed77dd6cde8bf522a9f7df4e331c58364a79ed1941d7ba3c4dc342af59b4700a83a5c0c671b236713f13a054d39ebb925087cbb35a059c1a42d0fe6403cfd16ebf990d6e3a16", 0x88}, {&(0x7f0000000400)="6b9f1130f0cbb39924b1f13fc3fabb9638c881bde4aeaf376c85d8ac0000000009fcb3b8983252f3fcf75a03cea94e446f125ffd6247b229cf0188d60a36d29763c33efb7d48cc7a040000000000", 0x4e}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03bbdb2f5afcc202e5dd0ce841925f332f01ed00f985e300e8c752f74f569b9477d103c62004b9684bf9ba5503301918b24b6cdf7243a41903805a250d6272505970572a148e58c18eacd0fce63bf4a96263b2a0c0258c3abe3c13e72483c30b94faaad3a5f5a3a1c4a2487c580cdd17eb960906bfb3b0a8c7935dab4a050a68df0721c4940b3a06429465c0a115bff383867bf17e9deef5de1c2d56a395e12e164b59c6bb0d55f4e6eaec6fa7db5a622a42fcfda37974a0064cd3cecf69baa76796b17829b214c485207fd742a68be74946b4cd6ca000", 0xda}, {&(0x7f0000001b00)="69c4d1bb956f9cac315109a3b52ca9ed4731ecb9a8d1c3f75e9a771c634713ffed270d66c0e0dcd622f8d6435ac9fd4da108e9318d8fa68316a2380018db97190f4ad623cc88f3f91a98559de6f656e831fd21fbeb19b356af14f9598362d6401adf6f6f9ed9d00c07ce8a3603e767e9033e3264c30db9261038521c0430bbf43222094718b957eb44cb921404ca31befc2e3ce494a41767b9ea1fec0ebfe55aee7ce1", 0xa3}, {&(0x7f00000027c0)="8adc6c3009af743dd27f1cded499661bdc60f67cc239ece6923d5bbd9811b958640d7093238b58b060db6ed31873b1a1eab4927051818ac8c57db8508c3b6f832f1bf2218b9bf581b24f79b1ca2cfb9573c072d2b99c96eddc0b90e83f966092a6ab89853cf873592cd1b4f5ece38bf05116ff3e682d139c76e06642ee77d84121da4ea4617a671598dff824f9bfae006aa47018fd717a97aae7ecfa8bc84ead3577753823bb22b6eb07f0ddca413fc7c895566b35141eea0ec8dd74b4697a48bb45eb3d517614ed9284b54b85d7c4bf", 0xd0}, {&(0x7f0000001cc0)="1b2ed9efd95459b99faff1adfa54be7956726b087de3e6ceced9f47e86d27216e8662f63b760930cb931ced15105e9b3ad0bcb78014d854612", 0x39}], 0x4, &(0x7f0000002080)=ANY=[], 0x2f0}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00'], 0x48) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) shutdown(r0, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a00000000000000000000fe8000"/52], 0x0) prlimit64(0x0, 0xe, &(0x7f0000002500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000140)="ad", 0x1) r8 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(r8, &(0x7f0000000000)='g', 0x4c, 0x0, &(0x7f00000000c0)={0x11, 0xd, r9, 0x1, 0x0, 0x6, @remote}, 0x14) 14.906387852s ago: executing program 0 (id=3663): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x6) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000300), 0x3fffffffffffda1, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000240)={'syz', 0x2}, &(0x7f00000002c0)="890c6158002f8ebc86e86a19525567b7b3f92a2f4a33fa2074e06f64668ce0350305975b", 0x24, 0xfffffffffffffff9) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r3 = syz_open_procfs(r0, &(0x7f00000001c0)='net/mcfilter6\x00') preadv(r3, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/205, 0xcd}], 0x1, 0x409f, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x9, 0x3, &(0x7f00000000c0)=@framed={{0x85, 0x0, 0x0, 0x0, 0xa0, 0x27}}, &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f0000000780)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0x4c, 0x1a, 0xc000000, 0x73, 0x2c8, 0x258, 0x258, 0x2c8, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00'}, 0x0, 0x168, 0x198, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x40000, 0x0, 0x2, 0x0, 0x7}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @rand_addr=' \x01\x00', @dev}}]}, @common=@inet=@SET2={0x30}}, {{@uncond, 0x0, 0xf8, 0x130, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@icmp6={{0x28}, {0x0, "e1f6"}}]}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) syz_usb_connect(0x5, 0x3f, &(0x7f0000000000)=ANY=[@ANYBLOB="120110017a953210ac0504c777620102030109022d0001080540040904270102fffd01"], 0x0) 13.825293234s ago: executing program 6 (id=3665): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="12010000020000002505a1a440000102030109025c0002010000000904000001a3f45747d649f9"], 0x0) syz_usb_connect$uac1(0x0, 0xaa, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000106b1d01014000010203010902980003010000000904000000010100000a2401000000020102132406040006030000000000000000000000000924030000010000ff0924050000f8431cfd0924030604030204001b24040402090401"], 0x0) syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_connect$hid(0x0, 0x0, 0x0, &(0x7f0000000200)={0xa, &(0x7f0000000040)={0xa, 0x6, 0x110, 0x0, 0x5, 0x7, 0xff, 0xa}, 0x6d, &(0x7f0000000100)={0x5, 0xf, 0x6d, 0x6, [@ss_container_id={0x14, 0x10, 0x4, 0x0, "64e27d4480b4623819c3afe7a37e36ad"}, @ext_cap={0x7, 0x10, 0x2, 0x0, 0x3, 0x5, 0x93}, @ssp_cap={0x1c, 0x10, 0xa, 0x3, 0x4, 0x2, 0xf0f, 0x5, [0x3fc0, 0x0, 0x3f0f, 0xff0060]}, @ss_cap={0xa, 0x10, 0x3, 0x0, 0xa, 0x60, 0xfb, 0x9b8}, @ext_cap={0x7, 0x10, 0x2, 0xc, 0x4, 0xb, 0xc045}, @ssp_cap={0x20, 0x10, 0xa, 0x42, 0x5, 0x4, 0xf000, 0xfffe, [0x0, 0xff00f0, 0xff3fc0, 0xff3f00, 0xff3f30]}]}, 0x1, [{0x62, &(0x7f0000000180)=@string={0x62, 0x3, "30befacfddcc0f9de0a8f3ee71ba5762986f0f5e93ff34e3aa35fb28ad391fc78ebcabbee45f4746c80b383ee17b52d2734d7889bf82ff9bb69e99c03cebc528a54d112d737a14f3d349c0e5f1b25183b6bd62b0a36d6e287d8113af45bf1a34"}}]}) 11.862343406s ago: executing program 2 (id=3668): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 9.99108344s ago: executing program 2 (id=3671): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYRES32, @ANYRES64], &(0x7f0000000100)='GPL\x00', 0xfff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x31, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='sched_switch\x00', r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_GET_ADDR(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000c00)={0x14, r6, 0x680822d7e3b5f37d}, 0x14}}, 0x0) r7 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) ioctl$FS_IOC_GETFSLABEL(r7, 0x81009431, &(0x7f0000000040)) r8 = openat$ttynull(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r8, 0x5423, &(0x7f00000000c0)=0x7) ioctl$TIOCSTI(r8, 0x5412, &(0x7f0000000040)=0xc7) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000240)={@cgroup, 0x12, 0x0, 0x8, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x6, 0x0, &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000280)={@map=r7, r7, 0x34, 0x201c, 0x0, @value=r7, @void, @void, @void, r9}, 0x20) r10 = syz_usb_connect(0x0, 0x24, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000201b4510fc0428155d6d01020301090212000100000000090401"], 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$printer(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io(r10, 0x0, 0x0) syz_usb_control_io$cdc_ncm(r10, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r10, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000000)={@fallback=r1, r0, 0x7, 0x18, 0x0, @void, @value=r0, @void, @void, r9}, 0x20) 9.980002707s ago: executing program 0 (id=3672): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b00"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x1, "b9"}, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x34, &(0x7f0000000180)={0x40, 0x3, 0x3, "7f3088"}, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, &(0x7f00000003c0)={0x44, &(0x7f0000000140)={0x60, 0x18}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 9.74717787s ago: executing program 6 (id=3674): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100009c323f08a5040330b23a01020301090212ff01000200000904"], 0x0) r1 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000180)={{{@in=@private, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x0, 0x6c}, 0x0, @in6=@loopback, 0x2, 0x7, 0x0, 0x4}}, 0xa7) syz_usb_control_io$cdc_ncm(r0, &(0x7f0000000380)={0x14, 0x0, &(0x7f0000000340)={0x0, 0x3, 0x1a, {0x1a}}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000300)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB="200ee5000000e50c11f8f799645e552a70047fee40fcc110e1364354050000002a8e6d0cdad66bca677380394e074199651e2b00e9670896f145c1e7ba658b42480688a4f3e14a125a65668e88b4b36c4b8fb681e974ffbe8ce46ab48c8fde6484f097ce2f1e6ce37fa9c9f8a8c999014fd08901000f40ebeb83c41b64ac2f7e72881805d2ed332d9b027cc2f090ba070000001b2fdc19dccb9d3a1132b014171168a1d52d827cd3725783d8ff4e6831a015cff6fc8027c6e411374d0f9624f7bd15df85b98a5666f59f610c4e871ee4b7778285af69d7cb206632030390d716984f5a8afb16"], &(0x7f0000000000)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x1c09}}, &(0x7f0000000200)={0x0, 0xf, 0x63, {0x5, 0xf, 0x63, 0x3, [@ptm_cap={0x3}, @wireless={0xb, 0x10, 0x1, 0x4, 0x4, 0x3, 0x5, 0x2, 0xb}, @generic={0x50, 0x10, 0x4, "24e8072fde7bb3a15a60e955b7e21e222355653f20836e1a1c68ea0c448dbbb360de17cb3f60a2ca7f13d514722ce3658690db7f7c5eeef16b4b31d6f9de5034da8aff0071cbf8844ee7563cb3"}]}}, &(0x7f0000000280)={0x20, 0x29, 0xf, {0xf, 0x29, 0x4, 0x3, 0x7, 0x3, "4c59ec13", "ddb7f32e"}}, &(0x7f00000002c0)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x3, 0x1, 0x6, 0xbb, 0x7, 0x9, 0x9}}}, &(0x7f0000000c00)={0x84, &(0x7f00000003c0)={0x40, 0x16, 0xa8, "c74589dbb50c3d21af73937a082761a29228f8fadc376331b52667c7401299811bdd0bbabd35bb6181a72b04c937991a9999d2d67431da460665d9e95a8afe7316a025d91915cb232ca88db34334e246dac869eb5304ac7d02f81b7c303891489c53e60f993bce0305366d779f4d93f72482e835c02676c4dee4a3a4c29a7ae7fdd7c4f749f16001a5f52d14bab7242038e157772a31b615038dcd0178f65cf42e551b2cf2ee39db"}, &(0x7f0000000480)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000004c0)={0x0, 0x8, 0x1, 0x1}, &(0x7f00000008c0)={0x20, 0x0, 0x4, {0x2}}, &(0x7f0000000900)={0x20, 0x0, 0x4, {0x100, 0x20}}, &(0x7f0000000940)={0x40, 0x7, 0x2, 0xc13f}, &(0x7f0000000980)={0x40, 0x9, 0x1, 0xe}, &(0x7f00000009c0)={0x40, 0xb, 0x2, "e574"}, &(0x7f0000000a00)={0x40, 0xf, 0x2, 0x7}, &(0x7f0000000a40)={0x40, 0x13, 0x6, @random="78fbac57654f"}, &(0x7f0000000a80)={0x40, 0x17, 0x6, @multicast}, &(0x7f0000000ac0)={0x40, 0x19, 0x2, 'B$'}, &(0x7f0000000b00)={0x40, 0x1a, 0x2, 0xff}, &(0x7f0000000b40)={0x40, 0x1c, 0x1, 0x7f}, &(0x7f0000000b80)={0x40, 0x1e, 0x1, 0x87}, &(0x7f0000000bc0)={0x40, 0x21, 0x1, 0x5}}) r2 = socket$inet6(0xa, 0x6, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000500)=@security={'security\x00', 0xe, 0x4, 0x358, 0xffffffff, 0x1f8, 0xd0, 0xd0, 0xffffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x0, 0x4, 0x1}, {0x0, 0x2}}}}, {{@ipv6={@empty, @private0, [0x0, 0x0, 0xffffff00, 0xff], [0xff000000, 0xff, 0xff], 'sit0\x00', 'veth0_to_hsr\x00', {0xff}, {}, 0x29, 0x9, 0x6, 0x40}, 0x0, 0xa8, 0xd0}, @common=@inet=@SET1={0x28, 'SET\x00', 0x1, {{0x6, 0x3}, {0xffffffffffffffff, 0x1, 0x1}}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@ERROR={0x22, 'ERROR\x00', 0x0, "fa21a4259888ab29ebb4ba6d2adedf8451d77cb2fbaf292fd48c3ba20e98"}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3b8) r3 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r3, 0x708, 0x2) ioctl$I2C_SMBUS(r3, 0x720, &(0x7f00000000c0)={0x1, 0xfc, 0x1, &(0x7f0000000080)={0x0, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) syz_usb_control_io$hid(r0, 0x0, 0x0) r4 = openat$ubi_ctrl(0xffffffffffffff9c, &(0x7f0000001100), 0x94100, 0x0) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f0000001400), &(0x7f0000001440)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000001140)={0x0, @multicast2, @multicast1}, &(0x7f0000001180)=0xc) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) r5 = syz_usb_connect(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0xa1, 0x12, 0x17, 0x10, 0xb95, 0x172a, 0xf7f4, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0xfb, 0x0, 0x2, 0x6c, 0x5d, 0x65, 0x0, [], [{{0x9, 0x5, 0x4, 0x2, 0x10, 0x0, 0xfa}}, {{0x9, 0x5, 0x82, 0x2, 0x40}}]}}]}}]}}, 0x0) syz_usb_control_io$cdc_ncm(r5, 0x0, &(0x7f0000000340)={0x44, &(0x7f0000000100)={0x20, 0x14, 0x6, "b262c72228c9"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$uac1(r0, 0x0, 0x0) 8.600541227s ago: executing program 5 (id=3676): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df8726343276cf23eef0845cd00fd72ed6a08652151c4e7a2bff588c4168c6f1aeb437a524873ec066482aee0a434c6ee053cebc5768783ab7a8c0e0652f14edf0de118edc4e46d53783ad0f25a5e704f4cbee714e21ac6ec6e5a4348cb8452fd16a2788426dc103620bcb1843bb81c695fa9895cee03760a6af66c64c855b3de7034daccfbf6c13ec133da0dfb4c4b278d19719a0f5f805add789b2e0ef37274f430f9b2bd6ea84b1baf3", 0xcc}, {&(0x7f00000004c0)="891a13fb274229a7cd36b9f11574cd3d5abf0abc3ad62227a18b09570774abc58e478a2529625e9d110feaa6db16c1fe5a7e47dc3b54a5ec00809ac42c2a6a25fad6ed77dd6cde8bf522a9f7df4e331c58364a79ed1941d7ba3c4dc342af59b4700a83a5c0c671b236713f13a054d39ebb925087cbb35a059c1a42d0fe6403cfd16ebf990d6e3a16", 0x88}, {&(0x7f0000000400)="6b9f1130f0cbb39924b1f13fc3fabb9638c881bde4aeaf376c85d8ac0000000009fcb3b8983252f3fcf75a03cea94e446f125ffd6247b229cf0188d60a36d29763c33efb7d48cc7a040000000000", 0x4e}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03bbdb2f5afcc202e5dd0ce841925f332f01ed00f985e300e8c752f74f569b9477d103c62004b9684bf9ba5503301918b24b6cdf7243a41903805a250d6272505970572a148e58c18eacd0fce63bf4a96263b2a0c0258c3abe3c13e72483c30b94faaad3a5f5a3a1c4a2487c580cdd17eb960906bfb3b0a8c7935dab4a050a68df0721c4940b3a06429465c0a115bff383867bf17e9deef5de1c2d56a395e12e164b59c6bb0d55f4e6eaec6fa7db5a622a42fcfda37974a0064cd3cecf69baa76796b17829b214c485207fd742a68be74946b4cd6ca000", 0xda}, {&(0x7f0000001b00)="69c4d1bb956f9cac315109a3b52ca9ed4731ecb9a8d1c3f75e9a771c634713ffed270d66c0e0dcd622f8d6435ac9fd4da108e9318d8fa68316a2380018db97190f4ad623cc88f3f91a98559de6f656e831fd21fbeb19b356af14f9598362d6401adf6f6f9ed9d00c07ce8a3603e767e9033e3264c30db9261038521c0430bbf43222094718b957eb44cb921404ca31befc2e3ce494a41767b9ea1fec0ebfe55aee7ce1", 0xa3}, {&(0x7f00000027c0)="8adc6c3009af743dd27f1cded499661bdc60f67cc239ece6923d5bbd9811b958640d7093238b58b060db6ed31873b1a1eab4927051818ac8c57db8508c3b6f832f1bf2218b9bf581b24f79b1ca2cfb9573c072d2b99c96eddc0b90e83f966092a6ab89853cf873592cd1b4f5ece38bf05116ff3e682d139c76e06642ee77d84121da4ea4617a671598dff824f9bfae006aa47018fd717a97aae7ecfa8bc84ead3577753823bb22b6eb07f0ddca413fc7c895566b35141eea0ec8dd74b4697a48bb45eb3d517614ed9284b54b85d7c4bf", 0xd0}, {&(0x7f0000001cc0)="1b2ed9efd95459b99faff1adfa54be7956726b087de3e6ceced9f47e86d27216e8662f63b760930cb931ced15105e9b3ad0bcb78014d854612", 0x39}], 0x4, &(0x7f0000002080)=ANY=[], 0x2f0}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00'], 0x48) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) shutdown(r0, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a00000000000000000000fe8000"/52], 0x0) prlimit64(0x0, 0xe, &(0x7f0000002500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000140)="ad", 0x1) r8 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='g', 0x4c, 0x0, &(0x7f00000000c0)={0x11, 0xd, r9, 0x1, 0x0, 0x6, @remote}, 0x14) 8.509875909s ago: executing program 7 (id=3677): r0 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000000), 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='pids.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000005f00000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$UHID_CREATE2(r1, &(0x7f0000000180)=ANY=[], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r1, 0x0) ioprio_set$pid(0x1, 0x0, 0x2007) ioprio_get$pid(0x3, 0x0) munmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000) get_mempolicy(0x0, 0x0, 0x8, &(0x7f0000ffb000/0x2000)=nil, 0x2) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)={0x5c, 0x2, 0x6, 0x5, 0xa, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_TYPENAME={0x0, 0x3, 'hash:ip,mac\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0xfffffffffffffe97, 0x6, 0x1, 0x0, 0x3fff800}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0xffff}]}]}, 0x5c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000002440)=ANY=[@ANYBLOB="34000000090605000a00000000000000000000000900020073797a300000000005000100060000000c00078006000440"], 0x34}}, 0x0) openat2$dir(0xffffffffffffff9c, &(0x7f0000000080)='./file0\x00', 0x0, 0x45) ioctl$SNDRV_SEQ_IOCTL_GET_SUBSCRIPTION(r0, 0xc0505350, &(0x7f0000000140)={{0x3}, {0x3, 0xc}, 0x5, 0x3, 0x8}) sendmsg$IPSET_CMD_RENAME(r3, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x1c, 0x5, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x3}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 8.407444335s ago: executing program 7 (id=3678): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') r4 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x13, 0xffffffffffffffff, 0x929b3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r4, &(0x7f0000000640)={0x2020}, 0x2020) 7.432030509s ago: executing program 7 (id=3679): r0 = syz_usb_connect(0x0, 0x5d, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100009b6cec20ca08602058c60102030109024b0001000000"], 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000b00)={0x84, &(0x7f00000001c0)={0x40, 0x3}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f0000001e40)={0x44, &(0x7f0000000bc0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f00000002c0)={0x1c, &(0x7f0000000100)=ANY=[], 0x0, 0x0}) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000001000)={0x1c, &(0x7f0000000f40)={0x40, 0x9, 0x2, "b9fa"}, 0x0, 0x0}) 7.230783828s ago: executing program 5 (id=3680): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) sendmmsg(r0, &(0x7f0000002700)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000140)="f7f5e9e4fa75e98b04b447075061f4ae31c9fe9741a5f2405ab7671f87eaf610ec0180f86c12808b43a72b2d2067dfb0bb7327e70ef08b20cfd28e3cd70dd69dd8812ed9a1303c717e3217697d333851875bad0fd8da090db64e972b49385a4c08f1eca32a0e1e3130dd220f5c31ab7739960219566623a3d7a2ac56fb5e01b7f47e51ec8d12b12d5e280d860ce1213b8896ab9a098610", 0x97}, {&(0x7f0000000200)="4028d0d6ae0efdf2972e6e6d4e3af2dc71a104b62c63974b17827ff5a8d6a3978a6c3098e04a38b230cc3cc2e59931206dc85ba94010472a62a4e908c804e8f9451b423f90e2176b31c751b45f3ecb8279a273d784132f8cb49212470cdcb07d963ee7afe22f2b9fa4a06e3afb4e4d8d7cae2ff646c7738e5480e8bbd625db65550506c25b2091aa478167011754d43c48ae419a3a1294b2f29ad76d8a17a90340ea7a9c87c19dbf0211d96254f27dd6e5be31916b69b42d1575bd4f110db7532ee5", 0xc2}, {&(0x7f0000000300)="ebd0b3beda4e0381cc7fdd0bfdb69676540a8bf02b16e39a3d5dcdafd32d5d3722df8726343276cf23eef0845cd00fd72ed6a08652151c4e7a2bff588c4168c6f1aeb437a524873ec066482aee0a434c6ee053cebc5768783ab7a8c0e0652f14edf0de118edc4e46d53783ad0f25a5e704f4cbee714e21ac6ec6e5a4348cb8452fd16a2788426dc103620bcb1843bb81c695fa9895cee03760a6af66c64c855b3de7034daccfbf6c13ec133da0dfb4c4b278d19719a0f5f805add789b2e0ef37274f430f9b2bd6ea84b1baf3", 0xcc}, {&(0x7f00000004c0)="891a13fb274229a7cd36b9f11574cd3d5abf0abc3ad62227a18b09570774abc58e478a2529625e9d110feaa6db16c1fe5a7e47dc3b54a5ec00809ac42c2a6a25fad6ed77dd6cde8bf522a9f7df4e331c58364a79ed1941d7ba3c4dc342af59b4700a83a5c0c671b236713f13a054d39ebb925087cbb35a059c1a42d0fe6403cfd16ebf990d6e3a16", 0x88}, {&(0x7f0000000400)="6b9f1130f0cbb39924b1f13fc3fabb9638c881bde4aeaf376c85d8ac0000000009fcb3b8983252f3fcf75a03cea94e446f125ffd6247b229cf0188d60a36d29763c33efb7d48cc7a040000000000", 0x4e}], 0x5}}, {{0x0, 0x0, &(0x7f0000001fc0)=[{&(0x7f0000001a00)="8b0fdb03bbdb2f5afcc202e5dd0ce841925f332f01ed00f985e300e8c752f74f569b9477d103c62004b9684bf9ba5503301918b24b6cdf7243a41903805a250d6272505970572a148e58c18eacd0fce63bf4a96263b2a0c0258c3abe3c13e72483c30b94faaad3a5f5a3a1c4a2487c580cdd17eb960906bfb3b0a8c7935dab4a050a68df0721c4940b3a06429465c0a115bff383867bf17e9deef5de1c2d56a395e12e164b59c6bb0d55f4e6eaec6fa7db5a622a42fcfda37974a0064cd3cecf69baa76796b17829b214c485207fd742a68be74946b4cd6ca000", 0xda}, {&(0x7f0000001b00)="69c4d1bb956f9cac315109a3b52ca9ed4731ecb9a8d1c3f75e9a771c634713ffed270d66c0e0dcd622f8d6435ac9fd4da108e9318d8fa68316a2380018db97190f4ad623cc88f3f91a98559de6f656e831fd21fbeb19b356af14f9598362d6401adf6f6f9ed9d00c07ce8a3603e767e9033e3264c30db9261038521c0430bbf43222094718b957eb44cb921404ca31befc2e3ce494a41767b9ea1fec0ebfe55aee7ce1", 0xa3}, {&(0x7f00000027c0)="8adc6c3009af743dd27f1cded499661bdc60f67cc239ece6923d5bbd9811b958640d7093238b58b060db6ed31873b1a1eab4927051818ac8c57db8508c3b6f832f1bf2218b9bf581b24f79b1ca2cfb9573c072d2b99c96eddc0b90e83f966092a6ab89853cf873592cd1b4f5ece38bf05116ff3e682d139c76e06642ee77d84121da4ea4617a671598dff824f9bfae006aa47018fd717a97aae7ecfa8bc84ead3577753823bb22b6eb07f0ddca413fc7c895566b35141eea0ec8dd74b4697a48bb45eb3d517614ed9284b54b85d7c4bf", 0xd0}, {&(0x7f0000001cc0)="1b2ed9efd95459b99faff1adfa54be7956726b087de3e6ceced9f47e86d27216e8662f63b760930cb931ced15105e9b3ad0bcb78014d854612", 0x39}], 0x4, &(0x7f0000002080)=ANY=[], 0x2f0}}], 0x2, 0x0) setsockopt$sock_int(r0, 0x1, 0x21, &(0x7f0000000040), 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='\a\x00\x00'], 0x48) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001000090600"/20, @ANYRES32=0x0, @ANYBLOB="adffa888000000001c00128009000100626f6e64000000000c000280050001000600000008000a0079"], 0x44}}, 0x0) shutdown(r0, 0x1) syz_emit_ethernet(0x3e, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa88a800008100000086dd6076cd8a00000000000000000000fe8000"/52], 0x0) prlimit64(0x0, 0xe, &(0x7f0000002500)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = syz_io_uring_setup(0xfb, &(0x7f00000003c0)={0x0, 0x0, 0x10100}, &(0x7f00000000c0)=0x0, &(0x7f0000000100)=0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) syz_io_uring_submit(r4, r5, &(0x7f0000000600)=@IORING_OP_RECVMSG={0xa, 0x0, 0x0, r7, 0x0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000019c0)=[{&(0x7f00000002c0)=""/183, 0xb7}], 0x1}, 0x0, 0x40000103}) io_uring_enter(r3, 0x46f6, 0x0, 0x0, 0x0, 0x0) write(r6, &(0x7f0000000140)="ad", 0x1) socket$inet_udp(0x2, 0x2, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f0000000000)='g', 0x4c, 0x0, &(0x7f00000000c0)={0x11, 0xd, 0x0, 0x1, 0x0, 0x6, @remote}, 0x14) recvmmsg(r0, &(0x7f00000048c0)=[{{0x0, 0x0, &(0x7f0000004a00)=[{&(0x7f0000000a00)=""/4095, 0xfff}], 0x1}}], 0x1, 0x0, 0x0) 6.539874365s ago: executing program 5 (id=3681): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f188f3eb8aa914a0dd8354beed8bc065f0ff010000b430ac65e6459d65f92d7fe29ece7c0986112c2367eb7473c5da1ccc6d4226380bcc08f2d3ca047a7b800cd37ad48d31da361d50b822c689838f7b0ce621444e1541b56d2709ff20aebcc0eb8c77fc46e714cc938e2348f1dd80d338f47ef8755e5aaefdf119edaed45dc114a43e01b3e1b66f395b0ec5259c9632802e5f"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20020800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}, {0x0}], 0x2}, 0x10}], 0x5, 0x10160, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = socket(0x29, 0x2, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), r5) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 6.367531065s ago: executing program 0 (id=3682): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(0x0, &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) rmdir(&(0x7f0000000380)='./file0/../file0\x00') 5.239351581s ago: executing program 6 (id=3683): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f188f3eb8aa914a0dd8354beed8bc065f0ff010000b430ac65e6459d65f92d7fe29ece7c0986112c2367eb7473c5da1ccc6d4226380bcc08f2d3ca047a7b800cd37ad48d31da361d50b822c689838f7b0ce621444e1541b56d2709ff20aebcc0eb8c77fc46e714cc938e2348f1dd80d338f47ef8755e5aaefdf119edaed45dc114a43e01b3e1b66f395b0ec5259c9632802e5f"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20020800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}, {0x0}], 0x2}, 0x10}], 0x5, 0x10160, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) socket(0x29, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) 4.495191541s ago: executing program 0 (id=3684): syz_clone3(&(0x7f0000000640)={0x9001000, &(0x7f0000000240), &(0x7f0000000280)=0x0, &(0x7f00000004c0), {0x38}, &(0x7f0000000500)=""/28, 0x1c, &(0x7f0000000540)=""/167, &(0x7f0000000600)=[0x0, 0x0, 0xffffffffffffffff, 0x0], 0x4}, 0x58) prlimit64(r0, 0x6, 0x0, &(0x7f00000006c0)) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000001cc0), r2) sendmsg$NFC_CMD_GET_DEVICE(r2, &(0x7f0000001dc0)={0x0, 0x0, &(0x7f0000001d80)={&(0x7f0000001d40)={0x14, r3, 0x621b7fa40716df4d, 0x70bd2b, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0xc894}, 0x4000000) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='freezer.parent_freezing\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000000), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) syz_kvm_setup_cpu$x86(r6, 0xffffffffffffffff, &(0x7f00005d4000/0x18000)=nil, &(0x7f0000000140)=[@textreal={0x8, &(0x7f0000000040)="5b0f01c2c29c028ed0660f388236af0083ee2c0f20c06635000004200f22c0643e1f0fb7c2", 0x25}], 0x1, 0x2, 0x0, 0x0) preadv(r6, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x1, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r5, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r7, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000380)=[@text64={0x40, 0x0}], 0x1, 0x64, 0x0, 0x0) connect$802154_dgram(r6, &(0x7f00000001c0)={0x24, @short={0x2, 0x2, 0xfffe}}, 0x14) ioctl$KVM_RUN(r7, 0xae80, 0x0) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x303, 0x36}, "b1fe00", "9e8ecc7bb5352776725e1047711330ff2bb17b550800", "dc5d3f00", "46b0dc72b7b1d30e"}, 0x38) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000200)={'wpan3\x00'}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x28, r8, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_SYNC_OFFSET_MAX_NEIGHBOR={0x8, 0x15, 0xe8}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x0) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x0, 0x0, r6, 0x0, '\x00', 0x0, r6, 0x4, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x16, &(0x7f00000008c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r10}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @call={0x85, 0x0, 0x0, 0x1}, @call={0x85, 0x0, 0x0, 0xca}, @map_idx={0x18, 0x17, 0x5, 0x0, 0xc}, @map_idx_val={0x18, 0xa, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0xbb3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000980)='syzkaller\x00', 0x4, 0x2b, &(0x7f00000009c0)=""/43, 0x40f00, 0xc, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a00)={0x3, 0x5, 0x1, 0x5}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000a40)=[r6, r6, r6], &(0x7f0000000a80)=[{0x3, 0x4, 0xf, 0x6}, {0x1, 0x3, 0x7, 0x4}, {0x2, 0x3, 0x0, 0x1a}, {0x1, 0x2, 0x3, 0x7}, {0x4, 0x4, 0x7, 0x6}], 0x10, 0x73deb537, @void, @value}, 0x94) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="8c010000", @ANYRES16=r8, @ANYBLOB="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"], 0x18c}, 0x1, 0x0, 0x0, 0x4}, 0x1) syz_genetlink_get_family_id$fou(&(0x7f0000000140), r1) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r1) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r1, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x24, r11, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_SEQ={0x5, 0x12, 0x80}, @L2TP_ATTR_VLAN_ID={0x6, 0xe, 0xed2}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x8000) 4.216139897s ago: executing program 5 (id=3685): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c000904020000010300000904020101010200"], 0x0) 4.209888812s ago: executing program 2 (id=3686): r0 = syz_open_dev$video4linux(0x0, 0x0, 0x0) ioctl$VIDIOC_SUBDEV_S_FMT(r0, 0x80405600, &(0x7f00000000c0)={0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1}}) 3.589779428s ago: executing program 7 (id=3687): syz_usb_connect$cdc_ncm(0x4, 0x6e, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002"], 0x0) syz_usb_connect$uac1(0x3, 0xa2, &(0x7f0000000040)=ANY=[@ANYBLOB="12011001000000406b1d01014000010203010902900003010380000904000000010100000a24010f00030201020c2402060602040c0032a304090401000001020000090401010101020000072401200404000c2402010201400f0a3b4725090501090000f7090607250183020c0009040200000103000009040201"], 0x0) 3.440606257s ago: executing program 2 (id=3688): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$unix(0x1, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_AUTHENTICATE(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r3, @ANYBLOB, @ANYRES32=r2, @ANYBLOB="05000800010000000a00060008021100000100000800090001ac0f000900070022eeacf57100000008002600501400000a003400020202020202000008003500"], 0x60}}, 0x0) 3.439635314s ago: executing program 6 (id=3689): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6}]}) socket$nl_netfilter(0x10, 0x3, 0xc) set_mempolicy(0x8006, &(0x7f0000000040)=0xfff, 0x5) r3 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x1, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r3, 0xc1105511, &(0x7f0000000700)={{0x7, 0x0, 0x400000, 0x0, 'syz1\x00', 0x1}, 0x0, [0x8001, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0xfffffffc, 0x204, 0x7ff, 0x2, 0x0, 0x40, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, 0x10, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7f, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff81, 0x0, 0x1, 0x0, 0x0, 0x20000, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xbe9e, 0x20, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x6]}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_TIMESTAMPING(r4, 0x1, 0x25, &(0x7f00000001c0)=0x29ac, 0x4) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r5, 0x0, 0xca, &(0x7f00000001c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@loopback, @private=0xa010100}, 0x10) setsockopt$sock_int(r4, 0x1, 0x1, &(0x7f0000000040)=0x3, 0x4) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) 3.350016208s ago: executing program 2 (id=3690): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001c00210000000000000000caae04b136", @ANYRES32=r3, @ANYBLOB="000000000a000200aaaaaaaaaabb00000600050000000000"], 0x30}}, 0x0) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x2, &(0x7f0000130000/0x800000)=nil) r5 = gettid() r6 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0x41, 0x3f, 0x5f, 0x20, 0x61d, 0xc150, 0xce6f, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x33, 0x0, 0x1, 0x18, 0x70, 0xfd, 0x0, [], [{{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x4}}]}}]}}]}}, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(0xffffffffffffffff, 0xc4c85512, &(0x7f0000000040)={{0x6, 0x1, 0x0, 0x0, 'syz0\x00', 0xfffffffc}, 0x0, [0x0, 0xa6d, 0x0, 0x0, 0x6, 0x0, 0x0, 0x800, 0x0, 0x0, 0x10001, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000000000000, 0x8, 0x4, 0xfffffffffffffffe, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe00, 0xe, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x3, 0x0, 0x0, 0x1, 0x0, 0x0, 0xfffffffffffffffc, 0x9, 0x0, 0x10000000000, 0x200ce4, 0x0, 0x0, 0x0, 0x1, 0x20000000, 0x0, 0x80000, 0x20000000000, 0x0, 0x0, 0x40000000000, 0x2, 0x0, 0x0, 0x6, 0x0, 0x0, 0x6]}) syz_usb_control_io$printer(r6, 0x0, 0x0) syz_usb_ep_write$ath9k_ep1(r6, 0x82, 0xa8, &(0x7f0000000040)=ANY=[@ANYBLOB="a200004ef3b11f948ef66b0ee0b3d41b1b"]) process_vm_writev(r5, &(0x7f0000000000)=[{&(0x7f00008f9f09)=""/247, 0xf7}], 0x1, &(0x7f0000121000)=[{&(0x7f0000217f28)=""/231, 0xffffff4e}], 0x23a, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x8) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r7, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) r9 = syz_open_procfs(0x0, &(0x7f0000000080)='mountstats\x00') preadv2(r9, &(0x7f00000001c0)=[{&(0x7f0000002240)=""/138, 0x8a}], 0x1, 0x4, 0x0, 0x17) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f00000001c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x13, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.123644995s ago: executing program 0 (id=3691): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mkdir(&(0x7f0000000440)='./file1\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@nfs_export_on}]}) chdir(&(0x7f00000001c0)='./bus\x00') rmdir(&(0x7f0000000380)='./file0/../file0\x00') 2.153876745s ago: executing program 0 (id=3692): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x200, 0x0, 0x0, 0x0, 0x20, 0x1b96, 0x13, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0xe10858595ca4ddb4, 0x0, {0x9, 0x21, 0x1, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x48) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000280)={0x2c, &(0x7f00000000c0)={0x0, 0xd, 0x5, {0x5, 0xf, "9a768d"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f00000008c0)={0x84, &(0x7f0000000440)={0x20, 0x13, 0x9, "e01c5d13e0cca5dbc5"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), 0xffffffffffffffff) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000002c0)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x46, @local, @mcast1, 0x80, 0x0, 0x6, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) 1.722425305s ago: executing program 6 (id=3693): mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x8010) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe, 0x0, 0xffffffff}, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x4, 0x0, 0x0, 0x2) eventfd(0x8) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00', r3}, 0x10) r4 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r4, 0x0, 0x484, &(0x7f0000000340)=""/163, &(0x7f0000000100)=0xa3) fchdir(0xffffffffffffffff) openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f0000001900), 0x1, 0x0) signalfd4(0xffffffffffffffff, &(0x7f0000001a80), 0x8, 0x0) 1.601157923s ago: executing program 5 (id=3694): prlimit64(0x0, 0xe, &(0x7f0000000300)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$vim2m_VIDIOC_REQBUFS(0xffffffffffffffff, 0xc0145608, 0x0) socketpair(0x22, 0x100000002, 0x2, &(0x7f0000000040)) (fail_nth: 1) 1.143729176s ago: executing program 5 (id=3695): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) chdir(&(0x7f00000001c0)='./bus\x00') r3 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r3, &(0x7f0000000640)={0x2020}, 0x2020) 1.01549963s ago: executing program 7 (id=3696): openat$binder_debug(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/kernel/debug/binder/state\x00', 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000a00)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c383032313100f188f3eb8aa914a0dd8354beed8bc065f0ff010000b430ac65e6459d65f92d7fe29ece7c0986112c2367eb7473c5da1ccc6d4226380bcc08f2d3ca047a7b800cd37ad48d31da361d50b822c689838f7b0ce621444e1541b56d2709ff20aebcc0eb8c77fc46e714cc938e2348f1dd80d338f47ef8755e5aaefdf119edaed45dc114a43e01b3e1b66f395b0ec5259c9632802e5f"], 0x20}, 0x1, 0x0, 0x0, 0x4800}, 0x20020800) recvmmsg(r3, &(0x7f0000000780)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x80}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, &(0x7f0000003f40)=[{&(0x7f0000002d80)=""/4109, 0x100d}, {0x0}], 0x2}, 0x10}], 0x5, 0x10160, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) connect$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x6) 0s ago: executing program 7 (id=3697): r0 = openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x101600, 0x0) ioctl$TIOCSETD(r0, 0x5423, &(0x7f0000000040)=0x2) ioctl$TIOCSETD(r0, 0x5423, &(0x7f00000003c0)=0x7) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000100)={0x0, 0x2, 0x18}, 0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r1, 0x58, &(0x7f0000000280)}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xc, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e24}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r2, 0x8, &(0x7f0000000240)=0x2) add_key(0x0, 0x0, &(0x7f0000000480)="a1", 0x1, 0xffffffffffffffff) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_io_uring_setup(0x5c2, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x8003}, &(0x7f0000000240)=0x0, &(0x7f0000000200)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffff8, 0x0, 0x4) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) syz_io_uring_submit(r6, r7, &(0x7f00000004c0)=@IORING_OP_RECV=@use_registered_buffer={0x1b, 0x68, 0x11, r8, 0x0, 0x0, 0x0, 0x1, 0x1, {0x3}}) io_uring_enter(r5, 0x6e2, 0x3900, 0x1, 0x0, 0x0) io_uring_enter(r5, 0x68be, 0x5002, 0x4, 0x0, 0x0) ioctl$TIOCVHANGUP(r0, 0x5437, 0x2) kernel console output (not intermixed with test programs): vice strings: Mfr=0, Product=0, SerialNumber=0 [ 1258.444725][ T29] audit: type=1326 audit(1739454145.432:635): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19100 comm="syz.6.3208" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb835b8cde9 code=0x0 [ 1258.467720][ C0] vkms_vblank_simulate: vblank timer overrun [ 1258.494357][ T47] usb 1-1: config 0 descriptor?? [ 1258.524103][ T974] usb 6-1: Using ep0 maxpacket: 16 [ 1258.707897][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1258.896809][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1258.901014][ T47] usbhid 1-1:0.0: can't add hid device: -71 [ 1259.211669][ T4571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1259.258874][ T47] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1259.275235][ T47] usb 1-1: USB disconnect, device number 63 [ 1259.308741][ T974] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1259.337704][ T974] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1259.361133][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1259.377980][ T974] usb 6-1: config 0 descriptor?? [ 1259.863278][ T974] usbhid 6-1:0.0: can't add hid device: -71 [ 1259.883123][ T974] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1259.891452][ T5868] usb 8-1: new high-speed USB device number 39 using dummy_hcd [ 1259.919839][ T974] usb 6-1: USB disconnect, device number 67 [ 1260.023618][T19116] IPVS: length: 163 != 24 [ 1260.739083][ T5868] usb 8-1: Using ep0 maxpacket: 8 [ 1260.749189][ T5868] usb 8-1: config 0 has an invalid interface number: 107 but max is 0 [ 1260.757516][ T5868] usb 8-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1260.846040][ T5868] usb 8-1: config 0 has no interface number 0 [ 1260.883995][T19124] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3213'. [ 1260.961687][ T5868] usb 8-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=33.2c [ 1260.970930][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1260.982094][T19132] netlink: 'syz.6.3215': attribute type 1 has an invalid length. [ 1260.990894][ T5868] usb 8-1: Product: syz [ 1260.995182][ T5868] usb 8-1: Manufacturer: syz [ 1261.000716][ T5868] usb 8-1: SerialNumber: syz [ 1261.030287][ T5868] usb 8-1: config 0 descriptor?? [ 1261.142961][T19132] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 1261.311666][T19114] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1261.322119][T19114] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1261.374709][ T5868] usb 8-1: USB disconnect, device number 39 [ 1261.540907][T10540] usb 6-1: new high-speed USB device number 68 using dummy_hcd [ 1261.722742][T10540] usb 6-1: Using ep0 maxpacket: 32 [ 1261.742582][T10540] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1261.762274][T10540] usb 6-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1261.773412][T10540] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1261.789572][T10540] usb 6-1: Product: syz [ 1261.793816][T10540] usb 6-1: Manufacturer: syz [ 1261.803607][T10540] usb 6-1: SerialNumber: syz [ 1261.830425][T10540] usb 6-1: config 0 descriptor?? [ 1261.841716][T10540] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1261.951828][ T5868] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 1262.125935][ T974] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 1262.140066][ T5868] usb 3-1: Using ep0 maxpacket: 32 [ 1262.302698][ T974] usb 1-1: Using ep0 maxpacket: 16 [ 1262.317021][ T974] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1262.334592][ T974] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1262.360322][ T974] usb 1-1: New USB device found, idVendor=1781, idProduct=0898, bcdDevice= 0.00 [ 1262.445637][ T974] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1262.487400][ T974] usb 1-1: config 0 descriptor?? [ 1262.861352][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1263.165952][ T974] pxrc 1-1:0.0: Could not find endpoint [ 1263.172553][ T974] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 1263.193225][T10540] gspca_sunplus: reg_r err -32 [ 1263.385269][ T47] usb 1-1: USB disconnect, device number 64 [ 1263.476125][T17734] usb 8-1: new high-speed USB device number 40 using dummy_hcd [ 1263.636189][T17734] usb 8-1: Using ep0 maxpacket: 16 [ 1263.643239][T17734] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1263.654857][T17734] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1263.664112][T17734] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1263.674956][T17734] usb 8-1: config 0 descriptor?? [ 1263.947864][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1264.438417][T10540] sunplus 6-1:0.0: probe with driver sunplus failed with error -32 [ 1264.667939][T17734] usbhid 8-1:0.0: can't add hid device: -71 [ 1264.792736][T17734] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1264.823269][T17734] usb 8-1: USB disconnect, device number 40 [ 1264.845830][ T974] usb 6-1: USB disconnect, device number 68 [ 1264.961931][ T5868] usb 3-1: unable to get BOS descriptor or descriptor too short [ 1265.014863][ T5868] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1265.036832][ T5868] usb 3-1: can't read configurations, error -71 [ 1266.177074][T19171] IPVS: length: 163 != 24 [ 1266.182899][ T4571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1266.565753][ T5868] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 1266.739348][T19178] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3227'. [ 1266.821970][ T5868] usb 3-1: Using ep0 maxpacket: 16 [ 1266.881130][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1266.914949][ T5868] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1266.948740][ T5868] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1266.996925][ T5868] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1267.024645][ T5868] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1267.075415][ T5868] usb 3-1: config 0 descriptor?? [ 1267.386506][ T5868] usbhid 3-1:0.0: can't add hid device: -71 [ 1267.392988][ T5868] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1267.424516][ T5868] usb 3-1: USB disconnect, device number 70 [ 1267.604862][T19188] netlink: 'syz.6.3232': attribute type 4 has an invalid length. [ 1267.623914][ T47] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 1267.644365][T19188] netlink: 'syz.6.3232': attribute type 4 has an invalid length. [ 1267.805617][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 1267.813168][ T47] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1267.821550][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1267.832405][ T47] usb 1-1: config 0 has no interfaces? [ 1267.839873][ T47] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1267.850735][ T47] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1267.867573][ T47] usb 1-1: Product: syz [ 1267.872403][ T47] usb 1-1: Manufacturer: syz [ 1267.877106][ T47] usb 1-1: SerialNumber: syz [ 1267.891861][ T47] usb 1-1: config 0 descriptor?? [ 1268.209500][ T47] usb 1-1: USB disconnect, device number 65 [ 1268.746358][ T974] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 1268.928070][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 1268.943858][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1268.970488][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1268.991708][ T974] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1269.030592][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1269.057313][ T974] usb 3-1: config 0 descriptor?? [ 1269.095467][T19201] overlayfs: failed to resolve './file1': -2 [ 1270.213937][ T4571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1270.806824][T19194] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1270.844859][T19194] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1270.886876][ T974] usbhid 3-1:0.0: can't add hid device: -71 [ 1270.899045][ T974] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1271.000647][ T974] usb 3-1: USB disconnect, device number 71 [ 1272.223808][T19234] IPVS: length: 163 != 24 [ 1272.285573][ T6129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1272.809354][T19240] netlink: 68 bytes leftover after parsing attributes in process `syz.2.3247'. [ 1272.915431][T19241] netlink: 156 bytes leftover after parsing attributes in process `syz.6.3246'. [ 1273.012021][T11381] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1273.309548][T19245] xt_nfacct: accounting object `syz1' does not exists [ 1274.044804][T19250] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3250'. [ 1274.488474][T19260] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3251'. [ 1275.311252][ T974] usb 8-1: new high-speed USB device number 41 using dummy_hcd [ 1275.321065][ T5868] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 1275.811985][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 1275.819672][ T974] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1275.829568][ T974] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1275.842260][ T974] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1275.851968][ T5868] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1275.861400][ T974] usb 8-1: config 1 has no interface number 1 [ 1275.867722][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1275.875750][ T5868] usb 1-1: Product: syz [ 1275.880097][ T974] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1275.893224][ T5868] usb 1-1: Manufacturer: syz [ 1275.898010][ T974] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1275.919926][ T5868] usb 1-1: SerialNumber: syz [ 1275.938773][ T5868] usb 1-1: config 0 descriptor?? [ 1275.965450][ T974] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1275.993612][ T974] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1276.011906][ T974] usb 8-1: Product: syz [ 1276.023348][ T974] usb 8-1: Manufacturer: syz [ 1276.028501][ T974] usb 8-1: SerialNumber: syz [ 1276.856726][ T5868] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1276.999659][ T5866] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 1277.096874][ T974] usb 8-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1277.104979][ T974] usb 8-1: MIDIStreaming interface descriptor not found [ 1277.110431][ T29] audit: type=1400 audit(1739454162.896:636): avc: denied { write } for pid=19283 comm="syz.5.3260" name="rtc0" dev="devtmpfs" ino=921 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 1277.137903][ T974] usb 8-1: USB disconnect, device number 41 [ 1277.160062][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 1277.179735][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1277.224000][ T29] audit: type=1400 audit(1739454162.981:637): avc: denied { read } for pid=19283 comm="syz.5.3260" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 1277.271423][T19284] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 1277.280028][ T5866] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1277.291466][ T5866] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1277.295086][T19284] Bluetooth: hci5: Opcode 0x0406 failed: -4 [ 1277.300983][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1277.327399][T19284] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 1277.333722][T19284] Bluetooth: hci1: Opcode 0x0406 failed: -4 [ 1277.345515][T19284] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 1277.351767][T19284] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1277.362575][ T5866] usb 3-1: config 0 descriptor?? [ 1277.382687][T19284] Bluetooth: hci3: Opcode 0x0406 failed: -4 [ 1277.390475][T19284] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 1277.396897][T19284] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1277.404986][T19284] Bluetooth: hci2: Opcode 0x0406 failed: -4 [ 1277.450372][T11582] udevd[11582]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1277.794762][T19290] xt_nfacct: accounting object `syz1' does not exists [ 1277.946425][T19266] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1278.163161][T19266] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1278.182792][ T5866] usbhid 3-1:0.0: can't add hid device: -71 [ 1278.201570][ T5866] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1278.214447][ T5866] usb 3-1: USB disconnect, device number 72 [ 1278.315501][T16059] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1278.396141][ T5868] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1278.502655][ T5868] usb 1-1: USB disconnect, device number 66 [ 1278.665903][T19299] IPVS: length: 163 != 24 [ 1278.806274][ T5866] usb 6-1: new high-speed USB device number 69 using dummy_hcd [ 1278.989484][ T5866] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1279.134391][ T5866] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1279.156339][ T5866] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1279.165870][ T5866] usb 6-1: config 1 has no interface number 1 [ 1279.172503][ T5866] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1279.426378][T11381] Bluetooth: hci5: command 0x0406 tx timeout [ 1279.518943][T11381] Bluetooth: hci3: command 0x0c1a tx timeout [ 1279.525604][T11381] Bluetooth: hci1: command 0x0406 tx timeout [ 1279.602020][ T5817] Bluetooth: hci2: command 0x0c1a tx timeout [ 1279.739462][ T5866] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1279.748815][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1279.756862][ T5866] usb 6-1: Product: syz [ 1279.761165][ T5866] usb 6-1: Manufacturer: syz [ 1279.761327][T10540] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 1279.765784][ T5866] usb 6-1: SerialNumber: syz [ 1279.939844][T10540] usb 1-1: Using ep0 maxpacket: 16 [ 1279.998810][ T5866] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1279.999528][T10540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.006748][ T5866] usb 6-1: MIDIStreaming interface descriptor not found [ 1280.051251][T10540] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.078412][T10540] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1280.097008][ T5866] usb 6-1: USB disconnect, device number 69 [ 1280.123754][T10540] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1280.303047][ T5869] usb 3-1: new high-speed USB device number 73 using dummy_hcd [ 1280.341803][T10540] usb 1-1: config 0 descriptor?? [ 1280.548321][ T5869] usb 3-1: Using ep0 maxpacket: 16 [ 1280.589636][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1280.612139][ T5869] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1280.772826][T11173] udevd[11173]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1281.267130][ T5869] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1281.286519][ T5869] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1281.294704][T10540] usbhid 1-1:0.0: can't add hid device: -71 [ 1281.300939][T10540] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1281.327495][T10540] usb 1-1: USB disconnect, device number 67 [ 1281.405843][ T5869] usb 3-1: config 0 descriptor?? [ 1281.657103][T19324] sp0: Synchronizing with TNC [ 1281.756963][ T5817] Bluetooth: hci5: command 0x0406 tx timeout [ 1281.763329][ T5817] Bluetooth: hci1: command 0x0406 tx timeout [ 1281.769706][ T5817] Bluetooth: hci3: command 0x0c1a tx timeout [ 1281.821813][T11381] Bluetooth: hci2: command 0x0c1a tx timeout [ 1281.959995][ T5866] usb 6-1: new high-speed USB device number 70 using dummy_hcd [ 1282.121736][ T29] audit: type=1400 audit(1739454167.115:638): avc: denied { read } for pid=19319 comm="syz.5.3271" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1282.154234][ T29] audit: type=1400 audit(1739454167.115:639): avc: denied { open } for pid=19319 comm="syz.5.3271" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 1282.406764][ T29] audit: type=1326 audit(1739454167.826:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19316 comm="syz.7.3270" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f192438cde9 code=0x0 [ 1282.442193][ T5869] usbhid 3-1:0.0: can't add hid device: -71 [ 1282.448241][ T5869] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1283.079610][ T5866] usb 6-1: Using ep0 maxpacket: 16 [ 1283.086614][ T5866] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 1283.094879][ T5866] usb 6-1: config 0 has no interface number 0 [ 1283.103214][ T5866] usb 6-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1283.113045][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1283.121249][ T5866] usb 6-1: Product: syz [ 1283.126278][ T5866] usb 6-1: Manufacturer: syz [ 1283.131008][ T5866] usb 6-1: SerialNumber: syz [ 1283.192155][ T5866] usb 6-1: config 0 descriptor?? [ 1283.198830][ T5869] usb 3-1: USB disconnect, device number 73 [ 1283.215109][ T5866] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1283.841665][ T974] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 1283.959454][T11381] Bluetooth: hci3: command 0x0c1a tx timeout [ 1284.034309][ T974] usb 3-1: Using ep0 maxpacket: 32 [ 1284.044547][T11381] Bluetooth: hci2: command 0x0c1a tx timeout [ 1284.052313][ T974] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1284.065768][ T974] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1284.075197][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1284.083430][ T974] usb 3-1: Product: syz [ 1284.087744][ T974] usb 3-1: Manufacturer: syz [ 1284.094740][ T974] usb 3-1: SerialNumber: syz [ 1284.104609][ T974] usb 3-1: config 0 descriptor?? [ 1284.114634][ T974] gspca_main: sunplus-2.14.0 probing 08ca:2060 [ 1284.348244][ T974] gspca_sunplus: reg_r err -32 [ 1284.474620][ T6129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1284.557896][ T5869] usb 1-1: new high-speed USB device number 68 using dummy_hcd [ 1284.860497][T17734] usb 8-1: new high-speed USB device number 42 using dummy_hcd [ 1284.868812][ T5869] usb 1-1: Using ep0 maxpacket: 16 [ 1284.876837][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1284.888422][ T5869] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1284.898280][ T5869] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1284.912426][ T5869] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1284.921574][ T5869] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1284.940109][ T5869] usb 1-1: config 0 descriptor?? [ 1285.025439][T19358] overlayfs: failed to resolve './file1': -2 [ 1285.286450][T17734] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1285.364802][T17734] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1285.462855][T17734] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1285.493175][ T5866] gspca_spca1528: reg_r err -110 [ 1285.500145][ T5866] spca1528 6-1:0.1: probe with driver spca1528 failed with error -110 [ 1285.549710][T17734] usb 8-1: config 1 has no interface number 1 [ 1285.561440][T17734] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1285.576795][T17734] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1285.620019][ T5869] usbhid 1-1:0.0: can't add hid device: -71 [ 1285.631739][ T5869] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1285.647460][T17734] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1285.672409][ T5869] usb 1-1: USB disconnect, device number 68 [ 1285.690214][T17734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1285.730002][T17734] usb 8-1: Product: syz [ 1285.743485][T17734] usb 8-1: Manufacturer: syz [ 1285.750943][T17734] usb 8-1: SerialNumber: syz [ 1286.118166][T19367] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3281'. [ 1286.526425][ T5866] usb 6-1: USB disconnect, device number 70 [ 1286.542784][ T974] sunplus 3-1:0.0: probe with driver sunplus failed with error -32 [ 1286.545796][T17734] usb 8-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1286.571638][T17734] usb 8-1: MIDIStreaming interface descriptor not found [ 1286.600669][T17734] usb 8-1: USB disconnect, device number 42 [ 1287.006669][T19372] overlayfs: failed to resolve './file0': -2 [ 1287.248202][T19381] xt_nfacct: accounting object `syz1' does not exists [ 1287.297012][T11173] udevd[11173]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1287.832655][T17734] usb 3-1: USB disconnect, device number 74 [ 1288.005513][T19387] overlayfs: conflicting options: userxattr,metacopy=on [ 1288.176914][T19375] new mount options do not match the existing superblock, will be ignored [ 1288.460233][T17734] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1288.641628][T17734] usb 3-1: Using ep0 maxpacket: 16 [ 1288.648916][T17734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1288.660244][T17734] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1288.670155][T17734] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1288.886074][T17734] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1288.899275][T17734] usb 3-1: config 0 descriptor?? [ 1289.015817][ T5869] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 1289.219710][ T5869] usb 1-1: Using ep0 maxpacket: 8 [ 1289.233058][ T5869] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1289.242649][ T5869] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1289.250727][ T5869] usb 1-1: Product: syz [ 1289.255211][ T5869] usb 1-1: Manufacturer: syz [ 1289.259907][ T5869] usb 1-1: SerialNumber: syz [ 1289.268931][ T5869] usb 1-1: config 0 descriptor?? [ 1289.272764][ T5866] usb 8-1: new high-speed USB device number 43 using dummy_hcd [ 1289.454167][ T5866] usb 8-1: Using ep0 maxpacket: 16 [ 1289.468839][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1289.484901][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1289.496397][ T5869] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1289.496582][ T5866] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1289.515638][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1289.631616][T19407] sp0: Synchronizing with TNC [ 1289.723553][T17734] usbhid 3-1:0.0: can't add hid device: -71 [ 1289.858481][T17734] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1289.979407][ T5866] usb 8-1: config 0 descriptor?? [ 1289.996419][T17734] usb 3-1: USB disconnect, device number 75 [ 1290.420250][T19401] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1290.445259][T19401] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1290.607652][ T5866] usbhid 8-1:0.0: can't add hid device: -71 [ 1290.613862][ T5866] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1290.624796][ T5866] usb 8-1: USB disconnect, device number 43 [ 1290.651653][ T6746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1290.711678][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1290.862011][T19413] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3294'. [ 1291.508420][ T5869] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1291.526716][ T5869] usb 1-1: USB disconnect, device number 69 [ 1292.597507][T19424] xt_nfacct: accounting object `syz1' does not exists [ 1293.032886][T19426] FAULT_INJECTION: forcing a failure. [ 1293.032886][T19426] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1293.086174][T19426] CPU: 0 UID: 0 PID: 19426 Comm: syz.7.3299 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1293.086201][T19426] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1293.086210][T19426] Call Trace: [ 1293.086216][T19426] [ 1293.086223][T19426] dump_stack_lvl+0x16c/0x1f0 [ 1293.086250][T19426] should_fail_ex+0x50a/0x650 [ 1293.086273][T19426] _copy_from_user+0x2e/0xd0 [ 1293.086286][T19426] __sys_bpf+0x21c/0x49c0 [ 1293.086304][T19426] ? __pfx_lock_release+0x10/0x10 [ 1293.086328][T19426] ? __pfx___sys_bpf+0x10/0x10 [ 1293.086344][T19426] ? vfs_write+0x306/0x1150 [ 1293.086369][T19426] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1293.086397][T19426] ? fput+0x67/0x440 [ 1293.086417][T19426] ? ksys_write+0x1ba/0x250 [ 1293.086440][T19426] ? __pfx_ksys_write+0x10/0x10 [ 1293.086464][T19426] __x64_sys_bpf+0x78/0xc0 [ 1293.086479][T19426] ? lockdep_hardirqs_on+0x7c/0x110 [ 1293.086496][T19426] do_syscall_64+0xcd/0x250 [ 1293.086516][T19426] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1293.086539][T19426] RIP: 0033:0x7f192438cde9 [ 1293.086552][T19426] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1293.086567][T19426] RSP: 002b:00007f192520b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 1293.086584][T19426] RAX: ffffffffffffffda RBX: 00007f19245a5fa0 RCX: 00007f192438cde9 [ 1293.086596][T19426] RDX: 0000000000000048 RSI: 0000400000000340 RDI: 000000000000000a [ 1293.086606][T19426] RBP: 00007f192520b090 R08: 0000000000000000 R09: 0000000000000000 [ 1293.086616][T19426] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1293.086625][T19426] R13: 0000000000000000 R14: 00007f19245a5fa0 R15: 00007ffc68bd2ae8 [ 1293.086648][T19426] [ 1293.280246][T19432] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3301'. [ 1293.333672][T11287] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1294.499990][T11287] usb 3-1: Using ep0 maxpacket: 16 [ 1294.510742][ T5869] usb 8-1: new full-speed USB device number 44 using dummy_hcd [ 1294.512322][T11287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1295.020580][T19437] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3300'. [ 1295.029723][T11287] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1295.047998][T11287] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 1295.058031][T19440] netlink: 76 bytes leftover after parsing attributes in process `syz.0.3302'. [ 1295.071120][T11287] usb 3-1: New USB device found, idVendor=1b1c, idProduct=1b09, bcdDevice= 0.00 [ 1295.071148][T11287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1295.078936][T11287] usb 3-1: config 0 descriptor?? [ 1295.130838][T11287] usb 3-1: can't set config #0, error -71 [ 1295.134319][ T5869] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1295.173753][T11287] usb 3-1: USB disconnect, device number 76 [ 1295.280389][ T5869] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1295.452293][ T5869] usb 8-1: New USB device found, idVendor=1d50, idProduct=60a1, bcdDevice=a0.4f [ 1295.562871][T19446] overlayfs: failed to resolve './file1': -2 [ 1296.023403][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1296.031634][ T5869] usb 8-1: Product: syz [ 1296.035836][ T5869] usb 8-1: Manufacturer: syz [ 1296.040566][ T5869] usb 8-1: SerialNumber: syz [ 1296.061611][ T5869] usb 8-1: config 0 descriptor?? [ 1296.074929][ T5869] usb 8-1: can't set config #0, error -71 [ 1296.093358][ T29] audit: type=1400 audit(1739454180.660:641): avc: denied { append } for pid=19447 comm="syz.0.3305" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 1296.188211][ T5869] usb 8-1: USB disconnect, device number 44 [ 1296.584611][T19454] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3306'. [ 1296.646371][ T748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1296.791929][T16059] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1297.204730][T11287] usb 3-1: new full-speed USB device number 77 using dummy_hcd [ 1297.419823][T11287] usb 3-1: config index 0 descriptor too short (expected 35577, got 27) [ 1297.428480][T11287] usb 3-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 1297.459845][T11287] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1297.482680][T11287] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 1297.503010][T11287] usb 3-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 1297.523156][T11287] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1297.677747][ T29] audit: type=1326 audit(1739454182.138:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19458 comm="syz.0.3309" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe19158cde9 code=0x0 [ 1299.087879][ T29] audit: type=1400 audit(1739454183.297:643): avc: denied { read } for pid=19470 comm="syz.6.3312" lport=35971 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1299.345869][ T29] audit: type=1400 audit(1739454183.382:644): avc: denied { setopt } for pid=19470 comm="syz.6.3312" lport=35971 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 1299.460767][T19484] FAULT_INJECTION: forcing a failure. [ 1299.460767][T19484] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1299.499324][T19484] CPU: 0 UID: 0 PID: 19484 Comm: syz.7.3314 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1299.499354][T19484] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1299.499364][T19484] Call Trace: [ 1299.499370][T19484] [ 1299.499377][T19484] dump_stack_lvl+0x16c/0x1f0 [ 1299.499404][T19484] should_fail_ex+0x50a/0x650 [ 1299.499431][T19484] _copy_from_user+0x2e/0xd0 [ 1299.499449][T19484] copy_msghdr_from_user+0x99/0x160 [ 1299.499472][T19484] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1299.499496][T19484] ? __pfx___lock_acquire+0x10/0x10 [ 1299.499526][T19484] ___sys_recvmsg+0xdc/0x1a0 [ 1299.499547][T19484] ? __pfx____sys_recvmsg+0x10/0x10 [ 1299.499569][T19484] ? __pfx_lock_release+0x10/0x10 [ 1299.499590][T19484] ? trace_lock_acquire+0x14e/0x1f0 [ 1299.499624][T19484] do_recvmmsg+0x2f8/0x740 [ 1299.499653][T19484] ? __pfx_do_recvmmsg+0x10/0x10 [ 1299.499673][T19484] ? vfs_write+0x306/0x1150 [ 1299.499702][T19484] ? __mutex_unlock_slowpath+0x164/0x6a0 [ 1299.499729][T19484] ? __fget_files+0x206/0x3a0 [ 1299.499750][T19484] __x64_sys_recvmmsg+0x239/0x290 [ 1299.499773][T19484] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 1299.499804][T19484] do_syscall_64+0xcd/0x250 [ 1299.499823][T19484] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1299.499847][T19484] RIP: 0033:0x7f192438cde9 [ 1299.499862][T19484] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1299.499877][T19484] RSP: 002b:00007f19251ea038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 1299.499894][T19484] RAX: ffffffffffffffda RBX: 00007f19245a6080 RCX: 00007f192438cde9 [ 1299.499905][T19484] RDX: 0000000000000001 RSI: 00004000000048c0 RDI: 0000000000000003 [ 1299.499915][T19484] RBP: 00007f19251ea090 R08: 0000000000000000 R09: 0000000000000000 [ 1299.499924][T19484] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1299.499934][T19484] R13: 0000000000000000 R14: 00007f19245a6080 R15: 00007ffc68bd2ae8 [ 1299.499954][T19484] [ 1299.839624][T19486] bond1: entered promiscuous mode [ 1299.844917][T19486] bond1: entered allmulticast mode [ 1299.851199][T19486] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1300.289685][ T5869] usb 3-1: USB disconnect, device number 77 [ 1301.309098][T19506] overlayfs: failed to resolve './file1': -2 [ 1301.955585][T19486] bond1 (unregistering): Released all slaves [ 1302.799519][ T6129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1302.906026][T19527] netlink: 44 bytes leftover after parsing attributes in process `syz.5.3324'. [ 1302.925119][T19527] FAULT_INJECTION: forcing a failure. [ 1302.925119][T19527] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1302.938572][T19527] CPU: 0 UID: 0 PID: 19527 Comm: syz.5.3324 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1302.938590][T19527] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1302.938598][T19527] Call Trace: [ 1302.938603][T19527] [ 1302.938608][T19527] dump_stack_lvl+0x16c/0x1f0 [ 1302.938628][T19527] should_fail_ex+0x50a/0x650 [ 1302.938649][T19527] _copy_from_user+0x2e/0xd0 [ 1302.938665][T19527] copy_msghdr_from_user+0x99/0x160 [ 1302.938690][T19527] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1302.938714][T19527] ___sys_sendmsg+0xff/0x1e0 [ 1302.938731][T19527] ? __pfx____sys_sendmsg+0x10/0x10 [ 1302.938761][T19527] ? __pfx_lock_release+0x10/0x10 [ 1302.938791][T19527] ? trace_lock_acquire+0x14e/0x1f0 [ 1302.938817][T19527] ? __fget_files+0x206/0x3a0 [ 1302.938832][T19527] __sys_sendmsg+0x16e/0x220 [ 1302.938846][T19527] ? __pfx___sys_sendmsg+0x10/0x10 [ 1302.938866][T19527] do_syscall_64+0xcd/0x250 [ 1302.938880][T19527] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1302.938895][T19527] RIP: 0033:0x7facafb8cde9 [ 1302.938905][T19527] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1302.938916][T19527] RSP: 002b:00007facb0982038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1302.938927][T19527] RAX: ffffffffffffffda RBX: 00007facafda5fa0 RCX: 00007facafb8cde9 [ 1302.938934][T19527] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000005 [ 1302.938939][T19527] RBP: 00007facb0982090 R08: 0000000000000000 R09: 0000000000000000 [ 1302.938945][T19527] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1302.938950][T19527] R13: 0000000000000000 R14: 00007facafda5fa0 R15: 00007ffcf05153d8 [ 1302.938962][T19527] [ 1303.230425][T19530] 9pnet_fd: Insufficient options for proto=fd [ 1303.319848][ T5869] usb 8-1: new high-speed USB device number 45 using dummy_hcd [ 1303.491316][ T5869] usb 8-1: Using ep0 maxpacket: 8 [ 1303.498273][ T5869] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1303.509591][ T5869] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1303.521421][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1303.574200][ T5869] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1303.733380][ T5869] usb 8-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 1303.920704][T10540] usb 6-1: new high-speed USB device number 71 using dummy_hcd [ 1303.928816][ T47] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 1303.977702][ T5869] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1303.988431][ T5869] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1303.996878][ T5869] usb 8-1: Product: syz [ 1304.001986][ T5869] usb 8-1: Manufacturer: syz [ 1304.007000][ T5869] usb 8-1: SerialNumber: syz [ 1304.024845][ T5869] usb 8-1: config 0 descriptor?? [ 1304.039703][T19526] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1304.059270][ T5869] ati_remote 8-1:0.0: ati_remote_probe: Unexpected desc.bNumEndpoints [ 1304.110898][T10540] usb 6-1: Using ep0 maxpacket: 8 [ 1304.120075][T10540] usb 6-1: config index 0 descriptor too short (expected 65298, got 18) [ 1304.128905][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 1304.136241][ T47] usb 1-1: config index 0 descriptor too short (expected 156, got 27) [ 1304.145233][ T47] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1304.160086][T10540] usb 6-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1304.172625][ T47] usb 1-1: config 0 has no interfaces? [ 1304.178508][T10540] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1304.186770][T10540] usb 6-1: Product: syz [ 1304.191721][T10540] usb 6-1: Manufacturer: syz [ 1304.197368][T10540] usb 6-1: SerialNumber: syz [ 1304.204750][T10540] usb 6-1: config 0 descriptor?? [ 1304.212956][ T47] usb 1-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1304.222660][ T47] usb 1-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1304.231911][ T47] usb 1-1: Product: syz [ 1304.236376][ T47] usb 1-1: Manufacturer: syz [ 1304.241331][ T47] usb 1-1: SerialNumber: syz [ 1304.249421][ T47] usb 1-1: config 0 descriptor?? [ 1304.406280][ T974] usb 8-1: USB disconnect, device number 45 [ 1304.485692][T10540] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1304.617153][ T29] audit: type=1326 audit(1739454188.629:645): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19545 comm="syz.2.3330" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6fc58cde9 code=0x0 [ 1304.696990][ T47] usb 1-1: USB disconnect, device number 70 [ 1305.995670][T19539] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1306.016044][T19539] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1306.040599][T10540] gspca_sunplus: reg_w_riv err -71 [ 1306.061974][T10540] sunplus 6-1:0.0: probe with driver sunplus failed with error -71 [ 1306.141814][T10540] usb 6-1: USB disconnect, device number 71 [ 1306.378545][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1307.435506][T19580] xt_nfacct: accounting object `syz1' does not exists [ 1308.252815][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1308.280283][ T971] usb 3-1: new full-speed USB device number 78 using dummy_hcd [ 1308.533057][ T971] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1308.921999][ T971] usb 3-1: config 0 has no interface number 0 [ 1308.928387][ T971] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1308.941698][ T971] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1309.580467][ T971] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1309.787801][T19592] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3340'. [ 1309.964604][ T971] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1309.980123][ T971] usb 3-1: Product: syz [ 1309.988167][ T971] usb 3-1: Manufacturer: syz [ 1309.996996][ T971] usb 3-1: SerialNumber: syz [ 1310.920997][ T29] audit: type=1326 audit(1739454194.447:646): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19595 comm="syz.6.3342" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb835b8cde9 code=0x0 [ 1311.023553][ T971] usb 3-1: config 0 descriptor?? [ 1311.043326][ T971] usb 3-1: can't set config #0, error -71 [ 1311.051856][ T971] usb 3-1: USB disconnect, device number 78 [ 1311.784951][T19616] IPVS: length: 163 != 24 [ 1311.806509][T19617] netlink: 68 bytes leftover after parsing attributes in process `syz.5.3347'. [ 1311.861575][T10540] usb 8-1: new high-speed USB device number 46 using dummy_hcd [ 1311.878626][T19615] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3348'. [ 1312.066375][T10540] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1312.111540][T10540] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1312.200154][T10540] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1312.290151][T10540] usb 8-1: config 1 has no interface number 1 [ 1312.365081][T10540] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1312.402732][T10540] usb 8-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1312.462169][T10540] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1312.527251][ T748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1312.563757][T10540] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1312.578097][T10540] usb 8-1: Product: syz [ 1312.588715][T10540] usb 8-1: Manufacturer: syz [ 1312.593476][T10540] usb 8-1: SerialNumber: syz [ 1312.868871][T10540] usb 8-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1312.876544][T10540] usb 8-1: MIDIStreaming interface descriptor not found [ 1313.425694][T10540] usb 8-1: USB disconnect, device number 46 [ 1313.893191][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1313.957379][ T971] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 1314.032341][T10540] usb 8-1: new high-speed USB device number 47 using dummy_hcd [ 1314.096021][ T5869] usb 6-1: new full-speed USB device number 72 using dummy_hcd [ 1314.117235][ T971] usb 1-1: Using ep0 maxpacket: 16 [ 1314.124136][ T971] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1314.138835][ T971] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1314.147996][ T971] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1314.158363][ T971] usb 1-1: config 0 descriptor?? [ 1314.213495][T10540] usb 8-1: Using ep0 maxpacket: 8 [ 1314.220696][T10540] usb 8-1: config 0 has an invalid interface number: 107 but max is 0 [ 1314.233572][T10540] usb 8-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1314.256731][T10540] usb 8-1: config 0 has no interface number 0 [ 1314.269579][T10540] usb 8-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=33.2c [ 1314.278907][T10540] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.292362][ T5869] usb 6-1: config 0 has an invalid interface number: 50 but max is 0 [ 1314.322340][ T5869] usb 6-1: config 0 has no interface number 0 [ 1314.338925][ T5869] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1314.362793][T10540] usb 8-1: Product: syz [ 1314.367130][T10540] usb 8-1: Manufacturer: syz [ 1314.375489][ T5869] usb 6-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1314.386935][T10540] usb 8-1: SerialNumber: syz [ 1314.401135][T10540] usb 8-1: config 0 descriptor?? [ 1314.408712][ T5869] usb 6-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1314.417935][ T5869] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1314.436496][ T5869] usb 6-1: Product: syz [ 1314.441352][ T5869] usb 6-1: Manufacturer: syz [ 1314.446076][ T5869] usb 6-1: SerialNumber: syz [ 1314.480862][ T5869] usb 6-1: config 0 descriptor?? [ 1314.486466][T19639] raw-gadget.3 gadget.5: fail, usb_ep_enable returned -22 [ 1314.510062][ T5869] yurex 6-1:0.50: USB YUREX device now attached to Yurex #0 [ 1314.636426][T19630] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1314.654223][ T971] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 1314.661417][ T971] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 1314.684981][T19630] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1314.690441][ T971] mcp2221 0003:04D8:00DD.001D: unknown main item tag 0x0 [ 1314.707425][T11582] udevd[11582]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1314.713800][T10540] usb 8-1: USB disconnect, device number 47 [ 1314.882090][ T971] mcp2221 0003:04D8:00DD.001D: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1314.895873][ C1] usb 1-1: input irq status -75 received [ 1315.835833][ T971] usb 1-1: USB disconnect, device number 71 [ 1315.916648][T19648] No such timeout policy "syz1" [ 1316.786527][T19654] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3357'. [ 1317.221181][ T974] usb 8-1: new high-speed USB device number 48 using dummy_hcd [ 1317.249327][ C0] usb 6-1: yurex_control_callback - control failed: -2 [ 1317.407217][ T971] usb 6-1: USB disconnect, device number 72 [ 1317.418566][ T971] yurex 6-1:0.50: USB YUREX #0 now disconnected [ 1317.421155][ T974] usb 8-1: Using ep0 maxpacket: 16 [ 1317.447745][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1317.481353][ T974] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1317.493007][ T974] usb 8-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1317.502867][T19661] netlink: 'syz.5.3361': attribute type 4 has an invalid length. [ 1317.531882][ T974] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1317.554931][ T974] usb 8-1: config 0 descriptor?? [ 1318.503488][ T6746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1318.528620][ T974] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 1318.553969][ T974] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 1318.572252][ T974] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 1318.585960][ T974] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 1318.604157][ T974] appleir 0003:05AC:8241.001E: unknown main item tag 0x0 [ 1318.613705][ T974] appleir 0003:05AC:8241.001E: No inputs registered, leaving [ 1318.624804][ T974] appleir 0003:05AC:8241.001E: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.7-1/input0 [ 1318.738164][T10540] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 1318.779020][ T47] usb 8-1: USB disconnect, device number 48 [ 1319.444602][T10540] usb 1-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1319.488323][T10540] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1319.555616][T10540] usb 1-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1319.620624][T10540] usb 1-1: config 1 has no interface number 1 [ 1319.653251][T10540] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1319.785023][T10540] usb 1-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1319.821073][T10540] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1319.844844][T10540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1319.862329][T10540] usb 1-1: Product: syz [ 1319.867641][T10540] usb 1-1: Manufacturer: syz [ 1320.033593][T10540] usb 1-1: SerialNumber: syz [ 1320.054359][ T6129] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1320.702480][T10540] usb 1-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1320.725999][T10540] usb 1-1: MIDIStreaming interface descriptor not found [ 1320.802482][T10540] usb 1-1: USB disconnect, device number 72 [ 1320.948603][ T971] usb 8-1: new high-speed USB device number 49 using dummy_hcd [ 1321.079028][T11173] udevd[11173]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1321.108951][ T971] usb 8-1: Using ep0 maxpacket: 16 [ 1321.120310][ T971] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1321.162775][ T971] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1321.194456][ T971] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1321.210326][ T971] usb 8-1: config 0 descriptor?? [ 1321.250583][T19709] netlink: 'syz.5.3375': attribute type 4 has an invalid length. [ 1321.688387][ T29] audit: type=1326 audit(1739454204.597:647): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19713 comm="syz.5.3378" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facafb8cde9 code=0x0 [ 1321.711282][ C0] vkms_vblank_simulate: vblank timer overrun [ 1321.991389][ T29] audit: type=1326 audit(1739454204.681:648): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=19710 comm="syz.2.3376" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fe6fc58cde9 code=0x0 [ 1322.014484][ C0] vkms_vblank_simulate: vblank timer overrun [ 1322.223209][ T971] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 1322.230354][ T971] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 1322.317195][ T971] mcp2221 0003:04D8:00DD.001F: unknown main item tag 0x0 [ 1322.324786][ T971] mcp2221 0003:04D8:00DD.001F: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1322.530448][ T971] usb 8-1: USB disconnect, device number 49 [ 1322.637732][ T974] usb 6-1: new high-speed USB device number 73 using dummy_hcd [ 1322.798777][ T974] usb 6-1: Using ep0 maxpacket: 16 [ 1322.810332][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1322.830168][ T974] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1322.862339][ T974] usb 6-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1322.889945][ T974] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1322.937794][ T974] usb 6-1: config 0 descriptor?? [ 1324.239172][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1324.287595][ T974] appleir 0003:05AC:8241.0020: unknown main item tag 0x0 [ 1324.295465][ T974] appleir 0003:05AC:8241.0020: unknown main item tag 0x0 [ 1324.302583][ T974] appleir 0003:05AC:8241.0020: unknown main item tag 0x0 [ 1324.310432][ T974] appleir 0003:05AC:8241.0020: unknown main item tag 0x0 [ 1324.317614][ T974] appleir 0003:05AC:8241.0020: unknown main item tag 0x0 [ 1324.326921][ T974] appleir 0003:05AC:8241.0020: No inputs registered, leaving [ 1324.660761][ T974] appleir 0003:05AC:8241.0020: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.5-1/input0 [ 1324.682068][ T974] usb 6-1: USB disconnect, device number 73 [ 1326.447930][ T6746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1326.571179][T15874] usb 6-1: new high-speed USB device number 74 using dummy_hcd [ 1326.743482][T19768] No such timeout policy "syz1" [ 1326.979686][T15874] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1327.028460][T15874] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1327.045128][T15874] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1327.071651][T15874] usb 6-1: config 1 has no interface number 1 [ 1327.100370][T15874] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1327.185493][T15874] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1327.288508][T19780] No such timeout policy "syz1" [ 1327.579358][T15874] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1327.603576][T15874] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1327.647937][T15874] usb 6-1: Product: syz [ 1327.660118][T15874] usb 6-1: Manufacturer: syz [ 1327.686555][T15874] usb 6-1: SerialNumber: syz [ 1327.927874][T15874] usb 6-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1327.973178][T15874] usb 6-1: MIDIStreaming interface descriptor not found [ 1328.922055][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1328.931792][ T47] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 1329.052892][T15874] usb 6-1: USB disconnect, device number 74 [ 1329.470487][T11582] udevd[11582]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1329.591771][T19800] overlayfs: failed to resolve './file1': -2 [ 1330.099754][ T47] usb 1-1: Using ep0 maxpacket: 16 [ 1330.106855][ T47] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.143960][ T47] usb 1-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1330.261244][ T47] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.271866][ T47] usb 1-1: config 0 descriptor?? [ 1330.314409][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1330.645135][ T974] usb 3-1: new high-speed USB device number 79 using dummy_hcd [ 1330.674920][T19808] netlink: 12 bytes leftover after parsing attributes in process `syz.7.3400'. [ 1330.787180][T19810] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3401'. [ 1330.802176][ T47] mcp2221 0003:04D8:00DD.0021: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.0-1/input0 [ 1330.821617][ T974] usb 3-1: Using ep0 maxpacket: 16 [ 1330.832882][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1330.847154][ T974] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1330.864176][ T974] usb 3-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 1330.876249][ T974] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1330.899555][ T974] usb 3-1: config 0 descriptor?? [ 1331.670781][T11287] usb 1-1: USB disconnect, device number 73 [ 1331.710900][ T974] appleir 0003:05AC:8241.0022: unknown main item tag 0x0 [ 1331.762345][ T974] appleir 0003:05AC:8241.0022: unknown main item tag 0x0 [ 1331.806218][ T974] appleir 0003:05AC:8241.0022: unknown main item tag 0x0 [ 1331.830483][ T974] appleir 0003:05AC:8241.0022: unknown main item tag 0x0 [ 1332.001375][ T974] appleir 0003:05AC:8241.0022: unknown main item tag 0x0 [ 1332.009629][ T974] appleir 0003:05AC:8241.0022: No inputs registered, leaving [ 1332.022005][ T974] appleir 0003:05AC:8241.0022: hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.2-1/input0 [ 1332.037810][ T974] usb 3-1: USB disconnect, device number 79 [ 1332.474133][ T6746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1333.134051][T19823] overlayfs: failed to resolve './file1': -2 [ 1333.252289][T19836] netlink: 'syz.5.3409': attribute type 4 has an invalid length. [ 1334.061135][T19842] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3412'. [ 1334.258842][ T974] usb 6-1: new high-speed USB device number 75 using dummy_hcd [ 1334.441607][ T974] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1334.450393][ T974] usb 6-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1334.461898][ T974] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1334.477073][ T974] usb 6-1: config 1 has no interface number 1 [ 1334.484847][ T974] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1334.500025][ T974] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1334.518311][ T974] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1334.527994][ T974] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1334.536087][ T974] usb 6-1: Product: syz [ 1334.540446][ T5866] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 1334.548374][ T974] usb 6-1: Manufacturer: syz [ 1334.553639][ T974] usb 6-1: SerialNumber: syz [ 1334.728821][ T5866] usb 1-1: Using ep0 maxpacket: 16 [ 1334.736285][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1334.748891][ T5866] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1334.758822][ T5866] usb 1-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1334.768194][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1334.784766][ T974] usb 6-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1334.792536][ T974] usb 6-1: MIDIStreaming interface descriptor not found [ 1334.800619][ T5866] usb 1-1: config 0 descriptor?? [ 1334.831167][ T974] usb 6-1: USB disconnect, device number 75 [ 1335.088271][T11172] udevd[11172]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1335.263318][T17734] usb 8-1: new high-speed USB device number 50 using dummy_hcd [ 1335.423675][T17734] usb 8-1: Using ep0 maxpacket: 8 [ 1335.430197][T17734] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1335.441131][T17734] usb 8-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF9, changing to 0x89 [ 1335.453464][T17734] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 1335.459632][ T5866] usbhid 1-1:0.0: can't add hid device: -71 [ 1335.465010][T17734] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x89 has invalid maxpacket 59391, setting to 1024 [ 1335.483696][ T5866] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1335.484316][T17734] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has an invalid bInterval 0, changing to 7 [ 1335.496329][ T5866] usb 1-1: USB disconnect, device number 74 [ 1335.517168][T17734] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 1335.528424][T17734] usb 8-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1335.541746][ T47] usb 3-1: new full-speed USB device number 80 using dummy_hcd [ 1335.553284][T17734] usb 8-1: New USB device found, idVendor=0bc7, idProduct=0008, bcdDevice=4f.c8 [ 1335.562431][T17734] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.570671][T17734] usb 8-1: Product: syz [ 1335.575102][T17734] usb 8-1: Manufacturer: syz [ 1335.579758][T17734] usb 8-1: SerialNumber: syz [ 1335.595398][T17734] usb 8-1: config 0 descriptor?? [ 1335.601201][T19855] raw-gadget.1 gadget.7: fail, usb_ep_enable returned -22 [ 1335.613179][T17734] ati_remote 8-1:0.0: Initializing ati_remote hardware failed. [ 1335.622493][T17734] ati_remote 8-1:0.0: probe with driver ati_remote failed with error -5 [ 1335.680365][T10540] usb 6-1: new high-speed USB device number 76 using dummy_hcd [ 1335.702234][ T6746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1335.714704][ T47] usb 3-1: config 0 has an invalid interface number: 50 but max is 0 [ 1335.730628][ T47] usb 3-1: config 0 has no interface number 0 [ 1335.737028][ T47] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 1335.748353][ T47] usb 3-1: config 0 interface 50 altsetting 0 endpoint 0x82 has invalid maxpacket 1023, setting to 64 [ 1335.761261][ T47] usb 3-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1335.770522][ T47] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1335.778632][ T47] usb 3-1: Product: syz [ 1335.782838][ T47] usb 3-1: Manufacturer: syz [ 1335.787918][ T47] usb 3-1: SerialNumber: syz [ 1335.794000][ T47] usb 3-1: config 0 descriptor?? [ 1335.799920][T19858] raw-gadget.3 gadget.2: fail, usb_ep_enable returned -22 [ 1335.813176][ T47] yurex 3-1:0.50: USB YUREX device now attached to Yurex #0 [ 1335.840669][T10540] usb 6-1: Using ep0 maxpacket: 16 [ 1335.863045][T10540] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1335.874411][T10540] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1335.884273][T10540] usb 6-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1335.893363][T10540] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1335.899905][T11287] usb 8-1: USB disconnect, device number 50 [ 1335.908636][T10540] usb 6-1: config 0 descriptor?? [ 1336.441838][T19868] overlayfs: failed to resolve './file1': -2 [ 1336.957386][T19863] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1336.992730][T19863] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1337.037249][T10540] usbhid 6-1:0.0: can't add hid device: -71 [ 1337.120369][T10540] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1337.143374][T10540] usb 6-1: USB disconnect, device number 76 [ 1337.358982][ T5866] usb 8-1: new high-speed USB device number 51 using dummy_hcd [ 1337.448892][T19875] overlayfs: failed to resolve './file1': -2 [ 1338.133667][ T5866] usb 8-1: Using ep0 maxpacket: 16 [ 1338.156606][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1338.175289][ T5866] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1338.185798][ C0] usb 3-1: yurex_control_callback - control failed: -2 [ 1338.193260][ T5866] usb 8-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1338.195411][ T47] usb 3-1: USB disconnect, device number 80 [ 1338.209423][ T5866] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1338.222567][ T47] yurex 3-1:0.50: USB YUREX #0 now disconnected [ 1338.230007][ T5866] usb 8-1: config 0 descriptor?? [ 1338.408102][T10540] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 1338.524437][ T4571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1338.577440][T10540] usb 1-1: Using ep0 maxpacket: 8 [ 1338.593378][T10540] usb 1-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 1338.608627][T10540] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1338.619877][T10540] usb 1-1: Product: syz [ 1338.624341][T10540] usb 1-1: Manufacturer: syz [ 1338.628992][T10540] usb 1-1: SerialNumber: syz [ 1338.646666][T10540] usb 1-1: config 0 descriptor?? [ 1338.896805][ T5866] usbhid 8-1:0.0: can't add hid device: -71 [ 1338.901496][T10540] usb 1-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 1338.917764][ T5866] usbhid 8-1:0.0: probe with driver usbhid failed with error -71 [ 1338.930469][ T5866] usb 8-1: USB disconnect, device number 51 [ 1340.972949][T10540] dvb_usb_rtl28xxu 1-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 1340.992196][T10540] usb 1-1: USB disconnect, device number 75 [ 1341.301247][ T748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1341.488763][T19907] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3428'. [ 1341.775830][ T5866] usb 6-1: new high-speed USB device number 77 using dummy_hcd [ 1341.889448][T19909] No such timeout policy "syz1" [ 1342.061178][ T5866] usb 6-1: Using ep0 maxpacket: 8 [ 1342.144873][ T5866] usb 6-1: config 0 has an invalid interface number: 107 but max is 0 [ 1342.159132][ T5866] usb 6-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1342.169917][ T5866] usb 6-1: config 0 has no interface number 0 [ 1342.178888][ T5866] usb 6-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=33.2c [ 1342.283423][ T5866] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1342.296339][ T5866] usb 6-1: Product: syz [ 1342.300797][ T5866] usb 6-1: Manufacturer: syz [ 1342.305674][ T5866] usb 6-1: SerialNumber: syz [ 1342.315834][ T5866] usb 6-1: config 0 descriptor?? [ 1342.350230][T19912] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3433'. [ 1342.452388][T19914] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3434'. [ 1342.572101][T19901] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1342.605757][T19901] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1342.666213][ T5866] usb 6-1: USB disconnect, device number 77 [ 1343.486301][T19926] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3436'. [ 1343.918356][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1343.983854][T10540] usb 3-1: new high-speed USB device number 81 using dummy_hcd [ 1344.085577][T19936] overlayfs: failed to resolve './file1': -2 [ 1344.362196][T10540] usb 3-1: Using ep0 maxpacket: 16 [ 1344.533375][T10540] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1344.556553][T10540] usb 3-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1344.566784][T10540] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1344.578465][T10540] usb 3-1: config 0 descriptor?? [ 1345.086390][T19946] xt_nfacct: accounting object `syz1' does not exists [ 1345.625572][T10540] mcp2221 0003:04D8:00DD.0023: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.2-1/input0 [ 1345.885016][T10540] usb 3-1: USB disconnect, device number 81 [ 1346.054750][T19954] netlink: 20 bytes leftover after parsing attributes in process `syz.7.3445'. [ 1346.781214][T19962] overlayfs: failed to resolve './file1': -2 [ 1347.367249][T19965] netlink: 'syz.0.3449': attribute type 4 has an invalid length. [ 1347.412008][T19967] overlayfs: overlapping lowerdir path [ 1347.419916][T16059] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1347.440295][ T5868] usb 3-1: new high-speed USB device number 82 using dummy_hcd [ 1347.627389][ T5868] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1347.639079][ T5868] usb 3-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 1347.654266][ T5868] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1347.675328][ T5868] usb 3-1: config 1 has no interface number 1 [ 1347.684121][ T5868] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1347.705694][ T5868] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1347.730226][ T5868] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1347.730407][ T47] usb 6-1: new high-speed USB device number 78 using dummy_hcd [ 1347.739554][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1347.765911][ T5868] usb 3-1: Product: syz [ 1347.777632][T19974] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3448'. [ 1347.797998][ T5868] usb 3-1: Manufacturer: syz [ 1347.805732][ T5868] usb 3-1: SerialNumber: syz [ 1348.032177][ T47] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1348.074543][ T47] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1348.231500][ T47] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1348.372514][ T47] usb 6-1: config 1 has no interface number 1 [ 1348.455341][ T5868] usb 3-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1348.463415][ T5868] usb 3-1: MIDIStreaming interface descriptor not found [ 1348.498599][ T47] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1348.528499][ T47] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1348.550289][ T5868] usb 3-1: USB disconnect, device number 82 [ 1348.556313][ T47] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1348.565743][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1348.574070][ T47] usb 6-1: Product: syz [ 1348.578584][ T47] usb 6-1: Manufacturer: syz [ 1348.583234][ T47] usb 6-1: SerialNumber: syz [ 1348.820259][ T47] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1348.830466][T19980] overlayfs: overlapping lowerdir path [ 1348.843389][ T47] usb 6-1: MIDIStreaming interface descriptor not found [ 1348.907522][T11582] udevd[11582]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1349.036249][ T47] usb 6-1: USB disconnect, device number 78 [ 1349.202680][T19985] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3453'. [ 1349.234724][T11172] udevd[11172]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1350.157427][ T6746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1350.337988][ T5868] usb 8-1: new high-speed USB device number 52 using dummy_hcd [ 1350.530016][ T5868] usb 8-1: Using ep0 maxpacket: 32 [ 1351.202180][ T5868] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 1351.248489][ T5868] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1351.299385][T20008] No such timeout policy "syz1" [ 1351.373912][ T974] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 1351.470553][ T5868] usb 8-1: config 0 has no interfaces? [ 1351.512259][ T5868] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1351.523682][ T5868] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1351.537545][ T5868] usb 8-1: Product: syz [ 1351.541770][ T5868] usb 8-1: Manufacturer: syz [ 1351.546457][ T5868] usb 8-1: SerialNumber: syz [ 1351.555102][ T5868] usb 8-1: config 0 descriptor?? [ 1351.652183][ T974] usb 1-1: Using ep0 maxpacket: 8 [ 1351.721842][ T974] usb 1-1: config 0 has an invalid interface number: 107 but max is 0 [ 1351.730890][ T974] usb 1-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1351.745176][ T974] usb 1-1: config 0 has no interface number 0 [ 1351.753618][ T974] usb 1-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=33.2c [ 1351.763007][ T974] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1351.771708][ T974] usb 1-1: Product: syz [ 1351.776190][ T974] usb 1-1: Manufacturer: syz [ 1352.338079][ T974] usb 1-1: SerialNumber: syz [ 1352.439023][ T974] usb 1-1: config 0 descriptor?? [ 1352.807142][ T47] usb 8-1: USB disconnect, device number 52 [ 1352.808127][T20005] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1352.855989][T20005] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1352.900903][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1352.924421][ T974] usb 1-1: USB disconnect, device number 76 [ 1353.634621][T20042] FAULT_INJECTION: forcing a failure. [ 1353.634621][T20042] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1353.648241][T20042] CPU: 1 UID: 0 PID: 20042 Comm: syz.0.3471 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1353.648265][T20042] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1353.648275][T20042] Call Trace: [ 1353.648280][T20042] [ 1353.648288][T20042] dump_stack_lvl+0x16c/0x1f0 [ 1353.648317][T20042] should_fail_ex+0x50a/0x650 [ 1353.648348][T20042] _copy_from_user+0x2e/0xd0 [ 1353.648366][T20042] copy_msghdr_from_user+0x99/0x160 [ 1353.648392][T20042] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 1353.648426][T20042] ___sys_sendmsg+0xff/0x1e0 [ 1353.648449][T20042] ? __pfx____sys_sendmsg+0x10/0x10 [ 1353.648478][T20042] ? __pfx_lock_release+0x10/0x10 [ 1353.648521][T20042] ? trace_lock_acquire+0x14e/0x1f0 [ 1353.648548][T20042] ? __fget_files+0x206/0x3a0 [ 1353.648572][T20042] __sys_sendmsg+0x16e/0x220 [ 1353.648594][T20042] ? __pfx___sys_sendmsg+0x10/0x10 [ 1353.648630][T20042] do_syscall_64+0xcd/0x250 [ 1353.648654][T20042] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1353.648679][T20042] RIP: 0033:0x7fe19158cde9 [ 1353.648696][T20042] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1353.648714][T20042] RSP: 002b:00007fe1923b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 1353.648731][T20042] RAX: ffffffffffffffda RBX: 00007fe1917a5fa0 RCX: 00007fe19158cde9 [ 1353.648742][T20042] RDX: 0000000020050800 RSI: 00004000000000c0 RDI: 0000000000000003 [ 1353.648751][T20042] RBP: 00007fe1923b7090 R08: 0000000000000000 R09: 0000000000000000 [ 1353.648762][T20042] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1353.648772][T20042] R13: 0000000000000000 R14: 00007fe1917a5fa0 R15: 00007ffedf7676f8 [ 1353.648794][T20042] [ 1353.823393][ C1] vkms_vblank_simulate: vblank timer overrun [ 1354.117083][ T974] usb 8-1: new high-speed USB device number 53 using dummy_hcd [ 1354.261118][ T974] usb 8-1: device descriptor read/64, error -71 [ 1354.907432][T20052] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3474'. [ 1355.041090][ T974] usb 8-1: new high-speed USB device number 54 using dummy_hcd [ 1355.225518][T20056] No such timeout policy "syz1" [ 1355.466127][ T974] usb 8-1: device descriptor read/64, error -71 [ 1355.719324][ T974] usb usb8-port1: attempt power cycle [ 1356.351789][T16059] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1356.655347][ T974] usb 8-1: new high-speed USB device number 55 using dummy_hcd [ 1357.305507][ T974] usb 8-1: device descriptor read/8, error -71 [ 1358.851133][T20106] netlink: 8 bytes leftover after parsing attributes in process `syz.7.3485'. [ 1359.055415][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1360.856834][ T5869] usb 6-1: new high-speed USB device number 79 using dummy_hcd [ 1360.973288][T20126] IPVS: length: 163 != 24 [ 1361.123976][ T5869] usb 6-1: device descriptor read/64, error -71 [ 1361.401880][ T5869] usb 6-1: new high-speed USB device number 80 using dummy_hcd [ 1361.583641][ T5869] usb 6-1: device descriptor read/64, error -71 [ 1362.151483][ T6746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1362.172062][ T5869] usb usb6-port1: attempt power cycle [ 1362.439233][T20145] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3497'. [ 1362.563924][ T5869] usb 6-1: new high-speed USB device number 81 using dummy_hcd [ 1363.209015][ T5869] usb 6-1: device descriptor read/8, error -71 [ 1364.050319][ T47] usb 3-1: new high-speed USB device number 83 using dummy_hcd [ 1364.512510][ T5869] usb 6-1: new high-speed USB device number 82 using dummy_hcd [ 1364.525111][ T6746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1364.659697][ T5869] usb 6-1: device descriptor read/8, error -71 [ 1364.763857][ T47] usb 3-1: Using ep0 maxpacket: 16 [ 1364.812292][ T5869] usb usb6-port1: unable to enumerate USB device [ 1364.821151][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1364.861704][ T47] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1364.912084][ T47] usb 3-1: New USB device found, idVendor=1e7d, idProduct=2db4, bcdDevice= 0.00 [ 1364.941074][ T47] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1364.969717][ T47] usb 3-1: config 0 descriptor?? [ 1365.193991][T20176] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3508'. [ 1365.425666][T20182] overlayfs: failed to resolve './file0': -2 [ 1365.807569][T20150] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1365.854406][T20150] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1365.877596][ T47] usbhid 3-1:0.0: can't add hid device: -71 [ 1365.887970][ T47] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 1365.910186][ T47] usb 3-1: USB disconnect, device number 83 [ 1367.228290][ T47] usb 3-1: new high-speed USB device number 84 using dummy_hcd [ 1367.300325][T20208] IPVS: length: 163 != 24 [ 1367.388601][ T47] usb 3-1: device descriptor read/64, error -71 [ 1367.645173][ T47] usb 3-1: new high-speed USB device number 85 using dummy_hcd [ 1367.695329][T20216] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3519'. [ 1367.797333][ T47] usb 3-1: device descriptor read/64, error -71 [ 1367.945099][ T47] usb usb3-port1: attempt power cycle [ 1367.956602][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1368.236334][T20223] overlayfs: failed to resolve './file1': -2 [ 1368.447294][ T47] usb 3-1: new high-speed USB device number 86 using dummy_hcd [ 1368.779641][ T47] usb 3-1: device descriptor read/8, error -71 [ 1369.070160][ T47] usb 3-1: new high-speed USB device number 87 using dummy_hcd [ 1369.099771][ T47] usb 3-1: device descriptor read/8, error -71 [ 1369.370232][ T47] usb usb3-port1: unable to enumerate USB device [ 1369.724168][T20229] Illegal XDP return value 336 on prog (id 581) dev syz_tun, expect packet loss! [ 1370.783607][ T748] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1371.667497][ T5868] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 1371.896314][ T29] audit: type=1326 audit(1739454251.441:649): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20245 comm="syz.5.3528" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facafb8cde9 code=0x0 [ 1371.998732][ T5868] usb 1-1: Using ep0 maxpacket: 8 [ 1372.143957][ T5868] usb 1-1: config index 0 descriptor too short (expected 65298, got 18) [ 1372.194162][ T5868] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 1372.205723][ T5868] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1372.214679][ T5868] usb 1-1: Product: syz [ 1372.322151][ T5868] usb 1-1: Manufacturer: syz [ 1372.338371][ T5868] usb 1-1: SerialNumber: syz [ 1372.359371][ T5868] usb 1-1: config 0 descriptor?? [ 1372.609386][T20258] overlayfs: failed to resolve './file0': -2 [ 1373.284460][ T5868] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 1373.724650][T20268] netlink: 156 bytes leftover after parsing attributes in process `syz.5.3534'. [ 1373.814452][ T5866] usb 3-1: new high-speed USB device number 88 using dummy_hcd [ 1374.102846][ T4571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1374.180699][T20275] overlayfs: failed to resolve './file0': -2 [ 1374.405444][ T5866] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1374.465328][ T5866] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1374.571237][ T5866] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 1374.632634][ T5866] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1374.684054][ T5866] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1374.792419][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1374.801536][ T5866] usb 3-1: Product: syz [ 1374.805863][ T5866] usb 3-1: Manufacturer: syz [ 1374.812239][ T5866] usb 3-1: SerialNumber: syz [ 1374.868316][T20240] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1374.890359][T20240] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1375.238452][ T5868] gspca_sunplus: reg_r err -71 [ 1375.290328][ T5868] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 1375.316695][ T5866] usb 3-1: 0:2 : does not exist [ 1375.334566][ T5868] usb 1-1: USB disconnect, device number 77 [ 1375.362672][ T5866] usb 3-1: USB disconnect, device number 88 [ 1375.583044][T13433] udevd[13433]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1376.979718][ T4571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1377.298848][ T5866] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 1377.323782][ T29] audit: type=1326 audit(1739454256.642:650): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20290 comm="syz.7.3542" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f192438cde9 code=0x0 [ 1377.502023][ T5866] usb 1-1: device descriptor read/64, error -71 [ 1377.812071][ T5866] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 1378.168222][ T5866] usb 1-1: device descriptor read/64, error -71 [ 1378.303928][ T5866] usb usb1-port1: attempt power cycle [ 1378.510052][T20322] bond1: entered promiscuous mode [ 1378.560473][T20322] bond1: entered allmulticast mode [ 1378.566090][T20322] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1378.728391][ T5866] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 1379.145777][ T5866] usb 1-1: device descriptor read/8, error -71 [ 1379.212618][ T5868] usb 3-1: new high-speed USB device number 89 using dummy_hcd [ 1379.373256][ T5868] usb 3-1: Using ep0 maxpacket: 8 [ 1379.380465][ T5868] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 1379.390572][ T5868] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1379.430978][ T5866] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 1379.439123][ T5868] usb 3-1: config 0 has no interface number 0 [ 1379.448474][ T5868] usb 3-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=33.2c [ 1379.458029][ T5868] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1379.459643][T20322] bond1 (unregistering): Released all slaves [ 1379.466983][ T5866] usb 1-1: device descriptor read/8, error -71 [ 1379.479250][ T5868] usb 3-1: Product: syz [ 1379.483828][ T5868] usb 3-1: Manufacturer: syz [ 1379.488443][ T5868] usb 3-1: SerialNumber: syz [ 1379.496625][ T5868] usb 3-1: config 0 descriptor?? [ 1379.602708][ T5866] usb usb1-port1: unable to enumerate USB device [ 1379.723151][T20327] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1379.734550][T20327] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1379.780322][ T5868] usb 3-1: USB disconnect, device number 89 [ 1380.463875][T20346] overlayfs: failed to resolve './file1': -2 [ 1380.687351][ T4571] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1381.307324][T20361] netlink: 156 bytes leftover after parsing attributes in process `syz.0.3555'. [ 1381.335881][ T5869] usb 3-1: new high-speed USB device number 90 using dummy_hcd [ 1381.391892][ T29] audit: type=1326 audit(1739454260.440:651): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20355 comm="syz.5.3557" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7facafb8cde9 code=0x0 [ 1381.870473][ T5869] usb 3-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1382.022263][ T5869] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1382.040220][ T5869] usb 3-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1382.052233][ T5869] usb 3-1: config 1 has no interface number 1 [ 1382.058589][ T5869] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1382.076222][ T5869] usb 3-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1382.115884][ T5869] usb 3-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1382.227346][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1382.235415][ T5869] usb 3-1: Product: syz [ 1382.241308][ T5869] usb 3-1: Manufacturer: syz [ 1382.246712][ T5869] usb 3-1: SerialNumber: syz [ 1382.398810][ T6746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1382.548307][ T5869] usb 3-1: No endpoint at altset 1, falling back to MIDI 1.0 [ 1382.556591][ T5869] usb 3-1: MIDIStreaming interface descriptor not found [ 1382.639883][ T5869] usb 3-1: USB disconnect, device number 90 [ 1382.903365][T11582] udevd[11582]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1383.809422][ T5868] usb 8-1: new high-speed USB device number 57 using dummy_hcd [ 1383.969817][ T5868] usb 8-1: Using ep0 maxpacket: 16 [ 1384.013261][ T5868] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1384.042402][ T5868] usb 8-1: config 0 interface 0 has no altsetting 0 [ 1384.063757][ T5868] usb 8-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 1384.092757][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1384.153360][T20389] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3563'. [ 1384.167967][ T5868] usb 8-1: Product: syz [ 1384.188766][ T5868] usb 8-1: Manufacturer: syz [ 1384.622356][ T5868] usb 8-1: SerialNumber: syz [ 1385.141108][ T5868] usb 8-1: config 0 descriptor?? [ 1385.155217][ T5868] hub 8-1:0.0: bad descriptor, ignoring hub [ 1385.273937][ T5868] hub 8-1:0.0: probe with driver hub failed with error -5 [ 1385.322243][ T5868] usb 8-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1385.360977][ T4571] usb 8-1: Failed to submit usb control message: -71 [ 1385.391036][ T4571] usb 8-1: unable to send the bmi data to the device: -71 [ 1385.398937][ T5868] usb 8-1: USB disconnect, device number 57 [ 1385.405961][ T4571] usb 8-1: unable to get target info from device [ 1385.412351][ T4571] usb 8-1: could not get target info (-71) [ 1385.419501][ T4571] usb 8-1: could not probe fw (-71) [ 1385.756212][ T47] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 1385.960891][ T47] usb 1-1: device descriptor read/64, error -71 [ 1386.259074][ T47] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1386.298015][ T974] usb 3-1: new high-speed USB device number 91 using dummy_hcd [ 1386.418758][ T6746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1386.460988][ T974] usb 3-1: Using ep0 maxpacket: 8 [ 1386.473271][ T47] usb 1-1: device descriptor read/64, error -71 [ 1386.480426][ T974] usb 3-1: config 0 has an invalid interface number: 107 but max is 0 [ 1386.489287][ T974] usb 3-1: config 0 has an invalid descriptor of length 36, skipping remainder of the config [ 1386.501182][ T974] usb 3-1: config 0 has no interface number 0 [ 1386.511854][ T974] usb 3-1: New USB device found, idVendor=0b48, idProduct=1004, bcdDevice=33.2c [ 1386.523825][ T974] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1386.533730][ T974] usb 3-1: Product: syz [ 1386.538293][ T974] usb 3-1: Manufacturer: syz [ 1386.542966][ T974] usb 3-1: SerialNumber: syz [ 1386.552681][ T974] usb 3-1: config 0 descriptor?? [ 1386.632118][ T5868] usb 8-1: new high-speed USB device number 58 using dummy_hcd [ 1386.693173][ T47] usb usb1-port1: attempt power cycle [ 1386.821091][T20416] overlayfs: failed to resolve './file1': -2 [ 1386.963771][T20405] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 1387.015525][T20405] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 1387.072514][ T47] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 1387.190831][ T47] usb 1-1: device descriptor read/8, error -71 [ 1387.333763][ T974] usb 3-1: USB disconnect, device number 91 [ 1387.339878][ T5868] usb 8-1: Using ep0 maxpacket: 16 [ 1387.358281][ T5868] usb 8-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1387.370022][ T5868] usb 8-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 1387.379980][ T5868] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1387.392364][ T5868] usb 8-1: config 0 descriptor?? [ 1387.465618][ T47] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 1387.487678][ T47] usb 1-1: device descriptor read/8, error -71 [ 1387.608051][ T47] usb usb1-port1: unable to enumerate USB device [ 1387.844012][ T5868] mcp2221 0003:04D8:00DD.0024: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.7-1/input0 [ 1388.058611][T20424] sp0: Synchronizing with TNC [ 1388.417709][ T5866] usb 3-1: new high-speed USB device number 92 using dummy_hcd [ 1388.447073][ T5868] usb 8-1: USB disconnect, device number 58 [ 1388.477384][ T35] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1388.599290][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 1388.615507][ T5866] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1388.629454][ T5866] usb 3-1: config 0 has no interface number 0 [ 1388.643589][ T5866] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1388.662004][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1388.670614][ T5866] usb 3-1: Product: syz [ 1388.684128][ T5866] usb 3-1: Manufacturer: syz [ 1388.689617][ T5866] usb 3-1: SerialNumber: syz [ 1389.182694][ T5866] usb 3-1: config 0 descriptor?? [ 1389.200357][ T5866] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1389.208198][ T47] usb 6-1: new high-speed USB device number 83 using dummy_hcd [ 1389.379322][ T47] usb 6-1: Using ep0 maxpacket: 16 [ 1389.409611][ T47] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 1389.422287][T20439] bond2: entered promiscuous mode [ 1389.427618][T20439] bond2: entered allmulticast mode [ 1389.447189][T20439] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1389.459585][ T47] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=7b.55 [ 1389.473722][T20441] No such timeout policy "syz1" [ 1389.589779][ T47] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1390.036138][ T47] usb 6-1: Product: syz [ 1390.040365][ T47] usb 6-1: Manufacturer: syz [ 1390.056096][ T47] usb 6-1: SerialNumber: syz [ 1390.062525][ T47] usb 6-1: config 0 descriptor?? [ 1390.143570][ T47] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 1390.217651][T20447] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3578'. [ 1390.553833][T20439] bond2 (unregistering): Released all slaves [ 1390.854601][T11287] usb 8-1: new full-speed USB device number 59 using dummy_hcd [ 1391.095394][ T5866] gspca_spca1528: reg_w err -110 [ 1391.147848][ T5866] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 1391.378651][ T4571] usb 6-1: Failed to submit usb control message: -110 [ 1391.393211][ T4571] usb 6-1: unable to send the bmi data to the device: -110 [ 1391.465986][ T4571] usb 6-1: unable to get target info from device [ 1391.540085][ T4571] usb 6-1: could not get target info (-110) [ 1391.563506][T11287] usb 8-1: config 0 has an invalid interface number: 50 but max is 0 [ 1391.607221][T11287] usb 8-1: config 0 has no interface number 0 [ 1391.616179][T11287] usb 8-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=e6.fc [ 1391.631523][T11287] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1391.648933][T11287] usb 8-1: Product: syz [ 1391.660337][T11287] usb 8-1: Manufacturer: syz [ 1391.670575][T11287] usb 8-1: SerialNumber: syz [ 1391.699668][ T4571] usb 6-1: could not probe fw (-110) [ 1391.713536][T11287] usb 8-1: config 0 descriptor?? [ 1391.738767][T11287] yurex 8-1:0.50: Could not find endpoints [ 1391.780602][ T47] usb 6-1: USB disconnect, device number 83 [ 1391.895370][T11287] usb 3-1: USB disconnect, device number 92 [ 1392.012681][T17734] usb 8-1: USB disconnect, device number 59 [ 1392.056457][T20466] IPVS: length: 163 != 24 [ 1392.295765][T20471] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3586'. [ 1392.576805][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1392.942086][ T29] audit: type=1326 audit(1739454271.244:652): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192438cde9 code=0x7ffc0000 [ 1393.137961][ T29] audit: type=1326 audit(1739454271.272:653): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=27 compat=0 ip=0x7f192438cde9 code=0x7ffc0000 [ 1393.269523][ T29] audit: type=1326 audit(1739454271.272:654): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192438cde9 code=0x7ffc0000 [ 1393.556981][ T29] audit: type=1326 audit(1739454271.272:655): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f192438cde9 code=0x7ffc0000 [ 1393.614900][ T29] audit: type=1326 audit(1739454271.272:656): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192438cde9 code=0x7ffc0000 [ 1393.697521][ T29] audit: type=1326 audit(1739454271.272:657): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192438cde9 code=0x7ffc0000 [ 1393.773969][ T29] audit: type=1326 audit(1739454271.272:658): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f192438cde9 code=0x7ffc0000 [ 1393.877391][ T29] audit: type=1326 audit(1739454271.272:659): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192438cde9 code=0x7ffc0000 [ 1393.964008][ T29] audit: type=1326 audit(1739454271.272:660): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=302 compat=0 ip=0x7f192438cde9 code=0x7ffc0000 [ 1394.002581][T20483] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3590'. [ 1394.074084][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 1394.125897][ T29] audit: type=1326 audit(1739454271.272:661): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20476 comm="syz.7.3589" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f192438cde9 code=0x7ffc0000 [ 1394.754385][T20494] overlayfs: failed to resolve './file1': -2 [ 1394.762103][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1395.146808][ C1] vcan0: j1939_tp_rxtimer: 0xffff88806f091c00: rx timeout, send abort [ 1395.160682][ C1] vcan0: j1939_tp_rxtimer: 0xffff888048769800: rx timeout, send abort [ 1395.173201][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88806f091c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1395.191462][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888048769800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 1397.009091][T20513] IPVS: length: 163 != 24 [ 1397.119357][ T974] usb 8-1: new high-speed USB device number 60 using dummy_hcd [ 1397.324265][ T974] usb 8-1: Using ep0 maxpacket: 32 [ 1397.347551][ T974] usb 8-1: config index 0 descriptor too short (expected 156, got 27) [ 1397.362434][ T974] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1397.394947][ T974] usb 8-1: config 0 has no interfaces? [ 1397.413549][ T974] usb 8-1: New USB device found, idVendor=0f11, idProduct=1021, bcdDevice=86.66 [ 1397.427772][ T974] usb 8-1: New USB device strings: Mfr=85, Product=120, SerialNumber=172 [ 1397.444604][ T974] usb 8-1: Product: syz [ 1397.452641][ T974] usb 8-1: Manufacturer: syz [ 1397.457298][ T974] usb 8-1: SerialNumber: syz [ 1397.472008][ T974] usb 8-1: config 0 descriptor?? [ 1398.436619][T16059] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1398.838957][ T47] usb 8-1: USB disconnect, device number 60 [ 1398.885849][T20529] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3602'. [ 1399.188365][T20538] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3603'. [ 1400.358450][ T47] usb 1-1: new high-speed USB device number 86 using dummy_hcd [ 1401.229989][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 1401.232975][T20551] bond2: entered promiscuous mode [ 1401.240767][T20551] bond2: entered allmulticast mode [ 1401.242589][ T47] usb 1-1: no configurations [ 1401.296391][ T47] usb 1-1: can't read configurations, error -22 [ 1401.296698][T20551] 8021q: adding VLAN 0 to HW filter on device bond2 [ 1401.496867][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1401.531249][ T47] usb 1-1: new high-speed USB device number 87 using dummy_hcd [ 1401.813333][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 1401.819151][ T47] usb 1-1: no configurations [ 1401.825202][ T47] usb 1-1: can't read configurations, error -22 [ 1401.831965][ T47] usb usb1-port1: attempt power cycle [ 1402.336247][ T47] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1402.375339][ T47] usb 1-1: Using ep0 maxpacket: 32 [ 1402.511677][ T47] usb 1-1: no configurations [ 1402.516489][ T47] usb 1-1: can't read configurations, error -22 [ 1402.555010][T20551] bond2 (unregistering): Released all slaves [ 1402.669613][ T47] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1403.348545][ T47] usb 1-1: device descriptor read/8, error -71 [ 1403.625092][ T47] usb usb1-port1: unable to enumerate USB device [ 1404.106055][T20582] overlayfs: failed to resolve './file1': -2 [ 1404.497541][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1406.305643][T20587] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3618'. [ 1406.333631][T20588] xt_nfacct: accounting object `syz1' does not exists [ 1406.866546][T20589] IPVS: length: 163 != 24 [ 1406.877312][T19522] Bluetooth: hci2: command 0x0c1a tx timeout [ 1408.121420][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1409.604472][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 1409.617653][ T29] audit: type=1400 audit(1739454286.828:681): avc: denied { bind } for pid=20609 comm=6C2586CE36DB0CCF197CC94F7FCE8F scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1409.693022][T20620] SELinux: syz.5.3623 (20620) wrote to /sys/fs/selinux/user! This will not be supported in the future; please update your userspace. [ 1409.719729][T17734] usb 3-1: new full-speed USB device number 93 using dummy_hcd [ 1410.442535][T20629] FAULT_INJECTION: forcing a failure. [ 1410.442535][T20629] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.459513][T17734] usb 3-1: unable to read config index 0 descriptor/start: -71 [ 1410.468098][T17734] usb 3-1: can't read configurations, error -71 [ 1410.503943][T20629] CPU: 1 UID: 0 PID: 20629 Comm: syz.0.3628 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1410.503977][T20629] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1410.503986][T20629] Call Trace: [ 1410.503991][T20629] [ 1410.503998][T20629] dump_stack_lvl+0x16c/0x1f0 [ 1410.504024][T20629] should_fail_ex+0x50a/0x650 [ 1410.504054][T20629] ? fs_reclaim_acquire+0xae/0x150 [ 1410.504084][T20629] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1410.504106][T20629] should_failslab+0xc2/0x120 [ 1410.504125][T20629] __kmalloc_noprof+0xcb/0x510 [ 1410.504142][T20629] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1410.504171][T20629] tomoyo_realpath_from_path+0xb9/0x720 [ 1410.504197][T20629] ? tomoyo_path_number_perm+0x235/0x590 [ 1410.504222][T20629] ? tomoyo_path_number_perm+0x235/0x590 [ 1410.504247][T20629] tomoyo_path_number_perm+0x248/0x590 [ 1410.504267][T20629] ? tomoyo_path_number_perm+0x235/0x590 [ 1410.504289][T20629] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1410.504331][T20629] ? __pfx_lock_release+0x10/0x10 [ 1410.504353][T20629] ? trace_lock_acquire+0x14e/0x1f0 [ 1410.504376][T20629] ? lock_acquire+0x2f/0xb0 [ 1410.504396][T20629] ? __fget_files+0x40/0x3a0 [ 1410.504433][T20629] ? __fget_files+0x206/0x3a0 [ 1410.504453][T20629] security_file_ioctl+0x9b/0x240 [ 1410.504475][T20629] __x64_sys_ioctl+0xb7/0x200 [ 1410.504500][T20629] do_syscall_64+0xcd/0x250 [ 1410.504522][T20629] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.504546][T20629] RIP: 0033:0x7fe19158cde9 [ 1410.504560][T20629] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.504577][T20629] RSP: 002b:00007fe192396038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.504595][T20629] RAX: ffffffffffffffda RBX: 00007fe1917a6080 RCX: 00007fe19158cde9 [ 1410.504607][T20629] RDX: 0000400000000480 RSI: 00000000400448c8 RDI: 0000000000000005 [ 1410.504617][T20629] RBP: 00007fe192396090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.504626][T20629] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.504636][T20629] R13: 0000000000000000 R14: 00007fe1917a6080 R15: 00007ffedf7676f8 [ 1410.504657][T20629] [ 1410.504664][T20629] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1410.523331][T20633] FAULT_INJECTION: forcing a failure. [ 1410.523331][T20633] name failslab, interval 1, probability 0, space 0, times 0 [ 1410.632225][ T5869] usb 8-1: new high-speed USB device number 61 using dummy_hcd [ 1410.772979][T20633] CPU: 1 UID: 0 PID: 20633 Comm: syz.2.3630 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1410.773017][T20633] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1410.773028][T20633] Call Trace: [ 1410.773036][T20633] [ 1410.773046][T20633] dump_stack_lvl+0x16c/0x1f0 [ 1410.773074][T20633] should_fail_ex+0x50a/0x650 [ 1410.773101][T20633] ? fs_reclaim_acquire+0xae/0x150 [ 1410.773129][T20633] ? tomoyo_realpath_from_path+0xb9/0x720 [ 1410.773159][T20633] should_failslab+0xc2/0x120 [ 1410.773179][T20633] __kmalloc_noprof+0xcb/0x510 [ 1410.773197][T20633] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1410.773229][T20633] tomoyo_realpath_from_path+0xb9/0x720 [ 1410.773253][T20633] ? tomoyo_path_number_perm+0x235/0x590 [ 1410.773277][T20633] ? tomoyo_path_number_perm+0x235/0x590 [ 1410.773302][T20633] tomoyo_path_number_perm+0x248/0x590 [ 1410.773323][T20633] ? tomoyo_path_number_perm+0x235/0x590 [ 1410.773347][T20633] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 1410.773393][T20633] ? __pfx_lock_release+0x10/0x10 [ 1410.773417][T20633] ? trace_lock_acquire+0x14e/0x1f0 [ 1410.773441][T20633] ? lock_acquire+0x2f/0xb0 [ 1410.773463][T20633] ? __fget_files+0x40/0x3a0 [ 1410.773484][T20633] ? __fget_files+0x206/0x3a0 [ 1410.773504][T20633] security_file_ioctl+0x9b/0x240 [ 1410.773530][T20633] __x64_sys_ioctl+0xb7/0x200 [ 1410.773557][T20633] do_syscall_64+0xcd/0x250 [ 1410.773581][T20633] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1410.773606][T20633] RIP: 0033:0x7fe6fc58cde9 [ 1410.773622][T20633] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1410.773639][T20633] RSP: 002b:00007fe6fd40c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1410.773657][T20633] RAX: ffffffffffffffda RBX: 00007fe6fc7a5fa0 RCX: 00007fe6fc58cde9 [ 1410.773669][T20633] RDX: 0000000000000000 RSI: 0000000081f8943c RDI: 0000000000000004 [ 1410.773680][T20633] RBP: 00007fe6fd40c090 R08: 0000000000000000 R09: 0000000000000000 [ 1410.773690][T20633] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1410.773700][T20633] R13: 0000000000000000 R14: 00007fe6fc7a5fa0 R15: 00007ffe7a414538 [ 1410.773725][T20633] [ 1410.890440][T20633] ERROR: Out of memory at tomoyo_realpath_from_path. [ 1410.974396][T20636] netlink: 'syz.5.3629': attribute type 1 has an invalid length. [ 1411.014057][T20636] netlink: 224 bytes leftover after parsing attributes in process `syz.5.3629'. [ 1411.092772][ T5869] usb 8-1: Using ep0 maxpacket: 32 [ 1411.107817][ T5869] usb 8-1: no configurations [ 1411.161465][ T5869] usb 8-1: can't read configurations, error -22 [ 1411.251780][ T29] audit: type=1400 audit(1739454288.362:682): avc: denied { write } for pid=20639 comm="syz.2.3633" name="psched" dev="proc" ino=4026534179 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=file permissive=1 [ 1411.307854][T20640] netlink: 'syz.2.3633': attribute type 3 has an invalid length. [ 1411.337457][ T5869] usb 8-1: new high-speed USB device number 62 using dummy_hcd [ 1411.604953][ T5869] usb 8-1: Using ep0 maxpacket: 32 [ 1411.612377][ T5869] usb 8-1: no configurations [ 1411.617731][ T5869] usb 8-1: can't read configurations, error -22 [ 1411.626126][ T5869] usb usb8-port1: attempt power cycle [ 1412.065225][ T5869] usb 8-1: new high-speed USB device number 63 using dummy_hcd [ 1412.143671][ T5869] usb 8-1: Using ep0 maxpacket: 32 [ 1412.206179][ T5869] usb 8-1: no configurations [ 1412.250962][ T5869] usb 8-1: can't read configurations, error -22 [ 1412.460809][ T5869] usb 8-1: new high-speed USB device number 64 using dummy_hcd [ 1412.503717][ T5869] usb 8-1: Using ep0 maxpacket: 32 [ 1412.513500][ T5869] usb 8-1: no configurations [ 1412.518267][ T5869] usb 8-1: can't read configurations, error -22 [ 1412.537114][ T5869] usb usb8-port1: unable to enumerate USB device [ 1412.663981][T20662] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1412.676112][T20661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1413.892430][T20682] bond1: entered promiscuous mode [ 1413.898262][T20682] bond1: entered allmulticast mode [ 1413.905376][T20682] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1413.978318][T17734] usb 3-1: new high-speed USB device number 95 using dummy_hcd [ 1414.170788][T17734] usb 3-1: Using ep0 maxpacket: 32 [ 1414.217404][T17734] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1414.242394][T17734] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1414.281832][T17734] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1414.306917][T17734] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1414.347582][T17734] usb 3-1: Product: syz [ 1414.352226][T17734] usb 3-1: Manufacturer: syz [ 1414.360176][T17734] usb 3-1: SerialNumber: syz [ 1414.369140][T17734] usb 3-1: config 0 descriptor?? [ 1414.444790][T20682] bond1 (unregistering): Released all slaves [ 1414.474077][ T6746] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1416.121520][T20706] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.132956][T20705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1416.160978][ T5866] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1416.170228][ T5866] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1416.176951][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1416.199706][ T12] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1416.206551][ T12] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1416.253865][ T29] audit: type=1400 audit(1739454293.048:683): avc: denied { mount } for pid=20696 comm="syz.0.3651" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 1416.276379][ T5868] usb 8-1: new high-speed USB device number 65 using dummy_hcd [ 1416.458613][ T5868] usb 8-1: Using ep0 maxpacket: 32 [ 1416.466807][ T5868] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1416.487713][ T5868] usb 8-1: config 0 has no interfaces? [ 1416.515697][ T5868] usb 8-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1416.533628][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1416.557946][ T5868] usb 8-1: Product: syz [ 1416.562160][ T5868] usb 8-1: Manufacturer: syz [ 1416.576114][ T5868] usb 8-1: SerialNumber: syz [ 1416.610544][ T5868] usb 8-1: config 0 descriptor?? [ 1416.866773][T20716] bond1: entered promiscuous mode [ 1416.879879][T20716] bond1: entered allmulticast mode [ 1416.885448][T20716] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1417.125010][ T5869] usb 3-1: USB disconnect, device number 95 [ 1417.923493][T20729] overlayfs: failed to resolve './file1': -2 [ 1419.805036][ T5868] usb 8-1: USB disconnect, device number 65 [ 1420.122493][ T5869] usb 3-1: new high-speed USB device number 96 using dummy_hcd [ 1420.932140][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1421.034902][ T5869] usb 3-1: Using ep0 maxpacket: 32 [ 1421.143914][ T5869] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1421.183055][ T5869] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1421.201517][ T5869] usb 3-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1421.219424][T20716] bond1 (unregistering): Released all slaves [ 1421.250021][ T5869] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1421.258118][ T5869] usb 3-1: Product: syz [ 1421.412400][T20745] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 1421.414242][ T5869] usb 3-1: Manufacturer: syz [ 1421.438798][ T5869] usb 3-1: SerialNumber: syz [ 1421.550234][T20760] xt_l2tp: v2 tid > 0xffff: 262144 [ 1421.843125][T11287] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1421.975584][ T5869] usb 3-1: config 0 descriptor?? [ 1422.054852][ T29] audit: type=1400 audit(1739454298.473:684): avc: denied { read } for pid=20759 comm="syz.7.3664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 1422.189109][T11287] usb 1-1: Using ep0 maxpacket: 16 [ 1422.198073][T11287] usb 1-1: config 8 has an invalid interface number: 39 but max is 0 [ 1422.207562][T11287] usb 1-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 1422.228381][T11287] usb 1-1: config 8 has no interface number 0 [ 1422.237856][T11287] usb 1-1: config 8 interface 39 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 1422.258780][T11287] usb 1-1: config 8 interface 39 has no altsetting 0 [ 1422.272119][T11287] usb 1-1: New USB device found, idVendor=05ac, idProduct=c704, bcdDevice=62.77 [ 1422.293569][T11287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1422.303763][T11287] usb 1-1: Product: syz [ 1422.311505][T11287] usb 1-1: Manufacturer: syz [ 1422.316153][T11287] usb 1-1: SerialNumber: syz [ 1422.409070][T20768] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1422.496765][ T5869] wlan1: authenticate with 08:02:11:00:00:00 (local address=08:02:11:00:00:01) [ 1422.529540][ T5869] wlan1: send auth to 08:02:11:00:00:00 (try 1/3) [ 1423.146564][T20764] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1423.901206][ T5866] usb 3-1: USB disconnect, device number 96 [ 1424.135060][ T11] wlan1: send auth to 08:02:11:00:00:00 (try 2/3) [ 1424.159639][ T11] wlan1: send auth to 08:02:11:00:00:00 (try 3/3) [ 1424.250348][ T11] wlan1: authentication with 08:02:11:00:00:00 timed out [ 1425.430456][ T11] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1425.583983][T11287] ipheth 1-1:8.39: Unable to find endpoints [ 1426.009307][T11287] usb 1-1: USB disconnect, device number 90 [ 1426.085005][T20789] netlink: 156 bytes leftover after parsing attributes in process `syz.7.3669'. [ 1426.489946][T20801] sp0: Synchronizing with TNC [ 1426.689540][T11287] usb 1-1: new high-speed USB device number 91 using dummy_hcd [ 1426.817813][ T5866] usb 3-1: new high-speed USB device number 97 using dummy_hcd [ 1427.010373][T11287] usb 1-1: Using ep0 maxpacket: 32 [ 1427.022324][T11287] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1427.041882][T11287] usb 1-1: config 0 has no interfaces? [ 1427.049874][T11287] usb 1-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1427.070305][T11287] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.079238][ T5866] usb 3-1: Using ep0 maxpacket: 16 [ 1427.091695][ T5866] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 1427.101884][T11287] usb 1-1: Product: syz [ 1427.106083][T11287] usb 1-1: Manufacturer: syz [ 1427.115994][ T5866] usb 3-1: config 0 has no interface number 0 [ 1427.122579][T11287] usb 1-1: SerialNumber: syz [ 1427.130683][ T5866] usb 3-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 1427.141651][T11287] usb 1-1: config 0 descriptor?? [ 1427.148560][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1427.174979][ T5866] usb 3-1: Product: syz [ 1427.179793][ T5866] usb 3-1: Manufacturer: syz [ 1427.197650][ T5866] usb 3-1: SerialNumber: syz [ 1427.220811][ T5866] usb 3-1: config 0 descriptor?? [ 1427.238477][ T5866] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 1427.444850][T20810] bond1: entered promiscuous mode [ 1427.520019][T20810] bond1: entered allmulticast mode [ 1427.525838][T20810] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1427.733464][T20816] overlayfs: failed to resolve './file1': -2 [ 1428.514561][T20810] bond1 (unregistering): Released all slaves [ 1428.742082][ T47] usb 8-1: new high-speed USB device number 66 using dummy_hcd [ 1428.769346][T20825] bond1: entered promiscuous mode [ 1428.780028][T20825] bond1: entered allmulticast mode [ 1428.787101][T20825] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1428.920902][ T47] usb 8-1: Using ep0 maxpacket: 32 [ 1428.933983][ T47] usb 8-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1428.952586][ T47] usb 8-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1429.042311][ T47] usb 8-1: New USB device found, idVendor=08ca, idProduct=2060, bcdDevice=c6.58 [ 1429.051428][ T47] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1429.062731][ T47] usb 8-1: Product: syz [ 1429.066965][ T47] usb 8-1: Manufacturer: syz [ 1429.073497][ T47] usb 8-1: SerialNumber: syz [ 1429.089170][ T47] usb 8-1: config 0 descriptor?? [ 1429.157418][ T5866] gspca_spca1528: reg_w err -110 [ 1429.162844][ T5866] spca1528 3-1:0.1: probe with driver spca1528 failed with error -110 [ 1429.182123][T20825] bond1 (unregistering): Released all slaves [ 1429.467643][ T5866] usb 1-1: USB disconnect, device number 91 [ 1431.337189][T17734] usb 3-1: USB disconnect, device number 97 [ 1431.377105][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1431.428535][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1432.251448][ T5868] usb 8-1: USB disconnect, device number 66 [ 1432.636488][T17734] usb 6-1: new high-speed USB device number 84 using dummy_hcd [ 1432.667246][ T5868] usb 8-1: new high-speed USB device number 67 using dummy_hcd [ 1432.783757][ T29] audit: type=1326 audit(1739454308.501:685): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=20859 comm="syz.6.3689" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fb835b8cde9 code=0x0 [ 1432.846191][ T5868] usb 8-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1432.866108][ T5868] usb 8-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1432.875316][ T5866] usb 3-1: new high-speed USB device number 98 using dummy_hcd [ 1432.902233][T17734] usb 6-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 1432.911369][T17734] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 1432.920186][T17734] usb 6-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.922248][ T5868] usb 8-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1432.931365][T17734] usb 6-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1432.951441][T17734] usb 6-1: config 1 has no interface number 1 [ 1432.957881][T17734] usb 6-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1432.991850][T17734] usb 6-1: config 1 interface 2 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1433.203278][T17734] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1433.214358][T17734] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.260524][T17734] usb 6-1: Product: syz [ 1433.286441][T17734] usb 6-1: Manufacturer: syz [ 1433.316295][T17734] usb 6-1: SerialNumber: syz [ 1433.456586][ T5868] usb 8-1: config 1 has 2 interfaces, different from the descriptor's value: 3 [ 1433.465810][ T5868] usb 8-1: config 1 has no interface number 1 [ 1433.488693][ T5868] usb 8-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 1433.517825][ T5868] usb 8-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 1433.535096][ T5868] usb 8-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.545696][ T5866] usb 3-1: Using ep0 maxpacket: 32 [ 1433.557369][ T5868] usb 8-1: Product: syz [ 1433.562402][ T5868] usb 8-1: Manufacturer: syz [ 1433.568651][ T5866] usb 3-1: config 0 has an invalid interface number: 51 but max is 0 [ 1433.582676][ T5868] usb 8-1: SerialNumber: syz [ 1433.590053][ T5866] usb 3-1: config 0 has no interface number 0 [ 1433.638149][ T5866] usb 3-1: New USB device found, idVendor=061d, idProduct=c150, bcdDevice=ce.6f [ 1433.647389][ T5866] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1433.678272][ T5866] usb 3-1: Product: syz [ 1433.695527][T17734] usb 6-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1433.696160][ T5866] usb 3-1: Manufacturer: syz [ 1433.704164][T17734] usb 6-1: MIDIStreaming interface descriptor not found [ 1433.737628][ T5866] usb 3-1: SerialNumber: syz [ 1433.762134][ T5866] usb 3-1: config 0 descriptor?? [ 1433.762819][T17734] usb 6-1: USB disconnect, device number 84 [ 1433.785377][ T5866] quatech2 3-1:0.51: Quatech 2nd gen USB to Serial Driver converter detected [ 1433.957964][ T5868] usb 8-1: No MIDI 2.0 at altset 1, falling back to MIDI 1.0 [ 1433.971058][ T5868] usb 8-1: MIDIStreaming interface descriptor not found [ 1434.010263][ T5868] usb 8-1: USB disconnect, device number 67 [ 1434.026370][ T5866] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB0 [ 1434.046539][ T5866] usb 3-1: Quatech 2nd gen USB to Serial Driver converter now attached to ttyUSB1 [ 1434.047090][T11172] udevd[11172]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1434.087309][ T5931] usb 1-1: new high-speed USB device number 92 using dummy_hcd [ 1434.264846][T17839] udevd[17839]: error opening ATTR{/sys/devices/platform/dummy_hcd.7/usb8/8-1/8-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 1434.282107][ T5931] usb 1-1: Using ep0 maxpacket: 32 [ 1434.308439][ C0] quatech-serial ttyUSB0: qt2_process_read_urb - unsupported command 121 [ 1434.310075][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1434.415593][T20880] FAULT_INJECTION: forcing a failure. [ 1434.415593][T20880] name failslab, interval 1, probability 0, space 0, times 0 [ 1434.428366][T20880] CPU: 0 UID: 0 PID: 20880 Comm: syz.5.3694 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1434.428381][T20880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1434.428388][T20880] Call Trace: [ 1434.428392][T20880] [ 1434.428396][T20880] dump_stack_lvl+0x16c/0x1f0 [ 1434.428414][T20880] should_fail_ex+0x50a/0x650 [ 1434.428431][T20880] ? fs_reclaim_acquire+0xae/0x150 [ 1434.428448][T20880] should_failslab+0xc2/0x120 [ 1434.428460][T20880] kmem_cache_alloc_lru_noprof+0x73/0x3d0 [ 1434.428475][T20880] ? __pfx_selinux_socket_create+0x10/0x10 [ 1434.428491][T20880] ? sock_alloc_inode+0x25/0x1c0 [ 1434.428510][T20880] ? __pfx_sock_alloc_inode+0x10/0x10 [ 1434.428525][T20880] sock_alloc_inode+0x25/0x1c0 [ 1434.428539][T20880] alloc_inode+0x5d/0x230 [ 1434.428552][T20880] sock_alloc+0x40/0x280 [ 1434.428567][T20880] __sock_create+0xc1/0x8d0 [ 1434.428578][T20880] __sys_socketpair+0x1d9/0x5a0 [ 1434.428590][T20880] ? __pfx___sys_socketpair+0x10/0x10 [ 1434.428599][T20880] ? fput+0x67/0x440 [ 1434.428612][T20880] ? __pfx_ksys_write+0x10/0x10 [ 1434.428630][T20880] __x64_sys_socketpair+0x96/0x100 [ 1434.428641][T20880] ? lockdep_hardirqs_on+0x7c/0x110 [ 1434.428652][T20880] do_syscall_64+0xcd/0x250 [ 1434.428665][T20880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1434.428680][T20880] RIP: 0033:0x7facafb8cde9 [ 1434.428690][T20880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1434.428699][T20880] RSP: 002b:00007facb0982038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 1434.428710][T20880] RAX: ffffffffffffffda RBX: 00007facafda5fa0 RCX: 00007facafb8cde9 [ 1434.428717][T20880] RDX: 0000000000000002 RSI: 0000000100000002 RDI: 0000000000000022 [ 1434.428723][T20880] RBP: 00007facb0982090 R08: 0000000000000000 R09: 0000000000000000 [ 1434.428729][T20880] R10: 0000400000000040 R11: 0000000000000246 R12: 0000000000000001 [ 1434.428734][T20880] R13: 0000000000000000 R14: 00007facafda5fa0 R15: 00007ffcf05153d8 [ 1434.428746][T20880] [ 1434.428766][T20880] socket: no more sockets [ 1434.665300][ T5931] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1434.675134][ T5931] usb 1-1: New USB device found, idVendor=1b96, idProduct=0013, bcdDevice= 0.00 [ 1434.856144][T20878] IPVS: length: 163 != 24 [ 1434.863736][ T5931] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1435.020428][ T5931] usb 1-1: config 0 descriptor?? [ 1435.862052][ T5931] ntrig 0003:1B96:0013.0025: hidraw0: USB HID v0.01 Device [HID 1b96:0013] on usb-dummy_hcd.0-1/input0 [ 1435.999853][ C0] usb 3-1: qt2_read_bulk_callback - non-zero urb status: -71 [ 1436.011557][ T5868] usb 3-1: USB disconnect, device number 98 [ 1436.014542][T20893] sp0: Synchronizing with TNC [ 1436.021052][ T5868] quatech-serial ttyUSB0: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB0 [ 1436.033889][ T4571] [ 1436.036247][ T4571] ===================================================== [ 1436.043149][ T4571] WARNING: HARDIRQ-safe -> HARDIRQ-unsafe lock order detected [ 1436.050579][ T4571] 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 Not tainted [ 1436.057695][ T4571] ----------------------------------------------------- [ 1436.064607][ T4571] kworker/u8:8/4571 [HC0[0]:SC0[0]:HE0:SE1] is trying to acquire: [ 1436.072388][ T4571] ffffffff8f351098 (disc_data_lock#2){.+.+}-{3:3}, at: sp_get+0x18/0xf0 [ 1436.080817][ T4571] [ 1436.080817][ T4571] and this task is already holding: [ 1436.088182][ T4571] ffffffff9ab7c258 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 1436.096930][ T4571] which would create a new lock dependency: [ 1436.102819][ T4571] (&port_lock_key){-.-.}-{3:3} -> (disc_data_lock#2){.+.+}-{3:3} [ 1436.110741][ T4571] [ 1436.110741][ T4571] but this new dependency connects a HARDIRQ-irq-safe lock: [ 1436.120199][ T4571] (&port_lock_key){-.-.}-{3:3} [ 1436.120218][ T4571] [ 1436.120218][ T4571] ... which became HARDIRQ-irq-safe at: [ 1436.132743][ T4571] lock_acquire.part.0+0x11b/0x380 [ 1436.137928][ T4571] _raw_spin_lock_irqsave+0x3a/0x60 [ 1436.143191][ T4571] serial8250_handle_irq+0x95/0xc80 [ 1436.148459][ T4571] serial8250_default_handle_irq+0x9a/0x210 [ 1436.154417][ T4571] serial8250_interrupt+0x103/0x210 [ 1436.159689][ T4571] __handle_irq_event_percpu+0x229/0x7d0 [ 1436.165406][ T4571] handle_irq_event+0xab/0x1e0 [ 1436.170302][ T4571] handle_edge_irq+0x263/0xd10 [ 1436.175143][ T4571] __common_interrupt+0xdf/0x250 [ 1436.180219][ T4571] common_interrupt+0xba/0xe0 [ 1436.184983][ T4571] asm_common_interrupt+0x26/0x40 [ 1436.190115][ T4571] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1436.195853][ T4571] uart_write+0x2a4/0xb30 [ 1436.200295][ T4571] n_tty_write+0x419/0x1140 [ 1436.204862][ T4571] file_tty_write.constprop.0+0x506/0x9a0 [ 1436.210642][ T4571] redirected_tty_write+0xcc/0x140 [ 1436.215823][ T4571] vfs_write+0x5ae/0x1150 [ 1436.220230][ T4571] ksys_write+0x12b/0x250 [ 1436.224651][ T4571] do_syscall_64+0xcd/0x250 [ 1436.229254][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.235245][ T4571] [ 1436.235245][ T4571] to a HARDIRQ-irq-unsafe lock: [ 1436.242258][ T4571] (disc_data_lock#2){.+.+}-{3:3} [ 1436.242281][ T4571] [ 1436.242281][ T4571] ... which became HARDIRQ-irq-unsafe at: [ 1436.255236][ T4571] ... [ 1436.255243][ T4571] lock_acquire.part.0+0x11b/0x380 [ 1436.263032][ T4571] _raw_read_lock+0x5f/0x70 [ 1436.267615][ T4571] sp_get+0x18/0xf0 [ 1436.271568][ T4571] sixpack_receive_buf+0x59/0x1c80 [ 1436.276803][ T4571] tty_ioctl+0x575/0x15d0 [ 1436.281237][ T4571] __x64_sys_ioctl+0x190/0x200 [ 1436.286101][ T4571] do_syscall_64+0xcd/0x250 [ 1436.290685][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.296645][ T4571] [ 1436.296645][ T4571] other info that might help us debug this: [ 1436.296645][ T4571] [ 1436.306887][ T4571] Possible interrupt unsafe locking scenario: [ 1436.306887][ T4571] [ 1436.315221][ T4571] CPU0 CPU1 [ 1436.320602][ T4571] ---- ---- [ 1436.325967][ T4571] lock(disc_data_lock#2); [ 1436.330476][ T4571] local_irq_disable(); [ 1436.337285][ T4571] lock(&port_lock_key); [ 1436.344127][ T4571] lock(disc_data_lock#2); [ 1436.351148][ T4571] [ 1436.354590][ T4571] lock(&port_lock_key); [ 1436.359079][ T4571] [ 1436.359079][ T4571] *** DEADLOCK *** [ 1436.359079][ T4571] [ 1436.367232][ T4571] 6 locks held by kworker/u8:8/4571: [ 1436.372489][ T4571] #0: ffff88801b081148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_one_work+0x1293/0x1ba0 [ 1436.383606][ T4571] #1: ffffc9000efe7d18 ((work_completion)(&buf->work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1436.394639][ T4571] #2: ffff888026018ca0 (&buf->lock){+.+.}-{4:4}, at: flush_to_ldisc+0x31/0x780 [ 1436.403694][ T4571] #3: ffff888048f520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1436.413016][ T4571] #4: ffffffff9ab7c258 (&port_lock_key){-.-.}-{3:3}, at: uart_write+0x13b/0xb30 [ 1436.422156][ T4571] #5: ffff888048f520a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref+0x1c/0x80 [ 1436.431444][ T4571] [ 1436.431444][ T4571] the dependencies between HARDIRQ-irq-safe lock and the holding lock: [ 1436.441817][ T4571] -> (&port_lock_key){-.-.}-{3:3} { [ 1436.446998][ T4571] IN-HARDIRQ-W at: [ 1436.450948][ T4571] lock_acquire.part.0+0x11b/0x380 [ 1436.457686][ T4571] _raw_spin_lock_irqsave+0x3a/0x60 [ 1436.464511][ T4571] serial8250_handle_irq+0x95/0xc80 [ 1436.471335][ T4571] serial8250_default_handle_irq+0x9a/0x210 [ 1436.478851][ T4571] serial8250_interrupt+0x103/0x210 [ 1436.485686][ T4571] __handle_irq_event_percpu+0x229/0x7d0 [ 1436.492943][ T4571] handle_irq_event+0xab/0x1e0 [ 1436.499328][ T4571] handle_edge_irq+0x263/0xd10 [ 1436.505799][ T4571] __common_interrupt+0xdf/0x250 [ 1436.512364][ T4571] common_interrupt+0xba/0xe0 [ 1436.518667][ T4571] asm_common_interrupt+0x26/0x40 [ 1436.525327][ T4571] _raw_spin_unlock_irqrestore+0x31/0x80 [ 1436.532587][ T4571] uart_write+0x2a4/0xb30 [ 1436.538559][ T4571] n_tty_write+0x419/0x1140 [ 1436.544700][ T4571] file_tty_write.constprop.0+0x506/0x9a0 [ 1436.552063][ T4571] redirected_tty_write+0xcc/0x140 [ 1436.558840][ T4571] vfs_write+0x5ae/0x1150 [ 1436.564841][ T4571] ksys_write+0x12b/0x250 [ 1436.570843][ T4571] do_syscall_64+0xcd/0x250 [ 1436.577024][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.584589][ T4571] IN-SOFTIRQ-W at: [ 1436.588575][ T4571] lock_acquire.part.0+0x11b/0x380 [ 1436.595332][ T4571] _raw_spin_lock_irqsave+0x3a/0x60 [ 1436.602174][ T4571] serial8250_handle_irq+0x95/0xc80 [ 1436.609013][ T4571] serial8250_default_handle_irq+0x9a/0x210 [ 1436.616549][ T4571] serial8250_interrupt+0x103/0x210 [ 1436.623397][ T4571] __handle_irq_event_percpu+0x229/0x7d0 [ 1436.630652][ T4571] handle_irq_event+0xab/0x1e0 [ 1436.637048][ T4571] handle_edge_irq+0x263/0xd10 [ 1436.643436][ T4571] __common_interrupt+0xdf/0x250 [ 1436.650009][ T4571] common_interrupt+0x61/0xe0 [ 1436.656310][ T4571] asm_common_interrupt+0x26/0x40 [ 1436.662972][ T4571] __unwind_start+0x466/0x7f0 [ 1436.669285][ T4571] arch_stack_walk+0x74/0x100 [ 1436.675612][ T4571] stack_trace_save+0x95/0xd0 [ 1436.681946][ T4571] kasan_save_stack+0x33/0x60 [ 1436.688513][ T4571] kasan_save_track+0x14/0x30 [ 1436.694858][ T4571] kasan_save_free_info+0x3b/0x60 [ 1436.701547][ T4571] __kasan_slab_free+0x51/0x70 [ 1436.707944][ T4571] kfree+0x2c4/0x4d0 [ 1436.713464][ T4571] slab_free_after_rcu_debug+0x69/0x340 [ 1436.720648][ T4571] rcu_core+0x79d/0x14d0 [ 1436.726530][ T4571] handle_softirqs+0x213/0x8f0 [ 1436.733021][ T4571] __irq_exit_rcu+0x109/0x170 [ 1436.739358][ T4571] irq_exit_rcu+0x9/0x30 [ 1436.745269][ T4571] sysvec_apic_timer_interrupt+0xa4/0xc0 [ 1436.752551][ T4571] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1436.760456][ T4571] lock_release+0x129/0x6f0 [ 1436.766601][ T4571] page_ext_put+0x43/0xd0 [ 1436.772555][ T4571] __page_table_check_zero+0x2d7/0x360 [ 1436.779648][ T4571] post_alloc_hook+0x171/0x1b0 [ 1436.786041][ T4571] get_page_from_freelist+0xfce/0x2f80 [ 1436.793124][ T4571] __alloc_frozen_pages_noprof+0x221/0x2470 [ 1436.800656][ T4571] alloc_pages_mpol+0x1fc/0x540 [ 1436.807159][ T4571] new_slab+0x23d/0x330 [ 1436.812996][ T4571] ___slab_alloc+0xc5d/0x1720 [ 1436.819315][ T4571] __slab_alloc.constprop.0+0x56/0xb0 [ 1436.826490][ T4571] __kmalloc_noprof+0x2ec/0x510 [ 1436.832987][ T4571] tomoyo_realpath_from_path+0xb9/0x720 [ 1436.840197][ T4571] tomoyo_mount_acl+0x1af/0x880 [ 1436.846684][ T4571] tomoyo_mount_permission+0x16e/0x420 [ 1436.853798][ T4571] security_sb_mount+0x9b/0x260 [ 1436.860305][ T4571] path_mount+0x129/0x1f10 [ 1436.866364][ T4571] __x64_sys_mount+0x28f/0x310 [ 1436.872820][ T4571] do_syscall_64+0xcd/0x250 [ 1436.879050][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1436.886615][ T4571] INITIAL USE at: [ 1436.890511][ T4571] lock_acquire.part.0+0x11b/0x380 [ 1436.897206][ T4571] _raw_spin_lock_irqsave+0x3a/0x60 [ 1436.903958][ T4571] serial8250_do_set_termios+0x307/0x16f0 [ 1436.911229][ T4571] serial8250_set_termios+0x6e/0x80 [ 1436.917965][ T4571] uart_set_options+0x31b/0x5f0 [ 1436.924353][ T4571] serial8250_console_setup+0x18a/0x460 [ 1436.931457][ T4571] univ8250_console_setup+0x1d4/0x2c0 [ 1436.938420][ T4571] try_enable_preferred_console+0x2fd/0x530 [ 1436.945891][ T4571] register_console+0x3ac/0x1170 [ 1436.952467][ T4571] univ8250_console_init+0x5f/0x90 [ 1436.959163][ T4571] console_init+0x154/0x690 [ 1436.965216][ T4571] start_kernel+0x29f/0x4d0 [ 1436.971267][ T4571] x86_64_start_reservations+0x18/0x30 [ 1436.978352][ T4571] x86_64_start_kernel+0xb2/0xc0 [ 1436.984841][ T4571] common_startup_64+0x13e/0x148 [ 1436.991345][ T4571] } [ 1436.993822][ T4571] ... key at: [] port_lock_key+0x0/0x40 [ 1437.001456][ T4571] [ 1437.001456][ T4571] the dependencies between the lock to be acquired [ 1437.001465][ T4571] and HARDIRQ-irq-unsafe lock: [ 1437.014964][ T4571] -> (disc_data_lock#2){.+.+}-{3:3} { [ 1437.020458][ T4571] HARDIRQ-ON-R at: [ 1437.024415][ T4571] lock_acquire.part.0+0x11b/0x380 [ 1437.031155][ T4571] _raw_read_lock+0x5f/0x70 [ 1437.037306][ T4571] sp_get+0x18/0xf0 [ 1437.042750][ T4571] sixpack_receive_buf+0x59/0x1c80 [ 1437.049571][ T4571] tty_ioctl+0x575/0x15d0 [ 1437.055547][ T4571] __x64_sys_ioctl+0x190/0x200 [ 1437.061951][ T4571] do_syscall_64+0xcd/0x250 [ 1437.068125][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.075678][ T4571] SOFTIRQ-ON-R at: [ 1437.079654][ T4571] lock_acquire.part.0+0x11b/0x380 [ 1437.086421][ T4571] _raw_read_lock+0x5f/0x70 [ 1437.092599][ T4571] sp_get+0x18/0xf0 [ 1437.098067][ T4571] sixpack_receive_buf+0x59/0x1c80 [ 1437.105123][ T4571] tty_ioctl+0x575/0x15d0 [ 1437.111171][ T4571] __x64_sys_ioctl+0x190/0x200 [ 1437.117613][ T4571] do_syscall_64+0xcd/0x250 [ 1437.123772][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.131322][ T4571] INITIAL USE at: [ 1437.135193][ T4571] lock_acquire.part.0+0x11b/0x380 [ 1437.141885][ T4571] _raw_write_lock_irq+0x36/0x50 [ 1437.148395][ T4571] sixpack_close+0x1e/0x2f0 [ 1437.154574][ T4571] tty_ldisc_close+0x111/0x1a0 [ 1437.160904][ T4571] tty_ldisc_kill+0x8e/0x150 [ 1437.167039][ T4571] tty_ldisc_release+0x17b/0x2a0 [ 1437.173531][ T4571] tty_release_struct+0x23/0xe0 [ 1437.179948][ T4571] tty_release+0xe25/0x1410 [ 1437.186034][ T4571] __fput+0x3ff/0xb70 [ 1437.191588][ T4571] task_work_run+0x14e/0x250 [ 1437.197740][ T4571] do_exit+0xad8/0x2d70 [ 1437.203653][ T4571] do_group_exit+0xd3/0x2a0 [ 1437.209723][ T4571] get_signal+0x24ed/0x26c0 [ 1437.215991][ T4571] arch_do_signal_or_restart+0x90/0x7e0 [ 1437.223107][ T4571] syscall_exit_to_user_mode+0x150/0x2a0 [ 1437.230325][ T4571] do_syscall_64+0xda/0x250 [ 1437.236474][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.243955][ T4571] INITIAL READ USE at: [ 1437.248287][ T4571] lock_acquire.part.0+0x11b/0x380 [ 1437.255492][ T4571] _raw_read_lock+0x5f/0x70 [ 1437.262083][ T4571] sp_get+0x18/0xf0 [ 1437.267909][ T4571] sixpack_receive_buf+0x59/0x1c80 [ 1437.275034][ T4571] tty_ioctl+0x575/0x15d0 [ 1437.281371][ T4571] __x64_sys_ioctl+0x190/0x200 [ 1437.288135][ T4571] do_syscall_64+0xcd/0x250 [ 1437.294643][ T4571] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1437.302543][ T4571] } [ 1437.305110][ T4571] ... key at: [] disc_data_lock+0x18/0xfe0 [ 1437.313007][ T4571] ... acquired at: [ 1437.316822][ T4571] lock_acquire.part.0+0x11b/0x380 [ 1437.322149][ T4571] _raw_read_lock+0x5f/0x70 [ 1437.326912][ T4571] sp_get+0x18/0xf0 [ 1437.330963][ T4571] sixpack_write_wakeup+0x20/0x390 [ 1437.336262][ T4571] tty_wakeup+0xe5/0x120 [ 1437.340683][ T4571] tty_port_default_wakeup+0x2a/0x40 [ 1437.346159][ T4571] serial8250_tx_chars+0x68e/0x860 [ 1437.351428][ T4571] __start_tx+0x3e9/0x4a0 [ 1437.355925][ T4571] serial8250_start_tx+0x368/0x530 [ 1437.361242][ T4571] __uart_start+0x292/0x4c0 [ 1437.365936][ T4571] uart_write+0x218/0xb30 [ 1437.370420][ T4571] sixpack_receive_buf+0x3d7/0x1c80 [ 1437.375785][ T4571] tty_ldisc_receive_buf+0x153/0x190 [ 1437.381243][ T4571] tty_port_default_receive_buf+0x70/0xb0 [ 1437.387128][ T4571] flush_to_ldisc+0x264/0x780 [ 1437.391977][ T4571] process_one_work+0x9c5/0x1ba0 [ 1437.397106][ T4571] worker_thread+0x6c8/0xf00 [ 1437.401938][ T4571] kthread+0x3af/0x750 [ 1437.406192][ T4571] ret_from_fork+0x45/0x80 [ 1437.410784][ T4571] ret_from_fork_asm+0x1a/0x30 [ 1437.415719][ T4571] [ 1437.418020][ T4571] [ 1437.418020][ T4571] stack backtrace: [ 1437.423881][ T4571] CPU: 1 UID: 0 PID: 4571 Comm: kworker/u8:8 Not tainted 6.14.0-rc2-syzkaller-00041-g4dc1d1bec898 #0 [ 1437.423895][ T4571] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 1437.423903][ T4571] Workqueue: events_unbound flush_to_ldisc [ 1437.423921][ T4571] Call Trace: [ 1437.423926][ T4571] [ 1437.423932][ T4571] dump_stack_lvl+0x116/0x1f0 [ 1437.423945][ T4571] check_irq_usage+0xf22/0x1290 [ 1437.423960][ T4571] ? __dev_queue_xmit+0x8bc/0x43e0 [ 1437.423973][ T4571] ? __pfx_check_irq_usage+0x10/0x10 [ 1437.423986][ T4571] ? hlock_conflict+0x58/0x200 [ 1437.423998][ T4571] ? __bfs+0x2fa/0x670 [ 1437.424008][ T4571] ? __pfx_hlock_conflict+0x10/0x10 [ 1437.424023][ T4571] ? lockdep_lock+0xc6/0x200 [ 1437.424033][ T4571] ? __pfx_lockdep_lock+0x10/0x10 [ 1437.424044][ T4571] ? __lock_acquire+0x24b4/0x3c40 [ 1437.424057][ T4571] __lock_acquire+0x24b4/0x3c40 [ 1437.424072][ T4571] ? __pfx___lock_acquire+0x10/0x10 [ 1437.424095][ T4571] ? lock_acquire.part.0+0x11b/0x380 [ 1437.424110][ T4571] lock_acquire.part.0+0x11b/0x380 [ 1437.424129][ T4571] ? sp_get+0x18/0xf0 [ 1437.424144][ T4571] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1437.424158][ T4571] ? rcu_is_watching+0x12/0xc0 [ 1437.424168][ T4571] ? trace_lock_acquire+0x14e/0x1f0 [ 1437.424179][ T4571] ? sp_get+0x18/0xf0 [ 1437.424191][ T4571] ? lock_acquire+0x2f/0xb0 [ 1437.424204][ T4571] ? sp_get+0x18/0xf0 [ 1437.424216][ T4571] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1437.424230][ T4571] _raw_read_lock+0x5f/0x70 [ 1437.424246][ T4571] ? sp_get+0x18/0xf0 [ 1437.424257][ T4571] sp_get+0x18/0xf0 [ 1437.424269][ T4571] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1437.424283][ T4571] sixpack_write_wakeup+0x20/0x390 [ 1437.424296][ T4571] ? __pfx_sixpack_write_wakeup+0x10/0x10 [ 1437.424310][ T4571] tty_wakeup+0xe5/0x120 [ 1437.424319][ T4571] tty_port_default_wakeup+0x2a/0x40 [ 1437.424332][ T4571] serial8250_tx_chars+0x68e/0x860 [ 1437.424347][ T4571] __start_tx+0x3e9/0x4a0 [ 1437.424359][ T4571] serial8250_start_tx+0x368/0x530 [ 1437.424373][ T4571] __uart_start+0x292/0x4c0 [ 1437.424389][ T4571] uart_write+0x218/0xb30 [ 1437.424401][ T4571] sixpack_receive_buf+0x3d7/0x1c80 [ 1437.424415][ T4571] ? ldsem_down_read_trylock+0x121/0x180 [ 1437.424429][ T4571] ? __pfx_ldsem_down_read_trylock+0x10/0x10 [ 1437.424443][ T4571] ? __pfx_sixpack_receive_buf+0x10/0x10 [ 1437.424457][ T4571] tty_ldisc_receive_buf+0x153/0x190 [ 1437.424468][ T4571] tty_port_default_receive_buf+0x70/0xb0 [ 1437.424481][ T4571] flush_to_ldisc+0x264/0x780 [ 1437.424492][ T4571] ? lock_acquire+0x2f/0xb0 [ 1437.424504][ T4571] ? process_one_work+0x921/0x1ba0 [ 1437.424519][ T4571] process_one_work+0x9c5/0x1ba0 [ 1437.424533][ T4571] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1437.424547][ T4571] ? __pfx_process_one_work+0x10/0x10 [ 1437.424561][ T4571] ? assign_work+0x1a0/0x250 [ 1437.424574][ T4571] worker_thread+0x6c8/0xf00 [ 1437.424588][ T4571] ? __kthread_parkme+0x148/0x220 [ 1437.424598][ T4571] ? __pfx_worker_thread+0x10/0x10 [ 1437.424611][ T4571] kthread+0x3af/0x750 [ 1437.424622][ T4571] ? __pfx_kthread+0x10/0x10 [ 1437.424633][ T4571] ? lock_acquire+0x2f/0xb0 [ 1437.424647][ T4571] ? __pfx_kthread+0x10/0x10 [ 1437.424659][ T4571] ret_from_fork+0x45/0x80 [ 1437.424672][ T4571] ? __pfx_kthread+0x10/0x10 [ 1437.424684][ T4571] ret_from_fork_asm+0x1a/0x30 [ 1437.424697][ T4571] [ 1437.746074][ T5868] quatech-serial ttyUSB1: Quatech 2nd gen USB to Serial Driver converter now disconnected from ttyUSB1 [ 1437.757598][ T5868] quatech2 3-1:0.51: device disconnected [ 1437.803717][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1437.816684][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1437.949377][ T5931] usb 1-1: USB disconnect, device number 92 [ 1443.892063][T18950] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1443.892235][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration