last executing test programs: 5m4.063892463s ago: executing program 4 (id=166): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) socket$can_bcm(0x1d, 0x2, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f0000000280), 0x1fc, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) fsopen(0x0, 0x0) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r1 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r2 = ioctl$KVM_CREATE_VM(r1, 0xae01, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000340)={'#! ', './file0', [{0x20, '#! '}, {0x20, '\')-@@N$\'\''}, {0x20, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x9ej\xce\n\x8b.\xe5\xb6lF\'lP\x05\x00\x00\x00'}, {0x20, '&'}, {0x20, 'blkio.bfq.io_merged_recursive\x00'}, {0x20, '+&'}, {0x20, '@})-'}, {0x20, ']'}, {0x20, '/dev/cpu/#/msr\x00'}], 0xa, "403fe2cadd455fab9e7e00c4a93c54d4812e83b337d812e740588ae145f86fba4c4b"}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x20}, 0x94) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r4, 0x2000000, 0xe, 0x0, &(0x7f0000000300)="63ecedda41c3903803ed69d8d41f", 0x0, 0x0, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000001640)={&(0x7f00000006c0)=ANY=[@ANYBLOB="240000001a00010000000000000a008000fc0200000012000005001b00d5ccacf1ba705d1416150100000200000088295af4939d5f0d1ac5ce66d47a2b5fe96c0dddf34a7c234bf43176e00f9a611f85ad5762e82caa40a77af840106b669d2465d5538310f853f245dafd18f029edf2a42f54fb7a30ffc41ab71986ba395709d75cf0662b46bea433dfc2d2b45beb75bc47c7276942be6666216dc0c306fc349b6ae748598f566763cbab6d0122318359224e4c4b95ac70b79e1ceabfa3c1b94490b90000"], 0x24}}, 0x0) preadv(0xffffffffffffffff, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r2, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r2, 0xae41, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r5, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) socket(0x10, 0x3, 0x0) r6 = openat$dlm_control(0xffffffffffffff9c, &(0x7f0000000000), 0x8502, 0x0) write$sndseq(r6, &(0x7f0000001380)=[{0x6, 0x0, 0x0, 0x0, @tick, {0x5, 0x2}, {}, @queue={0x81, {0x8, 0x2}}}, {0x0, 0x0, 0x0, 0x0, @time={0x4a17, 0x1}, {0x6}, {}, @queue={0x5, {0x77, 0x3e17}}}, {0x10, 0xfd, 0x94, 0x2, @time={0x4, 0x7}, {0x2, 0x3}, {0xfc, 0x9}, @control}, {0x0, 0x0, 0x0, 0x0, @time={0x1, 0x1}, {}, {0x0, 0x6}, @note={0x4, 0x3f, 0xf1, 0x7, 0xd}}], 0x70) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x44080) 5m0.989858954s ago: executing program 4 (id=171): bind$inet(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_freezer_state(r4, &(0x7f0000000140), 0x2, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x3, 0x7}}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) 4m59.90959525s ago: executing program 4 (id=176): socket$inet_udp(0x2, 0x2, 0x0) openat$ptmx(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) syz_open_dev$dri(&(0x7f00000000c0), 0x1ff, 0x0) r0 = syz_open_dev$media(&(0x7f00000006c0), 0x4007, 0x440) ioctl$MEDIA_IOC_REQUEST_ALLOC(r0, 0x80047c05, 0x0) pselect6(0x40, &(0x7f0000000080)={0x5, 0x0, 0x120000000000, 0x2, 0x500, 0xa00000000000000, 0x1000001000, 0x49}, 0x0, &(0x7f0000000180)={0x3fe, 0x7, 0x0, 0x9, 0x86, 0x800, 0x80000002}, 0x0, 0x0) 4m58.855580559s ago: executing program 4 (id=180): syz_usb_connect(0x0, 0x2d, 0x0, 0x0) r0 = getpid() syz_pidfd_open(r0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x2, 0x0, 0x0) 4m55.46584434s ago: executing program 4 (id=190): openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x8042, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x4) sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040092}, 0x2400c8c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x4) 4m54.790392889s ago: executing program 4 (id=191): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="dc60ce8a1c39f51a3c772b75af926e578bdb17f6667e57cdbedfbd8f4c634da617fecf0194d93b5f9b39b4b5a93000978481d8eb80b1680a3605749fd07bf362f5c032a324d5e996c4a0bd941c75850702a0a056d29ca23f0e987d53472fade4ea76e0050610665ca33f3b9cea923877cb8c5e9f5a6ff88a11c69ebf2f4231b36fa01d89959cb1024802f272cafeace6f5c393d32fb6a6c57f4d4396634c7953038d5159a6a703ec1fdda1bba9418e614b78f38e6c2b226c80bccabb9249179bec24780575194fec479a07d3435ab59abcf6b4af30d571bad71d6a741d08a2121815127d7d9fc6ffca06bf"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b02", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r3, 0x0, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe162, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x258}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = getegid() fchown(r2, 0x0, r4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x7fff) syz_emit_ethernet(0xc2, &(0x7f00000001c0)=ANY=[], 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$inet(0x10, 0x4, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x7) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) 4m39.086082068s ago: executing program 32 (id=191): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000500), 0x8200, 0x0) prlimit64(0x0, 0xd, &(0x7f0000000140)={0x2, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019540)=""/102392, 0x18ff8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000440)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRES32=r1, @ANYRES16=r2, @ANYBLOB="dc60ce8a1c39f51a3c772b75af926e578bdb17f6667e57cdbedfbd8f4c634da617fecf0194d93b5f9b39b4b5a93000978481d8eb80b1680a3605749fd07bf362f5c032a324d5e996c4a0bd941c75850702a0a056d29ca23f0e987d53472fade4ea76e0050610665ca33f3b9cea923877cb8c5e9f5a6ff88a11c69ebf2f4231b36fa01d89959cb1024802f272cafeace6f5c393d32fb6a6c57f4d4396634c7953038d5159a6a703ec1fdda1bba9418e614b78f38e6c2b226c80bccabb9249179bec24780575194fec479a07d3435ab59abcf6b4af30d571bad71d6a741d08a2121815127d7d9fc6ffca06bf"], 0x38}, 0x1, 0x0, 0x0, 0x8040}, 0x4040) r3 = socket$kcm(0xa, 0x2, 0x3a) sendmsg$kcm(r3, &(0x7f00000004c0)={&(0x7f0000000800)=@in6={0xa, 0xfffe, 0x0, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000500)="80005b02", 0x4}], 0x1, 0x0, 0x0, 0x900}, 0x0) recvmsg$kcm(r3, 0x0, 0x100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xe162, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x258}, 0x50) writev(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r4 = getegid() fchown(r2, 0x0, r4) sched_setaffinity(0x0, 0x8, &(0x7f0000000040)=0x7fff) syz_emit_ethernet(0xc2, &(0x7f00000001c0)=ANY=[], 0x0) openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) socket$inet(0x10, 0x4, 0x0) syz_usbip_server_init(0x1) syz_usbip_server_init(0x7) syz_usbip_server_init(0x2) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) syz_usbip_server_init(0x0) 4m22.249013651s ago: executing program 2 (id=274): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x24, &(0x7f0000000280)=0x1, 0x4) recvmmsg(r0, &(0x7f0000000440)=[{{0x0, 0x0, 0x0}}], 0x300, 0x0, 0x0) r1 = fsopen(&(0x7f0000000180)='hugetlbfs\x00', 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000200)={0x10000802, 0x0, 0x40000, 0x40000}, 0x10) socket(0xa, 0x3, 0x3a) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mremap(&(0x7f000054e000/0x1000)=nil, 0x1000, 0x3000, 0x3, &(0x7f000022c000/0x3000)=nil) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000080)=@mangle={'mangle\x00', 0x1f, 0x6, 0x3a0, 0x118, 0x0, 0x330, 0x298, 0x330, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x3f0, 0x6, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'ip6erspan0\x00', 'pimreg0\x00'}, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38}}, {{@ip={@multicast2, @dev, 0x0, 0x0, 'veth0_to_bond\x00', 'syzkaller1\x00'}, 0x0, 0x70, 0x98}, @inet=@DSCP={0x28}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0x0, 0x0, 'vlan0\x00', 'veth1_to_bridge\x00'}, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x400) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001000000000000000000dc020078000000000000000000000000ff02000000000000e26ea7250000000100000000000000000a"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="650100001b"], 0x188}}, 0x0) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="280000005200011904000000000000001c"], 0x28}}, 0x0) fsconfig$FSCONFIG_CMD_CREATE(r1, 0x6, 0x0, 0x0, 0x0) fsmount(r1, 0x0, 0x0) open(&(0x7f0000000100)='.\x00', 0x591002, 0x50b) mprotect(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1) r6 = syz_open_procfs(0x0, &(0x7f0000000000)='net/netfilter\x00') lseek(r6, 0x98b, 0x2) 4m18.577365625s ago: executing program 2 (id=281): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x7, @ipv4={'\x00', '\xff\xff', @local}, 0x1}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f00000002c0), 0x4) fdatasync(0xffffffffffffffff) (async, rerun: 32) bind$inet6(0xffffffffffffffff, &(0x7f0000000280)={0xa, 0xe1b, 0x8, @mcast1, 0xfffffff8}, 0x1c) (rerun: 32) r2 = openat$kvm(0xffffffffffffff9c, 0x0, 0x81, 0x0) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x2, &(0x7f0000000000)=@gcm_128={{0x304}, "bd88818314ff7d84", "0b3ea924c47b25d7624cd362581725c7", "000400", "78cb6e6d9d2574d4"}, 0x28) (async) socket$caif_stream(0x25, 0x1, 0x5) (async) syz_usb_connect(0x0, 0x2d, 0x0, 0x0) (async) r3 = syz_io_uring_setup(0x88f, &(0x7f0000000140)={0x0, 0x3cfa, 0x0, 0x2, 0x3b9}, &(0x7f0000000000)=0x0, &(0x7f0000000280)=0x0) (async) sched_setaffinity(0x0, 0x8, &(0x7f0000000680)=0x2) (async) r6 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) (async, rerun: 32) r7 = socket$tipc(0x1e, 0x2, 0x0) (rerun: 32) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) (async) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) (async) bind$tipc(r8, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) (async, rerun: 32) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x2, 0x4}}, 0x10) (rerun: 32) bind$tipc(r8, &(0x7f0000000240)=@name={0x1e, 0x2, 0x0, {{0x42, 0x3}, 0x10000000}}, 0x10) (async) bind$tipc(r8, 0x0, 0x0) read$msr(r6, 0x0, 0x0) (async, rerun: 64) syz_memcpy_off$IO_URING_METADATA_GENERIC(r4, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) (async, rerun: 64) syz_io_uring_submit(r4, r5, &(0x7f00000000c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0x0, {0x51}}) (async) io_uring_enter(r3, 0x47f6, 0x0, 0x2, 0x0, 0x0) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)={0x38, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_MLSLVLLST={0x10, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSLVLLOC={0x8}]}]}]}, 0x38}}, 0x0) syz_usb_connect(0x4, 0x3f, &(0x7f0000000000)=ANY=[@ANYRES64=r9, @ANYBLOB="a701ad9f0add"], 0x0) 4m17.83373191s ago: executing program 2 (id=283): r0 = socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(0xffffffffffffffff, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(0xffffffffffffffff, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_GETPLANE(0xffffffffffffffff, 0xc02064b6, &(0x7f00000001c0)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3c0000004800010000000000000000000a00806e0800000000000000140001800d2a79075827af5aa534d6815c2e93f10c000280", @ANYRES32=0x0], 0x3c}}, 0x0) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0xa0000, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r7, 0x4008ae89, &(0x7f00000002c0)=ANY=[@ANYBLOB="010000"]) socket(0x80000000000000a, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x2}]}}}]}, 0x3c}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB, @ANYRES32=0x0], 0x48) r8 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r8, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) getsockopt$IP_VS_SO_GET_SERVICE(r8, 0x0, 0x483, &(0x7f0000000380), &(0x7f0000000400)=0x68) fremovexattr(r4, &(0x7f0000000200)=@known='security.apparmor\x00') sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) sendmmsg$inet6(r0, &(0x7f0000001540)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x173b2a7e, @remote, 0x19}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x28048005) writev(r0, &(0x7f0000000240)=[{&(0x7f00000036c0)="7d29dbe640bf9136", 0x8}, {&(0x7f00000002c0)="7794aa6fde076f17baebfa46123089f865ef3bb07dfb50afbd9267b1954a9ca90be5b079e13fe10a25256b8e5ada738172399dcfd5157ada26a10314f3dc7fbb570fc1471d8a6d885f70b055abd40ade42d87be1abcae749139f1834b139d1f565a4c412f5b68471ede406d4dcc46e7059c7a88c491cc851ef509b81699d73d64ef0178d20bee18f8334f7218b458a11fe195c8a77be928e3295f874761fd42bec042564e485d332e5e458415d92c9d84dd552f3a23be3f0d11d471a", 0xbc}, {&(0x7f0000002680)="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", 0x4fd}], 0x3) 4m15.840562818s ago: executing program 2 (id=287): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mmap$binder(&(0x7f0000fff000/0x1000)=nil, 0x1000, 0x1, 0x11, 0xffffffffffffffff, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000040)='cgroup2\x00', 0x0, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000003c0)={[{@userxattr}, {@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) ioctl$SNDRV_TIMER_IOCTL_CREATE(0xffffffffffffffff, 0xc02054a5, 0x0) readv(0xffffffffffffffff, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000000100)='mountinfo\x00') pread64(r1, &(0x7f0000000200)=""/4087, 0xff7, 0xd37) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x1, &(0x7f0000004540)=ANY=[@ANYRES16=r1, @ANYRESHEX=r0, @ANYRES32=0x0, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYBLOB="a9f1674788e3ec3d6a47732125ef4b9cea6065ed0f557a1a6b02459f363d93425bb78f76c4bed20ed0ee67d4c87e98a03fe2584e117cd89ee7799c61743c1811b10d9f575633bae8d51a3ecaf4219deb42990fd81739db9833d51be59c544d28a1d53c4aedca88646f9cbc2f31c249f860f810375e2f39629af153d9120e244bbba833328d99c4e8cc6b8ef5471ed9a79a8e02058598ae6affc1dea8c0d6963f38eb3bbbcfd14d984b89c883bbf057a38b480328d3c04dbb6de1df10f31c80a90ff5152ad1ce23", @ANYBLOB='#\x00']) read$FUSE(r0, &(0x7f0000006e80)={0x2020, 0x0, 0x0, 0x0}, 0x2082) write$FUSE_INIT(r0, &(0x7f0000004300)={0x50, 0x0, r2, {0x7, 0x29, 0x0, 0x11812410, 0x0, 0x0, 0x81}}, 0x50) syz_fuse_handle_req(r0, &(0x7f0000000000)="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", 0x2000, &(0x7f0000006dc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000004480)={0x90, 0x0, 0x6, {0x3, 0x0, 0x7fffffff, 0x1fffffffffffd, 0x400, 0xc, {0xfffffffffffffffe, 0x9, 0xffffffff, 0x1, 0xfffffffffffffffd, 0x4, 0x8, 0x123, 0xdab5, 0xa000, 0x0, r3, 0x0, 0x6, 0xffff}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$security_capability(&(0x7f0000000240)='./file0/file1\x00', &(0x7f0000000280), 0x0, 0x0, 0x0) setxattr$trusted_overlay_origin(&(0x7f00000001c0)='./file0/file1\x00', &(0x7f0000000200), 0x0, 0x0, 0x1) mount$bpf(0x0, &(0x7f00000003c0)='./cgroup\x00', &(0x7f0000000280), 0x18, &(0x7f00000043c0)=ANY=[@ANYBLOB='uid=', @ANYRESDEC=0x0, @ANYBLOB="73fa53e03e5efcc3b68109c83dc734bcd46725347014fed56e9a8251189109bbfc9ebb10cde17642bbed5080d70e9a5fee8b71b2f9198d09a2fa864ad816aa4b7995bbb8bd69d96b7fd1d16a4376b81f0c7d8df8229d57163a220a059451fb5cf292de9b8c5f9a1da6c0b4ba4851bd5df58dd471fb07af429d11f487950de16b45f1802bc7f94656b314769d4d303f31e0e1d8117a2f76"]) umount2(&(0x7f00000002c0)='./file0\x00', 0x9) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000021c0)=ANY=[@ANYBLOB="6000000002060500000000000000000000001400078008b686283700000508001240000000000500050000000000050004000100000011000300686173683a6e65742c6e65740000000045371c5d51e58d3479ca9e8c68b4004e7d00"/113], 0x60}, 0x1, 0x0, 0x0, 0x4004}, 0x20004000) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/diskstats\x00', 0x0, 0x0) read$FUSE(r0, &(0x7f0000002240)={0x2020}, 0x202d) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x1085408, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f00000003c0), 0x0, &(0x7f0000004380)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000001c0)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000000540)='./file7\x00', 0x1c0) renameat2(0xffffffffffffff9c, &(0x7f0000000780)='./file0\x00', 0xffffffffffffff9c, &(0x7f0000000000)='./file7/file0\x00', 0x1) 4m15.589628105s ago: executing program 2 (id=290): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f00000004c0)={'batadv_slave_0\x00', 0x0}) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0xa, 0xa, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0xffff7564, 0x0, 0x0, 0x0, 0x5}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x2}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x3}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000640)='GPL\x00', 0x1470076e, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2e, 0xffffffffffffffff, 0x8, &(0x7f0000000680)={0x6, 0x1}, 0x8, 0x10, &(0x7f00000006c0)={0x2, 0x1, 0x8, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0xa, &(0x7f0000000700)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000740)=[{0x0, 0x1, 0x5, 0xa}, {0x3, 0x2, 0x4, 0x5}, {0x4, 0x1, 0x3}, {0x4, 0x4, 0x8, 0x8}, {0x4, 0x2, 0xb, 0x8}, {0x3, 0x5, 0x1, 0xa}, {0x4, 0x4, 0x4, 0x3}, {0x2, 0x4, 0x5}, {0x0, 0x2, 0x9, 0x5}, {0x0, 0x3, 0x8, 0x2}], 0x10, 0xd0}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000940)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000008c0), &(0x7f0000000900)='%-5lx \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x15, 0x1, &(0x7f0000000400)=@raw=[@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}], &(0x7f0000000440)='GPL\x00', 0xb4, 0x17, &(0x7f0000000480)=""/23, 0x41100, 0x15, '\x00', r2, @sk_reuseport=0x27, r3, 0x8, &(0x7f0000000540)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xd, 0x3, 0x3391}, 0x10, 0xffffffffffffffff, r4, 0x1, &(0x7f0000000980)=[r5], &(0x7f00000009c0)=[{0x5, 0x4, 0x9, 0x5}], 0x10, 0x5}, 0x94) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r6, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x3c, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) r10 = syz_genetlink_get_family_id$gtp(&(0x7f0000000180), r0) sendmsg$GTP_CMD_ECHOREQ(r0, &(0x7f0000000340)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1200}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x30, r10, 0x100, 0x70bd26, 0x25dfdbfe, {}, [@GTPA_FLOW={0x6, 0x6, 0x3}, @GTPA_TID={0xc, 0x3, 0x4}, @GTPA_PEER_ADDRESS={0x8, 0x4, @broadcast}]}, 0x30}, 0x1, 0x0, 0x0, 0x800}, 0x4000800) r11 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@newlink={0x4c, 0x10, 0x403, 0x300, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0xffe}]}}}, @IFLA_LINK={0x8}, @IFLA_MASTER={0x8}]}, 0x4c}}, 0x8000) 4m14.996390938s ago: executing program 2 (id=292): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x38, @loopback}, 0x1c) 4m14.736797729s ago: executing program 33 (id=292): bpf$MAP_CREATE(0x0, &(0x7f0000000e80)=ANY=[], 0x50) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) socket(0x2, 0x80805, 0x0) ioctl$IOMMU_IOAS_MAP$PAGES(0xffffffffffffffff, 0x3b85, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, 0x0) ioctl$IOMMU_TEST_OP_MOCK_DOMAIN(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000200), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, 0x0, 0x0) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x38, @loopback}, 0x1c) 13.261855058s ago: executing program 5 (id=1180): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN_WAIT(r0, 0x942e, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0), 0x12) getpid() r2 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r2, &(0x7f00000000c0)={0xa, 0x4e22, 0x9, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2}}, 0x2}, 0x1c) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x41, &(0x7f00000002c0)=0x4861, 0x4) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x7, @ipv4={'\x00', '\xff\xff', @empty}, 0x106}, 0x1c) sendto$inet6(r2, &(0x7f0000000140)="8afb", 0x2, 0x8001, 0x0, 0x0) r3 = fcntl$dupfd(r2, 0x406, r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={0xffffffffffffffff, 0x2000000, 0x0, 0x0, 0x0, 0x0, 0x3800, 0x0, 0x0, 0xffffffffffffff5c, 0x0, 0x0, 0x1}, 0x50) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x110e22fff6) ioctl$TUNGETVNETLE(r4, 0x40047451, &(0x7f0000000180)) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) fcntl$lock(0xffffffffffffffff, 0x7, &(0x7f0000000040)={0x0, 0x0, 0x8000, 0x3ff}) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x3000003, 0x4031, 0xffffffffffffffff, 0x0) madvise(&(0x7f00000ec000/0x800000)=nil, 0x800000, 0x17) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x44, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='mmap_lock_acquire_returned\x00', r6}, 0x18) r7 = syz_clone(0x80008000, 0x0, 0x0, 0x0, 0x0, 0x0) process_vm_readv(r7, &(0x7f00000000c0)=[{&(0x7f0000000040)=""/65, 0x41}], 0x1, &(0x7f0000000200)=[{&(0x7f0000000100)=""/193, 0xc1}], 0x1, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000400)=0x5, 0x4) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) syz_genetlink_get_family_id$batadv(&(0x7f00000004c0), r3) 11.485651806s ago: executing program 5 (id=1187): r0 = io_uring_setup(0xf05, &(0x7f0000000080)={0x0, 0x4f62, 0x800, 0x4, 0xec}) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='nofsc']) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000000)={&(0x7f0000fff000/0x1000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f000000c000/0x1000)=nil, &(0x7f000001f000/0x1000)=nil, &(0x7f0000015000/0x3000)=nil, &(0x7f0000ffb000/0x2000)=nil, &(0x7f000000c000/0x4000)=nil, &(0x7f000001d000/0x3000)=nil, &(0x7f0000012000/0x4000)=nil, &(0x7f0000ffc000/0x1000)=nil, 0x0}, 0x68) setgid(0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x9, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) mount$overlay(0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xe, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b7000000b0000000bca30000000000002403000040feffff720a00fe0000000071a4f0ff000000001f030000000000002e0a0200000000002600000000ff000e61141800000000001d430000000000007a0a00fe00581c1f61147c0000000000b503f7fff80000009500000000000000033bc065b78111c6dfa041b63af4a3912435f1a864a7aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168e5181554a090f30002af51efd601b6bf01c8e8b1fee5bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e65440000000000000000028610643a98d9ec21ead2ed51b104d4d91af25b845b9f7d08d123deda88c658d42ecbf28bf7076c15b463bebc72f526dd70252e79166d858fcd0e06dd31af9612fa402d0b11008e59a5923906f88b53987ad1714e72ba7d06a59ff616236fd9aa58f0177184b6a89adaf17b0a6041bdef728f5089048ddff6da40f9411fe7226a40409d6e37c4f46756d31cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10076443d643649393bf52d2105bd901128c7e0ec82701c8204a1deeed4155617572652d950ad31928b0b036dc2869f478341d02d0f5ad94b081fcd507acb4b9c67382f13d000000225d85ae49cee383dc5049076b98fb6853ab39a21514da60d2ae20cfb91d6a49964757cdf538f9ce2bdbb9893a5de817101ab062cd54e67051d355d84ce97bb0c6b6a595e487a2cc47c0efbb2d71cde2c10f0bc6980fe78683ac5c0c31032599dd273863be9261eee52216d009f4c52048ef8c126aeef5f510a8f1aded94a129e4aec6e8d9ab06faffc3a15d91c2ea3e2e04cfe031b287539d0540059fe6c7fe7cd8697502c7596566de74e425da5e7f009602a9f61d3804b3e0a1053abdc31282dfb15eb6841bb64a1b3045024a982f3c48b936e6f9e0fcda88fe4413537528fdb6153baae244e7bf573eac34b781337ad5901a4cad2422ee965a38f7defbd2960242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44022a579dfc0229cc0dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc48899b212c55318294270a1ad10c80fef7c24d47afcc829ba0f85da6d888f18ea40ab959f6074ab2a40d85d1501783a7ab51380d7b4ead35a385e0b4a26b602396df7e0c1e02b88c114f244a9bf93f04bf072f0861f5c0b000000000000eedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba3401e6a52acb1188883ad2a3b1832371fe5bc621426d1ed01b389708165b9cdbae2ed9dc7358f0ebadde0b727f27feeb7464dcc536cbae2f5c7d951680f6f2f9a6a8346962a350845ffa0d82884f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010ae20e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00000000c95265b2bd83d648532869d701723fedcbada1ee7baa19faf67256b56a41fd355b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2654026c6ea08b83b123145ab5703dad844ceb201efeb6dc5f6a9037d2283c42efc54dd84323afc4c10eff46248843187f1dd48ef0900000000000000ff0f4000000000f00700003c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538c6ee6ba65893ff1f908ba7554ba583ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738612e4fee18a22da19fcdb4c1011e32f808890205f0e6da2819d2f9e77c7c64affa54fec0136cbafa5f62e96753b639a924599c1f69219927ea5301fff0a6063d427180d61542c2571f983e96635600000554f327a3535e7c7542799493c31ac05a7b57f03ca91a01ba2a30ca99e969d6fd09dc28ebc15edb4d91675767999d146aef7799738b292fd64bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a794963442aece449a0d80010f5c653d22d49030a8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2869291b7d12096833d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e637d4219ef7ec61261173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ecab5d232f89fe0120f64c62e8e3ed8bcb45202c204bbec8d722824c0ebca8db1ea4a05e41f6016ab5bbe4fe7ff5d785d0128171c90d9900ca2532b0f9d01c4b45294fbba468df3e1b393cb4e62e753b4172ba7ac1f2b51c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addbc4b3093c91b8068c5adfcb0d7fd849904568916694d461b76a58d88cf0f520310a1e9fdc18cde98d662eee077515d0a881192292ffff5392ab3d1311b82432662806add87047f601fa888400000000000000000000000000006acc19808d7cf29bc974b0ea92499a41b9b9a7c2bca311a28ee4952f2d325a56397c78f12205db653a536f0100e0eda300a43a13bd1b9f3322405d1efd78e578dc6b3fb84f3738a4b6caa800000087efa51c5d95ecba4e50e529d1e8c89600e809dc3d0a2f65579e23457949a50f2d0455cf699b3746979f99f6a1527f004f37e84fb478199dc1020f4beb98b8074bf7df8b5e783637daf121f175a81cffff4ac55a4385e9a617aa6c8e10d4202c5afeb06e2f9115558ea12f92d7ae543d44086b3f03b20d546fa66a72e38207c9d20035abc46271a30f1240de52536941242d23896ab74a3c6670fdc49c14f34fc4eadd6db8d80aba439772bf60a1db18c472dafc5569adc2c406f39f82928d2a1ffe29f1a57d3f18f4edaeb5d37918e6fddcd821da67a0785585a4443440dc65600e64a4a274000000000000000000000000000000000000000000000009dd14b38f2f5426d7cf5075047c31f6ce6adddfe3ac649c0643c8bfbeb14ba1fd7a485aa893915cf81e29aaf375e904bbe52691a4120260ffcd030000006d291ebcef893e1b9ccb6797d0646fe0e7274434f28efb43e06e64f0698caca42f4e6018a455736c482a017e2b13dac4a90faa109f0e87cc94e3efb649692456463ca74aa6ad4bf50c1acb3928143be1c1023a375e528285544d0064b98646f3109e9a4942ce42c6e7ec84b664f6c2770803f10b0a1fcbfc309381aeba191950bae71f37f1eb7ceeffb3c0547ac6571603adbfde4c8b5f8d7f4b854441613633b48865b65bdc415e1e0dcf672d68cf4cebf04f4bc1eebf560a26d3b332240d450fdb0a9a69f432e277f3a0386eb2bd1305c821c64757f786b79fef54dbe64c67d73934bc80b2133fb3c04cc7ea48bf97a6243c9f95dcbddecf45f008f1822c7868e1ff5a3cff5d6b6898335792749df7b1f51e91f8c1c3b1b93b33aaa3fab69cef08a9f6f6cf39dea3d878b2ed42545421970cc426e644332bc956d1c6adefdf0ede2c5c94aa632646ae225accdf031f611d01622921f1b922a5ac887cca3136133dce8d9f5f4da7bed2ea5d94362200000000000000000000f296b0c1484e5f781ad26bff696b05ff0a5e2270e07e18b04273bd4075ea38ab463bfa6a38e7c537498ba3e4df8dfc9e8c0a0d213c3ffad44d2a376def42e41e9fc3167a257e040fa7cf32c221aaac6cfdeb33c27500001a0000000000000000000017350000c11ae694b0c69c2c03f6790044a357e785af6e153d5f1ea460af92c7cbbd6295afe740f5e154346d483e0d10522a7a945b93fb705b95b6aae27a8fab1e6984c8bdc12360627137ab6737b68ab08a1a4b94cb29a74dc36b51209cfbc87f61182bbeb2772e9d5a1ffc477179be481ffe46a4ce86be0b1f8eee42a611a3d44ca450b14586ed63dd92005c79e4a8ab8a94f0b74903580ac98708007c80d6c7d0de4614195e40d797c0348dd70f36a220e8b3710fb5358c27e90793bcb9ee6319342c4b239ca8cbc6fc83d32e6eb62ad92e43991f2447be9c2a1ae1119eafb901a43d57e885116d19aa152bfb89f8d0b2516f80120a1cddff771657f3d0288ec3899f1e3ba0151c4037148fb479de703fc52b6573349c28d1b107d859b4961324c17756dde99de1924a1d2b7095d34a55060f47f4407d89acf9f1d2156befec432e8e993c79027b7ef285b20c2e6b3d0491d0d3591b0d94713332b6b79c8297117b0d14eff64e0aca8a4b4aa773d8fba1217e9519952419bb9dd998d0ec870ff00b6d556018602738fbc6cec89d6dd13cf55b96f6fe9a137d2d6a56ad78e52c23ed080000000000002bc261a781fd14126c146a0aac4221839a4b9bbf61e4bba695a41e2109eba8e40c370267cc51ffadbd15cafc97a4d3edfdcb9b5729307c6bdaf7b69325fb05fa8a9869de0600ee477d71bf3e36d1d9019edfa27aae24b632f251df210c86a18fae731ecb8b0d48357378caf2b6789509b1bacfd4fa812dc341875cfa5e798bbf59770000000000000000c8a594ea3c3347962d9113b1fecdfad5a8da641053f02e49456f5d21674521e67a5b18ea451eccf69dd6af928d2d68da9304a296c22fdc0500000000000000b1aade386b113045033a6188d56e675564d8cb8d5b40114b0f5bf15dd64c9ece60b8588ee8777d0ea8f4713b258427c7d90f9e93348e17723ba9ab8ae790f74cc41ae5795835f3cec40dff485d2802c08611454d9ea784a205bcc07ec26f906f3cf45bb37014ab6f22af6213618e242b283ea9d3f0677ee598072ec06f7170009d92bb87d9d12c378dfd3e74ec056ee83eef666423d934fc5908c9ff98715218a5964f1e00000000426ac9588e27aefe307f49662990ee823568bbc2f89596ced7c6c52d76b8096f1848410843b93fd404f535be474f456778b5ef85abb8fc2336abd5ea64a6efea8a5aca0015499b88ae780a7bae4df603bd3c72808cf300440b1b638a6640f7de8d0d82f359ca2f779cd48cd8d3603f4f69e47f386988c9b7b5d6dd3d48a1fdca780049d7c87bea42161a4c0d7cf0125b43dc9d8845f3c05a08acda647e7143d0e0aee2949a45e28488b0522c2288072467d2afe269f589fb7e034b92d3ca245b16b71998711bfe206c9690b6d0eebb06a29349229eb45ff15c63aa2c82c56d7420738cd1b04eb16e87cb524315d7361ea3635d3799bb7fcc56aa5e1dbe031a7a12554dee6754b72f43a6fddf427f32ec3df274a88097725679769beebf1aa6eb09d5154e4900000000000d0f7160a05911d969879953d3d4702b2676c07bb0fd14020a66718378825d5ed789711b77d40dc31e0b8fc651b45559da463f0000000000000000000000000052d42124e9c26aba885015e69d42ecd710342ac597ebea576ae15fdf611356f622e831741ab15549e0d7a2bd0324e2b3b48a10551607492c19eaf58485feb4cab19c303b30ba2ddea0d792d77724c9fa4ed58b93668fc20484f141ee2b6a0029e88fdc853189b4dafd36ff23b11967090e508f45e3f10857038a52ef275cf9e3e4b5d30b12d138dfa70930c603b5e3f4b7be67be3dba3cbd8d4d143195af0697d779445d67dcfbd922d12a8b49f93eac7a72faacf80346b3b669615f2710eb8df39fc8c04d2c9c196fa6facfea613569a35cde6451f2edf55ce25c7d72ec7ea85a92458c0559ca3a94727d495bd4671a55a70bc544d71d8e0257707a31936f1adf224077310a86bf447ec92c650acca8c6b0721020894b06178c32f4472d17174d6eb2b067030c5d2c12583f46d2da7fba42d4083259c7cdc8bf1f4299c248865d3c809356c3ed"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2}, 0x48) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) io_uring_register$IORING_REGISTER_FILES(r0, 0x20, &(0x7f0000000000)=[r0], 0x1) fcntl$setpipe(r0, 0x407, 0x7ff) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, 0x0) 10.945955605s ago: executing program 5 (id=1188): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x3f, 0x84, 0x2c, 0x40, 0x10c4, 0xeac1, 0x85a7, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x1, 0x0, 0x0, 0xfe, 0x43, 0xb1}}]}}]}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000070000000000000700000aa0000000060a0b0400000000000000000200000074000480700001800a0001006d617463680000006000028008000240000000000c0001007068797364657600460003007e6b92c43235dc7e977221f83c3f179e65022fc067b787cd67b6d9983b1bddafbdf6a37da5ed332cd2ee94b31d2ec330ce34cc676c0783a4bcc10466554b0470571f00000900010073797a30000000000900020073797a32"], 0xc8}, 0x1, 0x0, 0x0, 0x4008011}, 0x40040c0) 8.941196266s ago: executing program 6 (id=1197): bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x50) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_usb_connect(0x0, 0x48, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000022546940fa0ae803d0990102030109023600010000000009047500038cbb2a0009050a001000010000090588"], 0x0) syz_usb_control_io$uac1(r0, 0x0, &(0x7f00000004c0)={0x44, &(0x7f0000000080)=ANY=[@ANYBLOB="9e7371786414f00f1a5dc8f30b0300010006"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000540)={0x2c, &(0x7f0000000580)=ANY=[@ANYBLOB="fc69a31facc33b"], 0x0, 0x0, 0x0, 0x0}) syz_usb_connect(0x0, 0x24, &(0x7f00000000c0)=ANY=[@ANYBLOB="1201000002218e40dd04018012c00000000109021200010002000009043ffd00ff88b0954839741799024800"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x40001e0, 0x0) fcntl$lock(r2, 0x26, &(0x7f0000000040)={0x1, 0x2, 0x6, 0x2, r1}) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r4, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000000)={0x0, 0x9}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r4, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r4, &(0x7f0000000480)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x80020}, 0x1c, &(0x7f0000000500)=[{&(0x7f00000034c0)='\x00', 0x1}], 0x1}}], 0x1, 0x34000811) syz_usb_control_io$lan78xx(r0, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) clock_settime(0x1ed5d7403, &(0x7f00000008c0)={0x0, 0x3938700}) bind$alg(r5, 0x0, 0x0) sendmmsg$inet(r5, &(0x7f0000003340), 0x0, 0x440508d0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000040)=0x14) 8.136059051s ago: executing program 1 (id=1201): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000004c0)={0xc, 0x0, 0x0}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r0, 0x3ba0, &(0x7f0000000d40)={0x48, 0x5, r1, 0x0, 0xffffffffffffffff}) ioctl$IOMMU_TEST_OP_ACCESS_RW(r0, 0x3ba0, &(0x7f0000000300)={0x48, 0x8, r2, 0x0, 0x3fff, 0x0, 0x0, 0x1}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x40001e0, 0x0) r6 = openat$full(0xffffffffffffff9c, &(0x7f0000000040), 0x400, 0x0) accept$nfc_llcp(r6, 0x0, &(0x7f0000000100)) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$nvram(0xffffffffffffff9c, &(0x7f0000000180), 0x200, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) sendmsg$NFT_BATCH(r7, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x80, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x50, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x40, 0x2, 0x0, 0x1, [@NFTA_TARGET_REV={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TARGET_INFO={0x2c, 0x3, "7339f2f10455afb9fdd672bad09dfb78c7699c74e891a0c700"/40}, @NFTA_TARGET_NAME={0x8, 0x1, 'TEE\x00'}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0xa8}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) 7.401307722s ago: executing program 5 (id=1204): socket$nl_generic(0x10, 0x3, 0x10) prlimit64(0x0, 0xe, 0x0, 0x0) ioctl$TIOCGWINSZ(0xffffffffffffffff, 0x5413, 0x0) getpid() syz_open_dev$sg(&(0x7f0000000000), 0x0, 0x401) getsockopt$inet_mptcp_buf(0xffffffffffffffff, 0x11c, 0x3, 0x0, &(0x7f0000000080)=0xa1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x800008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, 0x0, 0x20802, 0x0) socket$alg(0x26, 0x5, 0x0) r1 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000002c0)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r1, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x86) r2 = openat$proc_mixer(0xffffffffffffff9c, 0x0, 0x0, 0x0) dup3(r2, r1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x84, 0x2c, 0xd27, 0x70bd25, 0x801, {0x0, 0x0, 0x0, r6, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x54, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x21, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x14, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x59}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}]}]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x38, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x34, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x8}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x40}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_HWID={0x5, 0x4, 0x3c}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x8}]}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x80}, 0x800) setresuid(0x0, 0xee00, 0x0) 7.206298318s ago: executing program 1 (id=1207): mkdir(&(0x7f0000000200)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(0x0, 0x90) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) write$RDMA_USER_CM_CMD_QUERY(0xffffffffffffffff, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000240)='./file1\x00', &(0x7f0000000000)='tmpfs\x00', 0x2, &(0x7f0000000300)='usrquota') chdir(&(0x7f0000000380)='./file1\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cpuacct.usage_user\x00', 0x275a, 0x0) quotactl_fd$Q_SETQUOTA(r0, 0xffffffff80000800, 0x0, &(0x7f00000000c0)={0x4, 0xc, 0x6, 0x0, 0x3, 0x3, 0x1, 0x3, 0x7fffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.io_wait_time_recursive\x00', 0x275a, 0x0) socket$inet_udp(0x2, 0x2, 0x0) landlock_create_ruleset(&(0x7f0000000000)={0x10, 0x0, 0x3}, 0x18, 0x0) openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2040, 0xce8697e3d5188492) (fail_nth: 11) 6.512251318s ago: executing program 3 (id=1209): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup/cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r0, &(0x7f00000000c0), 0x12) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = creat(&(0x7f0000000100)='./file0/file0\x00', 0x22) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone3(&(0x7f00000003c0)={0x385200080, 0x0, 0x0, 0x0, {}, 0x0, 0x0, 0x0, 0x0, 0x2000, {r1}}, 0x58) 6.391740559s ago: executing program 1 (id=1210): prlimit64(0x0, 0xe, &(0x7f0000000200)={0x8, 0x8a}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x4, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$SNDRV_TIMER_IOCTL_SELECT(r4, 0x40345410, &(0x7f0000000040)={{0x0, 0x3, 0x0, 0x3, 0x7}}) r6 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r6, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @empty}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e20}]}, 0x2c}}, 0x0) 6.346313516s ago: executing program 3 (id=1211): socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) r1 = userfaultfd(0x801) ioctl$UFFDIO_API(r1, 0xc018aa3f, &(0x7f00000000c0)) ioctl$UFFDIO_REGISTER(r1, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) syz_io_uring_setup(0x50d0, &(0x7f0000000000)={0x0, 0xfffffffd, 0x2, 0x2, 0x332}, &(0x7f0000000100), &(0x7f0000ff4000)) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0xfffffffffffffc22, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000002700)=""/102392, 0x18ff8) r3 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000300), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r3, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r3, &(0x7f0000006180)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r3, &(0x7f0000004180)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x1, {0x6, 0x2, 0xffffffffffffeffe, 0xfffffffffffffffd, 0x0, 0x0, {0x40, 0x8, 0xb, 0xffff, 0x0, 0x1, 0x0, 0x0, 0x120, 0x2000, 0x0, r5, r6, 0x501, 0x4}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0d000003005a"], 0x50) write$FUSE_INIT(r3, &(0x7f0000000440)={0x50, 0x0, r4, {0x7, 0x29, 0x0, 0x1004cc80, 0x40, 0x73, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}}, 0x50) openat(0xffffffffffffff9c, &(0x7f0000000a80)='./file0/file0\x00', 0x300000d, 0x1) 6.318620765s ago: executing program 0 (id=1212): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x44, 0x6, 0x438, 0x270, 0x0, 0x270, 0x270, 0x0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x3a0, 0x6, 0x0, {[{{@ip={@broadcast, @dev={0xac, 0x14, 0x14, 0x14}, 0xff, 0xff000000, 'batadv_slave_1\x00', 'bridge_slave_0\x00', {0x59e9ca6af987edf9}, {0xff}, 0xda, 0x3}, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x1, 0xa}}}, {{@ip={@loopback, @local, 0x700, 0x0, 'wg2\x00', 'veth0_virt_wifi\x00', {0xff}, {0xff}, 0x6, 0x0, 0x42}, 0x0, 0xc0, 0xf0, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}, {0x8}}]}, @TPROXY={0x30, 'TPROXY\x00', 0x0, {0x7fff, 0x3, @multicast2, 0x4e22}}}, {{@uncond, 0x0, 0xc0, 0xe8, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x10, 0xfc}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x498) 5.552941362s ago: executing program 0 (id=1213): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$netlink(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="1c0000001e00995e00000000000000000c00000000000000000001"], 0x1c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000000000000000000000000000000000000000000bfa1a563f377b5e297266f100d8cc1982461f8822afae4ba8c1cfa197633d4b492a8fbf7d13ffc0d0a1154c3f63714c49bd4b5b7e53c3f874b102a75e322ab3d371fccfe4b2f32d6131dfb8730b6af75493745835093eaf1b611cf287b2482e0c280c76aa4229b1f38a4b2d0558ccc20126aa1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000ec0)={0x50, r3, 0x1, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IE={0xc, 0x2a, [@mesh_chsw={0x76, 0x6, {0x0, 0x2, 0x38, 0x22}}]}, @NL80211_ATTR_SCAN_FREQUENCIES={0xc, 0x2c, 0x0, 0x1, [{0x8}]}, @NL80211_ATTR_SCAN_SSIDS={0x1c, 0x2d, 0x0, 0x1, [{0xa, 0x0, @default_ap_ssid}, {0xa, 0x0, @default_ap_ssid}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x24004084}, 0x40000) syz_usb_connect(0x0, 0x4c, &(0x7f00000016c0)={{0x12, 0x1, 0x201, 0xab, 0x62, 0x58, 0x40, 0xc880, 0x760e, 0x35fc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x3a, 0x1, 0xe, 0xe, 0xa0, 0x32, [{{0x9, 0x4, 0x15, 0xfb, 0x0, 0x1, 0x3, 0x67, 0x2, [@cdc_ncm={{0x7, 0x24, 0x6, 0x0, 0x1, "7c1f"}, {0x5, 0x24, 0x0, 0x200}, {0xd, 0x24, 0xf, 0x1, 0xfffffff8, 0x2, 0x9}, {0x6, 0x24, 0x1a, 0x6}}, @hid_hid={0x9, 0x21, 0x7, 0x5a, 0x1, {0x22, 0xd46}}]}}]}}]}}, &(0x7f0000001b00)={0x0, 0x0, 0x8, &(0x7f0000001880)={0x5, 0xf, 0x8, 0x1, [@generic={0x3, 0x10, 0x2}]}, 0x1, [{0x0, 0x0}]}) r4 = openat$procfs(0xffffffffffffff9c, &(0x7f00000021c0)='/proc/keys\x00', 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="300000001e0001000000000000ecc80007000000", @ANYRES32=r5, @ANYBLOB="0000000008000900030400000a0002"], 0x30}}, 0x0) read$FUSE(r4, &(0x7f0000000080)={0x2020}, 0x2020) chdir(&(0x7f0000000000)='./file0\x00') mknod$loop(&(0x7f0000000040)='./file0\x00', 0x100000000000600d, 0x1) r6 = socket$inet(0x2, 0x2, 0x73) pipe2(&(0x7f0000000240)={0xffffffffffffffff}, 0x0) readv(r7, &(0x7f0000000740)=[{&(0x7f0000000480)=""/215, 0xd7}], 0x1) close(r7) name_to_handle_at(r7, &(0x7f0000000080)='./file0\x00', &(0x7f0000000180)=@FILEID_INO32_GEN={0x8, 0x1, {0x7, 0x1}}, &(0x7f00000001c0), 0x1600) r8 = userfaultfd(0x801) munmap(&(0x7f0000800000/0x800000)=nil, 0x800000) ioctl$UFFDIO_API(r8, 0xc018aa3f, &(0x7f0000000040)={0xaa, 0x139}) ioctl$UFFDIO_MOVE(r8, 0xc028aa05, &(0x7f0000000000)={&(0x7f0000724000/0x2000)=nil, &(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x3}) setsockopt$inet_opts(r6, 0x0, 0x4, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, &(0x7f00000002c0)='team0\x00', 0x10) sendmsg$inet(r6, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xe0000000}, 0x0) r9 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$MRT6_ADD_MFC_PROXY(r9, 0x29, 0x48, 0x0, 0x0) 5.421141378s ago: executing program 1 (id=1214): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x7, 0x0, &(0x7f0000002380)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93d") syz_open_dev$dri(0x0, 0x200, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000140)=0x6) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0xffffffffffffff5f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000400)}, 0x10) sendmmsg$inet(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d9de14d9", 0x4}], 0x1}}], 0x1, 0x4000000) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622db833ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce28743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r8) r9 = syz_io_uring_setup(0x4a0, &(0x7f0000000400)={0x0, 0xe7a6, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r9, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r9, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 5.333586712s ago: executing program 6 (id=1215): setuid(0xee00) socket$inet6_udplite(0xa, 0x2, 0x88) prctl$PR_SET_MM_MAP(0x23, 0xe, &(0x7f0000000080)={&(0x7f0000ff7000/0x1000)=nil, &(0x7f0000ff1000/0xf000)=nil, &(0x7f0000ffc000/0x4000)=nil, &(0x7f0000ffc000/0x3000)=nil, &(0x7f0000ffd000/0x3000)=nil, &(0x7f0000ff8000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ffb000/0x3000)=nil, &(0x7f0000ff5000/0x1000)=nil, &(0x7f0000ff9000/0x3000)=nil, &(0x7f0000ffa000/0x2000)=nil, 0x0}, 0x68) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x24004045) r0 = io_uring_setup(0x2108, &(0x7f0000000280)={0x0, 0xc91d, 0x200, 0x3, 0x296}) r1 = io_uring_setup(0x9fd, &(0x7f0000000040)={0x0, 0x1c89f, 0xc000, 0x3, 0x20002f7, 0x0, r0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x12, 0x3, 0x0, &(0x7f0000000240)='syzkaller\x00', 0x80000000, 0xfffffffffffffda2, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)='/', 0x1}], 0x1, 0x0, 0x0, 0x2c}, 0x4000845) io_uring_enter(r1, 0x2219, 0x7721, 0x16, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(0xffffffffffffffff, 0x8914, &(0x7f0000000300)={'rose0\x00', 0x4000}) bind$inet6(r3, &(0x7f00000000c0)={0xa, 0x4e22, 0xa, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x34}}, 0x6}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[], 0x50) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000ac0)=ANY=[@ANYRESDEC=r2], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xfffffd77, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r7}, 0x10) io_setup(0x987, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) 5.300433597s ago: executing program 3 (id=1216): r0 = socket$l2tp(0x2, 0x2, 0x73) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x2, 0xfffff010}, {0x6}]}, 0x10) sendmmsg(r3, &(0x7f0000000180), 0x4000190, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r5, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r5, &(0x7f00000004c0)='W', 0x1, 0x4, &(0x7f0000000100)={0xa, 0x4e24, 0x3, @loopback, 0x8}, 0x1c) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000080)={0x67ad, 0x8000, 0x8000, 0x67, 0x8000, 0x4, 0xf37c, 0x62}, &(0x7f00000001c0)=0x20) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) connect$inet(r0, &(0x7f0000000200)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000900), 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(0x0, r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000040}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmsg$can_raw(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000005c0)=""/203, 0xcb}, {&(0x7f0000000440)=""/111, 0x6f}, {&(0x7f0000000740)=""/187, 0xbb}], 0x3, &(0x7f0000000180)=""/26, 0x1a}, 0x102) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r12 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r12, 0x6, 0x17, &(0x7f00000000c0), 0x4) sendmsg$NL80211_CMD_CONNECT(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) ioctl$sock_SIOCADDRT(r12, 0x890b, &(0x7f00000003c0)={0x0, @isdn={0x22, 0xc3, 0xd, 0xa, 0x3}, @l2tp={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x27}, 0x3}, @rc={0x1f, @any, 0xa}, 0xf98, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000140)='syzkaller0\x00', 0x3bbb, 0x6, 0x5}) syz_80211_inject_frame(0x0, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val, @void, @void, @void, @void, @void, @void}, 0x2e) 4.029443612s ago: executing program 5 (id=1217): madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) (async) r2 = syz_open_dev$sndctrl(&(0x7f0000000440), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_PCM_PREFER_SUBDEVICE(r2, 0x40045532, &(0x7f0000000040)) r3 = openat$audio(0xffffffffffffff9c, &(0x7f0000000080), 0x40000000048601, 0x0) r4 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x0, 0xa2c65) write$RDMA_USER_CM_CMD_CREATE_ID(r3, &(0x7f0000000500)={0x0, 0xfffffffffffffd83, 0xfa00, {0x0, 0x0}}, 0xfdbc) syz_usb_connect$cdc_ncm(0x0, 0x76, &(0x7f0000000b00)=ANY=[@ANYBLOB="12010000020000402505a1a44000010203010902"], 0x0) ioctl$SNDRV_PCM_IOCTL_SW_PARAMS(r4, 0xc0884113, &(0x7f00000000c0)={0x1, 0x0, 0x1fb, 0x10001, 0xfffffffffffffffe, 0x6, 0x4, 0x1fc, 0x9, 0x102002c, 0x49200000, 0x1}) ioctl$SNDRV_PCM_IOCTL_STATUS_EXT64(r4, 0xc0984124, &(0x7f0000000600)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8013, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8013, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x4000, &(0x7f0000000000)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}, {@xino_auto}]}) chdir(&(0x7f0000000140)='./bus\x00') (async) chdir(&(0x7f0000000140)='./bus\x00') creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) newfstatat(0xffffffffffffff9c, 0x0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0}, 0x1000) chown(&(0x7f00000003c0)='./file0\x00', r5, 0xee01) lsetxattr$system_posix_acl(&(0x7f0000000800)='./file0\x00', &(0x7f0000000840)='system.posix_acl_access\x00', &(0x7f0000000300)={{}, {}, [], {}, [], {0x10, 0x2}}, 0x24, 0x0) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) (async) creat(&(0x7f0000000ac0)='./file0\x00', 0x0) write$USERIO_CMD_SEND_INTERRUPT(0xffffffffffffffff, &(0x7f0000000140)={0x2, 0x1}, 0x2) mremap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mremap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x4000, 0x0, &(0x7f0000389000/0x4000)=nil) syz_open_dev$video4linux(0x0, 0x7, 0xc82) (async) syz_open_dev$video4linux(0x0, 0x7, 0xc82) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) (async) openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) 3.579275119s ago: executing program 1 (id=1218): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r2 = userfaultfd(0x801) ioctl$UFFDIO_API(r2, 0xc018aa3f, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x2, 0x4c831, 0xffffffffffffffff, 0x0) ioctl$UFFDIO_REGISTER(r2, 0xc020aa00, &(0x7f0000000040)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x5}) ioctl$UFFDIO_CONTINUE(r2, 0xc020aa07, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f00000001c0)=[{0x6, 0x0, 0x2, 0x2f906891}]}) mknodat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x8000, 0x103) r6 = openat$fuse(0xffffffffffffff9c, &(0x7f0000001180), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000000080), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r6}, 0x2c, {'rootmode', 0x3d, 0x8000}}) read$FUSE(r6, &(0x7f0000004280)={0x2020, 0x0, 0x0}, 0x2020) syz_fuse_handle_req(r6, &(0x7f00000062c0)="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", 0x2000, &(0x7f00000015c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)={0x10, 0xffffffffffffffda, 0x3ff, {0x0, 0xb}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) write$FUSE_INIT(r6, &(0x7f0000000300)={0x50, 0xfffffffffffffffe, r7, {0x7, 0x2b, 0x0, 0x10004004, 0x0, 0xfffe, 0x0, 0x20000002, 0x0, 0x0, 0x100}}, 0x50) r8 = openat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x470880, 0x28) close_range(r5, r6, 0x0) r9 = socket$alg(0x26, 0x5, 0x0) mount$9p_fd(0x0, &(0x7f00000000c0)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000480)={'trans=fd,', {'rfdno', 0x3d, r8}, 0x2c, {'wfdno', 0x3d, r9}}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-sse2\x00'}, 0x58) 3.577777711s ago: executing program 3 (id=1219): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) preadv(0xffffffffffffffff, 0x0, 0x0, 0x8, 0x2081) io_setup(0x200, &(0x7f00000010c0)) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NL80211_CMD_REGISTER_BEACONS(0xffffffffffffffff, &(0x7f0000003900)={0x0, 0x0, &(0x7f00000038c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="1c000000", @ANYRES16, @ANYBLOB="010007bd7000fddbdf255500000008000300", @ANYRES32], 0x1c}, 0x1, 0x0, 0x0, 0x40000a0}, 0x810) sendmsg$NL80211_CMD_GET_REG(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="00042bbd7000fcdbdf251f00000008000100740000dc909bdca700050092"], 0x24}, 0x1, 0x0, 0x0, 0x810}, 0x2200c800) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={{0x14}, [], {0x14}}, 0x28}}, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r5 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000300)='net/igmp6\x00') preadv(r5, &(0x7f0000002400)=[{&(0x7f0000001340)=""/4096, 0x1000}], 0x1, 0x39c5, 0x0) 2.218506205s ago: executing program 1 (id=1220): unshare(0x62040200) syz_usb_connect(0x0, 0x4a, &(0x7f0000000080)=ANY=[@ANYBLOB="120100005520f010402038b14201040000010902"], 0x0) r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r0, 0x29, 0x41, &(0x7f0000000440)=ANY=[@ANYBLOB="66696c74657200000000000000200000d000000000000000000000000000000004"], 0x68) 2.217600001s ago: executing program 0 (id=1221): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x4, 0x4, 0x6}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4000000, 0x3}, 0x48) (fail_nth: 15) 1.940974328s ago: executing program 0 (id=1222): io_uring_setup(0x1d48, &(0x7f0000000340)={0x0, 0xb140, 0x1000, 0x6, 0x196}) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x48) r0 = syz_open_dev$usbfs(&(0x7f0000000480), 0x77, 0x41341) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010", @ANYBLOB, @ANYRES32=0x0], 0x50) io_setup(0x8, &(0x7f0000000180)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x26, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000300)='GPL\x00', 0xffc0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000200)) ioctl$USBDEVFS_IOCTL(r0, 0xc0105512, &(0x7f0000000000)=@usbdevfs_connect) bind$rxrpc(0xffffffffffffffff, &(0x7f0000000000)=@in4={0x21, 0x4, 0x2, 0x10, {0x2, 0x0, @empty}}, 0x24) 1.732922103s ago: executing program 3 (id=1223): socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xc, 0x0, 0x0) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x0, 0x0, 0xfe, 0x0, 0xb49, 0x9, 0x8, 0x0, 0x3}, 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000040)='net/ip_vs\x00') preadv(r2, &(0x7f0000000380)=[{&(0x7f0000000080)=""/83, 0x53}], 0x1, 0xc9, 0x1) madvise(&(0x7f00005ce000/0x3000)=nil, 0x3000, 0xb) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40004) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x84) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f, 0xe0000000, 0x5e4b0422, 0x3, 0xffff, 0x5, 0x9, 0x0, 0x0, 0x80, 0x80000001}}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl(r5, 0x8b2a, &(0x7f0000000040)) fsopen(&(0x7f00000001c0)='zonefs\x00', 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) r6 = openat$khugepaged_scan(0xffffff9c, &(0x7f0000000200), 0x1, 0x0) write$khugepaged_scan(r6, &(0x7f0000000080), 0x8) r7 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x1) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0x4020ae46, 0x0) 1.36626459s ago: executing program 6 (id=1224): gettid() timer_create(0x2, &(0x7f00000014c0)={0x0, 0x21, 0x800000000004, @thr={&(0x7f0000000080)="f63a7b7bbecb02487f2a7771af76817906bc607efb3357b85a336e667339b81af9b5e5d9fb840376f31cd073506de3761b44f63f66b0bf5db6e2be52de53851886dd01eaef5e928ae6c87a289cc80eef61c16708e2af3a91a91bfea08b04fa0d7615b607c3e58f8227cf77baee6f1473a855be9702eed3383429a8c0e2f2338de2d2275e5a673a693b4352ffb7529688a12456091400d8e1edaadaaf8009a29cf7896454e05d22333d6b272e4897e79bf279fd9d457f631ea25f04de35b10c2652e9fb0932320d92dea19f6440d342198302", &(0x7f0000000000)="3f35964b3869706183e2ffeadadde4c52336e91173f958090ef6e717b6749beaee694247575a0931a327c3db774d51cf934c712773341edbad9936ba561a"}}, &(0x7f0000bbdffc)) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x3ed4, 0x5}) mprotect(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x4) r0 = syz_open_dev$dri(&(0x7f0000000180), 0xfffffffffffff9f3, 0x101080) ioctl$DRM_IOCTL_GET_MAP(r0, 0xc0286404, &(0x7f00000001c0)={&(0x7f0000395000/0x1000)=nil}) clock_gettime(0x0, &(0x7f00000002c0)) clock_gettime(0x0, &(0x7f0000000380)={0x0, 0x0}) timer_settime(0x0, 0x1, &(0x7f0000000280)={{0x0, 0x989680}, {r1, r2+10000000}}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = getpid() r5 = syz_pidfd_open(r4, 0x0) setns(r5, 0x24020000) r6 = syz_clone(0xb21e0000, 0x0, 0x0, 0x0, 0x0, 0x0) r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) mount(0x0, &(0x7f0000000140)='.\x00', &(0x7f0000000080)='proc\x00', 0x189, 0x0) mount(0x0, &(0x7f0000000080)='.\x00', &(0x7f0000000000)='proc\x00', 0x2200000, 0x0) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r8, 0x84, 0x11, &(0x7f00000000c0)={r9, 0xa}, 0x8) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) sendmsg$nl_route_sched(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=@gettaction={0x20, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}]}, 0x20}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000200)={r9, 0xff}, &(0x7f0000000240)=0x8) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x2, 0x3, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x6c, 0xa0}]}, 0x28}, 0x1, 0x7}, 0x0) get_mempolicy(0x0, 0x0, 0x203, &(0x7f0000394000/0x3000)=nil, 0x3) 842.085813ms ago: executing program 0 (id=1225): ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x1}}, './file0\x00'}) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000005c0), 0x4) r1 = fcntl$getown(r0, 0x9) ptrace$getregs(0xc, r1, 0x3, &(0x7f00000004c0)=""/186) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) setsockopt$IP_VS_SO_SET_DEL(r0, 0x0, 0x484, &(0x7f0000000640)={0x5d, @multicast1, 0x4e20, 0x4, 'wrr\x00', 0x8, 0x8, 0x43}, 0x2c) r2 = syz_io_uring_setup(0x3b, &(0x7f00000001c0)={0x0, 0x0, 0x10100, 0x0, 0x1}, &(0x7f0000000000), &(0x7f0000000100)) io_uring_register$IORING_UNREGISTER_PERSONALITY(r2, 0x1a, 0x20000028, 0x0) r3 = openat$vcs(0xffffffffffffff9c, &(0x7f00000007c0), 0x241, 0x0) pwrite64(r3, 0x0, 0x0, 0xdefd) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/pid_for_children\x00') syz_open_dev$evdev(0x0, 0x1, 0x2002) io_setup(0x6, &(0x7f0000001380)=0x0) r5 = syz_open_procfs(0x0, &(0x7f0000000200)='fd/3\x00') r6 = syz_open_dev$evdev(&(0x7f0000001380), 0x1, 0x20442) io_submit(r4, 0x2, &(0x7f0000000880)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x5, 0x7ff, r2, &(0x7f0000000740)="06e39511b6401331fe9b5704abe7baaaf7e7a6c619ecbc1d851aae804b35e21369cf59c67eaadacd0c9dfe2145c0ad2aa378f5e6271bd93bb40b6d219206378872a859e34a53d8f1d55bc45dd0873e57478191faa1d04c48028ed2eecfb8b4006936772e1170146f78ad", 0x6a, 0x57, 0x0, 0x1, r0}, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x2, 0x9, r5, &(0x7f0000000800)="6555db2811190fe3bbcffb48720f51f74d509f3918125d530322110b252a76405b40d9bee8e49d3cec3a0f87022ade1dddc8981316c8702b427cdbdaed73bdb68c7aac873bc1fb5e3f60b381403955e381a4680531044555d5024939a098e1b584b1c3dd175d1206fcf92f44f773c39dfa504ec7e2", 0x75, 0x7fffffffffffffff, 0x0, 0x3}]) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) write$evdev(r0, &(0x7f0000000440)=[{{0x0, 0xea60}, 0x12, 0x0, 0x2}, {{r7, r8/1000+60000}, 0x5, 0xddca, 0x6}, {{}, 0x17, 0x6, 0xc5}, {{}, 0x14, 0x3, 0x80000001}], 0x60) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r9, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r10 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x40200, 0x0) ioctl$IOMMU_IOAS_ALLOC(r10, 0x3b81, &(0x7f0000000400)={0xc, 0x0, 0x0}) ioctl$IOMMU_IOAS_COPY(r10, 0x3b83, &(0x7f0000000000)={0x28, 0x7, 0x0, r11, 0x7, 0xfffffffffffffffa, 0x3fff}) writev(r6, &(0x7f00000003c0)=[{&(0x7f0000000140)="34268a845dda8ddedec928950263bf71854ae3871628da9e67ecb1d262a5471a19427eee404d8b3565f786ca7b1c1203b6a3adbafe97b3eaa8c16f024b7cce74ef66dc5022defbc4e38f805394db87303651d3bfd4c6686d1effc5a4ba75bc41a47fcdb797bcef52661ddd7a14c949b156af", 0x72}, {&(0x7f0000000240)="5481979b4bc930c7a9ddd15c22cfa7a3d5fee883f46b8c186805ebcd3268f24e2840885e38f90dcf561087f1f8500e3bf238cc4d1cffc859cd52e531699b7c90cd6fd386c18fbfbefc11b654ad545d620777c878dcfdf91848cce85e66aa397343ebd9d487ece5bbffd1dce8aeebd717a267d932a0e7d6df4372ee0ee2cb6e77fb636466eb4731fc00cad3a06f91926f7ced5f23729f011b6103875ece9eed091dfa581d5bcd6f401ddb411b607d2886f8abeeab0f32bf90c0eb5b4858e4d1", 0xbf}, {&(0x7f00000001c0)="21b03835dd5fe64e5f12cbe17ab037a366c208ee6e67b26567e741ca4e4eac13bf70181c14f04f0295bf02c8ed", 0x2d}, {&(0x7f0000000300)="c9b7845dbd37a39079addf6546ac631a58a50b6ff1f414367dc052a9363903b1346391c2a8d58b525c9433489007ad24536e5263ee904a26e7b5ec95e6c81768fd375c888a4c5d3476c3832fe4627b4205c33717c69380bbd4291c7c341fc56c97d7f09386e8cf5b6cbe1d5efad7063d7f47ab3b9bcf4645deb0811eab5b32fd8c93b36017e97369d24c3fec22dd97d7adf5d1bc0ce5d8d016277395b5fc37495cec3ae91105e5ea049495ce4df80e5758594ea6", 0xb4}], 0x4) write$binfmt_misc(r9, &(0x7f0000000000), 0xd) unshare(0x6a040000) socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$UDMABUF_CREATE_LIST(r5, 0x40087543, &(0x7f0000000680)=ANY=[@ANYBLOB="0c0002000a6845080000004f81007ad03a5a332667ddfdf9970bdbc8a857ebbf68039c5a10758732fee741b4b7269d3005c1a33053070ef874cb2418130cd8abd2efa5b56d8351d51b7d85dab27052d3feb3e3b474dcc1689ee2724dee620d85e701526f75e5acfcc9a2", @ANYRES32=r5, @ANYBLOB="00000000004000000000000000f0ffffffffffff"]) 841.522832ms ago: executing program 5 (id=1226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="bbfbff030000000000006700000008000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x10) (async) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) (async, rerun: 32) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0xa, 0x8013, 0xfffffffe, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) (async) mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) (async) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) (async) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_sctp6_SCTP_NODELAY(0xffffffffffffffff, 0x84, 0x3, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_VLAN(r5, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x1c, r6, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x3}]}, 0x1c}}, 0x20008840) (async) prlimit64(0x0, 0xf, &(0x7f00000000c0)={0x8, 0xc00008b}, 0x0) (async, rerun: 32) sched_setscheduler(0x0, 0x1, 0x0) (rerun: 32) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r7, &(0x7f0000002000)=""/102400, 0x19000) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000100), 0x20802, 0x0) 813.302831ms ago: executing program 6 (id=1227): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x7, 0x4, 0x80, 0x1, 0x28}, 0x50) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xa, 0x31, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0xc00000)=nil, 0xc00304, 0x17) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_SIOCOUTQ(r1, 0x5411, &(0x7f0000000040)) arch_prctl$ARCH_MAP_VDSO_64(0x2003, 0xfffffffffffffff9) 716.627369ms ago: executing program 3 (id=1228): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FILTER(r2, 0x65, 0x7, 0x0, &(0x7f0000002380)) sched_setattr(0x0, &(0x7f0000000280)={0x38, 0x5, 0x8, 0x8001, 0x0, 0x9, 0x0, 0xfffffe0000000001, 0xfa11, 0xffffffff}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000180)={'vxcan1\x00'}) r3 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$DMA_HEAP_IOCTL_ALLOC(r3, 0xc0184800, &(0x7f0000000100)={0x20004, 0xffffffffffffffff, 0x80000}) ptrace$setregs(0xd, 0x0, 0x0, &(0x7f00000003c0)="18607651149d7b10b4024fbbdc08899b8f589df2dbb5d7a8d1b36cfab675cb3976ee8100e2878c9cfa178cac130eb046eda93d") syz_open_dev$dri(0x0, 0x200, 0x80000) ioctl$DMA_BUF_IOCTL_SYNC(r4, 0x40086200, &(0x7f0000000140)=0x6) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000200)=0xffffffffffffff5f) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x0, &(0x7f0000000400)}, 0x10) sendmmsg$inet(r6, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000300)="d9de14d9", 0x4}], 0x1}}], 0x1, 0x4000000) r8 = add_key$keyring(&(0x7f0000000340), &(0x7f0000000380), 0x0, 0x0, 0xffffffffffffffff) add_key(&(0x7f0000000040)='syzkaller\x00', &(0x7f0000000240)={'syz', 0x1}, &(0x7f0000000280)="dee7030022cf5c6c7bc31bd2599759fafa9e5e1dbac27b0426fc0299c41fb9b9761a1b44dac894f365ae68edf335abf35ec53d6751467ebd2c187491bcab2c8d34fec505fc8a14622db833ff9b054eb7e8a5bc4ab2719cb230328931deb95ef3fcafb1ce28743a93f4715976edec860ab49c3a4f51ab0124b50c3362201a307df03000", 0x83, r8) r9 = syz_io_uring_setup(0x4a0, &(0x7f0000000400)={0x0, 0xe7a6, 0x400, 0x3, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000480)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r10, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r10, r11, &(0x7f00000002c0)=@IORING_OP_MSG_RING={0x28, 0x40, 0x0, r9, 0x0, 0x0, 0x0, 0x3}) io_uring_enter(r9, 0x3d0e, 0x4c1, 0x43, 0x0, 0x0) 294.517392ms ago: executing program 6 (id=1229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000005"], 0x50) bpf$TOKEN_CREATE(0x24, &(0x7f0000000080)={0x0, r0}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRESOCT=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffff}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) mremap(&(0x7f0000000000/0x9000)=nil, 0x600600, 0x200000, 0x3, &(0x7f0000a00000/0x600000)=nil) 164.925541ms ago: executing program 0 (id=1230): r0 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000400)=[{0x6, 0x1, 0x2, 0x7fff7ffc}]}) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xc3) r2 = socket$netlink(0x10, 0x3, 0xf) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) (async) r3 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) (async) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) (async) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) (async) r4 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) fcntl$addseals(r3, 0x409, 0x9) writev(r4, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$MAP_CREATE(0x0, 0x0, 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x0) renameat2(0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00', r2, 0x0, 0x3) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) (async) r5 = openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000000), 0x1e3003, 0x0) epoll_create1(0x0) (async) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000300)) ioctl$KVM_CAP_MSR_PLATFORM_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)) (async) ioctl$KVM_CAP_MSR_PLATFORM_INFO(0xffffffffffffffff, 0x4068aea3, &(0x7f0000000440)) ioctl$SNDCTL_SEQ_RESET(r5, 0x5100) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000004140)=ANY=[@ANYBLOB="02000000040000", @ANYBLOB="000000000000000018004a28e495d6e91be6fb1d9a20ff730e5fe4621b8768b5fa24cef6efd89d5718fc89b68d3ccbb4ca7dc7d615408663367bd98415", @ANYBLOB, @ANYBLOB], 0x50) r7 = syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(r7, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) socket$netlink(0x10, 0x3, 0x5) ioctl$VIDIOC_QUERYMENU(0xffffffffffffffff, 0xc008561c, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_DELLINK(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)={0x18, 0x1404, 0x1, 0x70bd2d, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x671ec167a4b72164}, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000000)={'lo\x00', &(0x7f0000000080)=@ethtool_per_queue_op={0x4b, 0xe, [0x2, 0xffffffb1, 0x81, 0xd754, 0x3, 0x0, 0xb, 0x2, 0x63c3, 0x4, 0x0, 0x4, 0x5, 0x7fff, 0x80000001, 0xfffeffff, 0x6, 0x2, 0xfffffffa, 0x23a, 0x612, 0x9, 0x7, 0x8, 0x8, 0x9, 0x4, 0x100, 0x1000, 0x990, 0x8, 0x101, 0x6, 0xffffffff, 0xef04, 0x541834ba, 0xfffffff7, 0x7823, 0x3, 0x100, 0xe, 0x2, 0x2, 0x10000, 0xffffff62, 0xd, 0x5, 0x9, 0x3, 0x9, 0x2, 0x85c, 0x800, 0x7, 0x2, 0x4, 0x5, 0xe, 0x8, 0x7, 0x412, 0xfd5c, 0x5, 0x95d, 0x81, 0x9, 0x9c73, 0x7, 0x2, 0x0, 0xfff, 0x5, 0x10001, 0x8ba, 0x10, 0x6, 0x81, 0xf, 0x6, 0x7fff, 0x6, 0x1, 0x4ed, 0x5f, 0x3, 0x164, 0xc2d3, 0x0, 0xd9, 0xb69b, 0xa50, 0x3ff, 0x6, 0x10001, 0x2, 0x1, 0x8, 0x7, 0x8e1, 0x7f, 0xc, 0x15, 0x2, 0x8, 0x2, 0x3, 0x7fff, 0x10000, 0x7db, 0x1, 0x6, 0xc, 0x6, 0x1, 0x834, 0x718, 0x10000, 0x4, 0x1, 0x1, 0x2, 0x2, 0x3, 0x0, 0x5, 0x4, 0x400, 0x3], "4ac27da3bd06cf09755c3e6190245533bbfe04a151b6ec171881f0ec95e51187d9443cd94e536dc57560267320b9c7a4d9712cff81d545c364d1ee789fb6198fe91ee5f675985fea5bdbd0a1f7d2d5ce732b077a6a5ab5f337c5888952bd09fedb5c4c48eda41d0a5022213f2cb26b9b52ad420514066b2e3b31635193c051d2e7ba18bacdde065fc55d6e02b754b230bf685b5025fcde65250c9404519cac688cea03a6"}}) close_range(r0, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) 0s ago: executing program 6 (id=1231): r0 = openat$selinux_avc_hash_stats(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) timer_create(0x0, &(0x7f00000000c0)={0x0, 0x21, 0x2, @thr={0x0, 0x0}}, &(0x7f0000000300)=0x0) fcntl$lock(0xffffffffffffffff, 0x6, &(0x7f0000000040)={0x0, 0x0, 0x60d3, 0x5}) mprotect(&(0x7f0000000000/0xf000)=nil, 0xf000, 0x1) timer_settime(r1, 0x1, &(0x7f0000000040)={{}, {0x0, 0x989680}}, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0xca352c92cb699c71, 0xffffffffffffffff, 0xd0a55000) io_uring_register$IORING_REGISTER_BUFFERS(0xffffffffffffffff, 0x23, &(0x7f0000000640), 0x0) read$FUSE(r0, 0x0, 0x0) kernel console output (not intermixed with test programs): 252.308978][ T5877] usb 7-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 252.322930][ T5877] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 252.335722][ T5877] usb 7-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 252.351174][ T5877] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 252.364956][ T5877] usb 7-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 252.382185][ T5877] usb 7-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 252.401298][ T5877] usb 7-1: config 168 interface 0 has no altsetting 0 [ 252.457373][ T5877] usb 7-1: string descriptor 0 read error: -22 [ 252.482151][ T5877] usb 7-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 252.496216][ T5877] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.504513][ T42] usb 6-1: new full-speed USB device number 8 using dummy_hcd [ 252.602473][ T5877] adutux 7-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 252.724518][ T42] usb 6-1: config 0 has an invalid interface number: 235 but max is 0 [ 252.733400][ T42] usb 6-1: config 0 has no interface number 0 [ 252.799331][ T42] usb 6-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid wMaxPacketSize 0 [ 252.851326][ T42] usb 6-1: config 0 interface 235 has no altsetting 0 [ 252.862082][ T42] usb 6-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 252.871767][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 252.879978][ T42] usb 6-1: Product: syz [ 252.884240][ T42] usb 6-1: Manufacturer: syz [ 252.889856][ T42] usb 6-1: SerialNumber: syz [ 252.933933][ T42] usb 6-1: config 0 descriptor?? [ 252.945246][ T42] keyspan 6-1:0.235: Keyspan 1 port adapter converter detected [ 252.966332][ T42] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 87 [ 252.978536][ T42] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 7 [ 253.020674][ T42] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 81 [ 253.031299][ T42] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 1 [ 253.052620][ T42] keyspan 6-1:0.235: found no endpoint descriptor for endpoint 85 [ 253.111785][ T42] usb 6-1: Keyspan 1 port adapter converter now attached to ttyUSB0 [ 253.136734][ T5877] usb 7-1: USB disconnect, device number 9 [ 253.148178][ T42] usb 6-1: USB disconnect, device number 8 [ 253.289930][ T42] keyspan_1 ttyUSB0: Keyspan 1 port adapter converter now disconnected from ttyUSB0 [ 253.365108][ T42] keyspan 6-1:0.235: device disconnected [ 253.973262][ T8381] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 254.806585][ T30] audit: type=1400 audit(1760114893.379:501): avc: denied { setopt } for pid=8392 comm="syz.1.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.078744][ T30] audit: type=1400 audit(1760114893.379:502): avc: denied { write } for pid=8392 comm="syz.1.573" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 255.431089][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.437490][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 255.899945][ T8401] rdma_rxe: rxe_newlink: failed to add bond0 [ 257.003484][ T8416] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 257.749666][ T8425] vxfs: unable to read disk superblock at 1 [ 257.761056][ T8425] vxfs: unable to read disk superblock at 8 [ 257.767050][ T8425] vxfs: can't find superblock. [ 258.507447][ T5961] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 258.545961][ T8436] netlink: 24 bytes leftover after parsing attributes in process `syz.1.585'. [ 258.577956][ T8436] netlink: 4 bytes leftover after parsing attributes in process `syz.1.585'. [ 258.658760][ T5961] usb 7-1: Using ep0 maxpacket: 8 [ 258.666968][ T5961] usb 7-1: config 0 has an invalid interface number: 56 but max is 0 [ 258.690337][ T5961] usb 7-1: config 0 has no interface number 0 [ 258.707601][ T5961] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 258.732547][ T5961] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 258.742146][ T5961] usb 7-1: Product: syz [ 258.745245][ T30] audit: type=1400 audit(1760114897.319:503): avc: denied { getopt } for pid=8437 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 258.766543][ T5961] usb 7-1: Manufacturer: syz [ 258.771860][ T5961] usb 7-1: SerialNumber: syz [ 258.782485][ T5961] usb 7-1: config 0 descriptor?? [ 258.797280][ T5961] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 258.976348][ T5961] pctv452e: pctv452e_power_ctrl: 1 [ 258.976348][ T5961] [ 258.983996][ T5961] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 258.983996][ T5961] [ 259.001541][ T5961] dvb-usb: bulk message failed: -22 (5/0) [ 259.370643][ T30] audit: type=1400 audit(1760114897.539:504): avc: denied { getopt } for pid=8438 comm="syz.1.586" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 259.681188][ T5961] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 259.691412][ T30] audit: type=1400 audit(1760114897.729:505): avc: denied { bind } for pid=8437 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 259.715207][ T5961] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 259.751616][ T5961] usb 7-1: media controller created [ 259.759719][ T30] audit: type=1400 audit(1760114897.729:506): avc: denied { write } for pid=8437 comm="syz.3.587" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 259.769125][ T5961] dvb-usb: bulk message failed: -22 (8/0) [ 259.791050][ T8429] tipc: Enabling of bearer rejected, failed to enable media [ 259.803856][ T8429] syzkaller0: entered promiscuous mode [ 259.826174][ T8429] syzkaller0: entered allmulticast mode [ 259.831173][ T5961] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 259.874552][ T5961] dvb-usb: MAC address reading failed. [ 259.935624][ T5961] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 260.228232][ T5961] DVB: Unable to find symbol stb0899_attach() [ 260.235180][ T5961] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 260.253441][ T30] audit: type=1400 audit(1760114898.819:507): avc: denied { bind } for pid=8452 comm="syz.5.591" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 260.289792][ T30] audit: type=1400 audit(1760114898.859:508): avc: denied { read } for pid=8452 comm="syz.5.591" path="socket:[20782]" dev="sockfs" ino=20782 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 260.341582][ T5961] rc_core: IR keymap rc-tt-1500 not found [ 260.360223][ T5961] Registered IR keymap rc-empty [ 260.371850][ T8453] llcp: llcp_sock_recvmsg: Recv datagram failed state 3 -6 0 [ 260.374567][ T5961] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 260.415940][ T5961] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input13 [ 260.440522][ T5961] dvb-usb: schedule remote query interval to 100 msecs. [ 260.455837][ T5961] pctv452e: pctv452e_power_ctrl: 0 [ 260.455837][ T5961] [ 260.480476][ T5961] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 260.525922][ T5961] usb 7-1: USB disconnect, device number 10 [ 260.573239][ T5956] dvb-usb: bulk message failed: -22 (4/0) [ 260.603169][ T5956] dvb-usb: error -22 while querying for an remote control event. [ 260.620380][ T8462] netlink: 'syz.5.592': attribute type 1 has an invalid length. [ 260.780091][ T8462] 8021q: adding VLAN 0 to HW filter on device bond1 [ 260.790566][ T5961] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 261.174767][ T8471] netlink: 'syz.6.594': attribute type 10 has an invalid length. [ 261.193760][ T8471] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.202393][ T8471] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.219620][ T8471] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.226852][ T8471] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.235375][ T8471] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.242610][ T8471] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.272410][ T8471] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 261.278522][ T8473] netlink: 4 bytes leftover after parsing attributes in process `syz.6.594'. [ 261.403295][ T8473] bridge_slave_1: left allmulticast mode [ 261.421000][ T5961] IPVS: starting estimator thread 0... [ 261.423605][ T8473] bridge_slave_1: left promiscuous mode [ 261.456062][ T8473] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.506776][ T8473] bridge_slave_0: left allmulticast mode [ 261.528971][ T8477] IPVS: using max 40 ests per chain, 96000 per kthread [ 261.538706][ T8473] bridge_slave_0: left promiscuous mode [ 261.546252][ T8473] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.630628][ T8473] bond0: (slave bridge0): Releasing backup interface [ 264.237950][ T8522] rdma_rxe: rxe_newlink: failed to add bond0 [ 264.889903][ T5956] usb 6-1: new high-speed USB device number 9 using dummy_hcd [ 264.980033][ T30] audit: type=1326 audit(1760114903.549:509): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 265.095723][ T30] audit: type=1326 audit(1760114903.549:510): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 265.131028][ T5956] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 265.290045][ T5956] usb 6-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 265.435107][ T30] audit: type=1326 audit(1760114903.549:511): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=83 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 265.544872][ T30] audit: type=1326 audit(1760114903.549:512): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 265.552589][ T5956] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 265.571232][ T30] audit: type=1326 audit(1760114903.549:513): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 265.646123][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 265.682256][ T5956] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 265.691238][ T5956] usb 6-1: invalid MIDI out EP 0 [ 265.721800][ T30] audit: type=1326 audit(1760114903.559:514): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=85 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 265.746552][ T30] audit: type=1326 audit(1760114903.559:515): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 265.773401][ T30] audit: type=1326 audit(1760114903.559:516): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=4 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 265.850928][ T30] audit: type=1326 audit(1760114903.559:517): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 265.892869][ T5956] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 265.908909][ T24] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 265.935889][ T30] audit: type=1326 audit(1760114903.559:518): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=203 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 265.972033][ T8547] netlink: 32 bytes leftover after parsing attributes in process `syz.0.612'. [ 266.040589][ T30] audit: type=1326 audit(1760114903.559:519): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 266.080813][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 266.093553][ T24] usb 4-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 266.094830][ T30] audit: type=1326 audit(1760114903.559:520): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8528 comm="syz.1.608" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4c2df8eec9 code=0x7ffc0000 [ 266.138552][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.155615][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.180256][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.185432][ T24] usb 4-1: Product: syz [ 266.189405][ T8551] kernel profiling enabled (shift: 63) [ 266.192828][ T24] usb 4-1: Manufacturer: syz [ 266.197911][ T8551] profiling shift: 63 too large [ 266.218473][ T24] usb 4-1: SerialNumber: syz [ 266.244990][ T24] usb 4-1: config 0 descriptor?? [ 266.255547][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 266.269056][ T24] usb 4-1: setting power ON [ 266.273869][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 266.435641][ T8559] netlink: 8 bytes leftover after parsing attributes in process `syz.1.618'. [ 266.453100][ T8525] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 266.466147][ T8525] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 266.475335][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 266.577168][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 266.583722][ T8543] dvb-usb: bulk message failed: -22 (3/0) [ 266.630851][ T8543] dvb-usb: bulk message failed: -22 (4/0) [ 266.636679][ T8543] cxusb: i2c read failed [ 266.667835][ T24] usb 4-1: media controller created [ 266.675216][ T5956] usb 6-1: USB disconnect, device number 9 [ 266.763874][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 267.055980][ T24] usb 4-1: selecting invalid altsetting 6 [ 267.066589][ T24] usb 4-1: digital interface selection failed (-22) [ 267.073510][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 267.084801][ T24] usb 4-1: setting power OFF [ 267.090710][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 267.096619][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 267.121297][ T24] (NULL device *): no alternate interface [ 267.254628][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 267.363137][ T24] usb 4-1: USB disconnect, device number 17 [ 267.837783][ T8576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.621'. [ 268.458190][ T8591] netlink: 'syz.6.626': attribute type 3 has an invalid length. [ 269.493682][ T8598] netlink: 20 bytes leftover after parsing attributes in process `syz.0.629'. [ 270.088618][ T8608] comedi comedi1: s526: I/O port conflict (0x802f00,64) [ 270.109353][ T24] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 270.199729][ T8612] ucma_write: process 179 (syz.6.633) changed security contexts after opening file descriptor, this is not allowed. [ 270.242978][ T24] usb 6-1: device descriptor read/64, error -71 [ 270.646811][ T8619] netlink: 48 bytes leftover after parsing attributes in process `syz.0.634'. [ 271.548028][ T24] usb 6-1: new high-speed USB device number 11 using dummy_hcd [ 272.319066][ T24] usb 6-1: device descriptor read/64, error -71 [ 272.823023][ T24] usb usb6-port1: attempt power cycle [ 272.891569][ T8629] No such timeout policy "syz1" [ 273.196320][ T8644] netlink: 8 bytes leftover after parsing attributes in process `syz.1.642'. [ 274.564766][ T8671] netlink: 32 bytes leftover after parsing attributes in process `syz.6.652'. [ 274.593726][ T8671] netlink: 4 bytes leftover after parsing attributes in process `syz.6.652'. [ 275.170825][ T30] kauditd_printk_skb: 43 callbacks suppressed [ 275.170842][ T30] audit: type=1400 audit(1760114913.389:564): avc: denied { write } for pid=8666 comm="syz.3.650" path="socket:[22045]" dev="sockfs" ino=22045 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 275.826177][ T30] audit: type=1400 audit(1760114914.399:565): avc: denied { map } for pid=8690 comm="syz.0.659" path="socket:[22537]" dev="sockfs" ino=22537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 275.851636][ T30] audit: type=1400 audit(1760114914.399:566): avc: denied { read accept } for pid=8690 comm="syz.0.659" path="socket:[22537]" dev="sockfs" ino=22537 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 275.994465][ T24] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 276.119147][ T8701] netlink: 48 bytes leftover after parsing attributes in process `syz.1.660'. [ 276.148902][ T24] usb 6-1: Using ep0 maxpacket: 16 [ 277.062154][ T24] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 277.131752][ T24] usb 6-1: config 0 has no interfaces? [ 277.163996][ T24] usb 6-1: New USB device found, idVendor=0fe6, idProduct=9800, bcdDevice=d1.9a [ 277.640617][ T24] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 277.672751][ T24] usb 6-1: Product: syz [ 277.747394][ T24] usb 6-1: Manufacturer: syz [ 277.759679][ T24] usb 6-1: SerialNumber: syz [ 277.856161][ T24] usb 6-1: config 0 descriptor?? [ 279.204860][ T8719] fuse: Unknown parameter 'grgup_id' [ 279.297800][ T30] audit: type=1400 audit(1760114917.819:567): avc: denied { write } for pid=8718 comm="syz.1.664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 279.332746][ T8719] tipc: Enabling of bearer rejected, failed to enable media [ 279.597839][ T30] audit: type=1400 audit(1760114918.169:568): avc: denied { write } for pid=8730 comm="syz.6.667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 279.651139][ T24] usb 6-1: USB disconnect, device number 13 [ 280.298720][ T24] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 281.079483][ T24] usb 7-1: Using ep0 maxpacket: 16 [ 281.139308][ T24] usb 7-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 281.291538][ T24] usb 7-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 281.706501][ T24] usb 7-1: Product: syz [ 281.725458][ T24] usb 7-1: Manufacturer: syz [ 281.750665][ T24] usb 7-1: SerialNumber: syz [ 281.784643][ T24] usb 7-1: config 0 descriptor?? [ 283.411870][ T5961] usb 7-1: USB disconnect, device number 11 [ 283.449666][ T8788] tipc: Started in network mode [ 283.454594][ T8788] tipc: Node identity 4, cluster identity 4711 [ 283.460958][ T8788] tipc: Node number set to 4 [ 283.649930][ T5877] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 283.900102][ T5877] usb 4-1: Using ep0 maxpacket: 32 [ 283.917451][ T30] audit: type=1400 audit(1760114922.489:569): avc: denied { read write } for pid=8789 comm="syz.6.682" name="loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 283.945454][ T5877] usb 4-1: config 0 has an invalid interface number: 132 but max is 0 [ 283.982504][ T5877] usb 4-1: config 0 has no interface number 0 [ 284.020567][ T30] audit: type=1400 audit(1760114922.519:570): avc: denied { open } for pid=8789 comm="syz.6.682" path="/dev/loop-control" dev="devtmpfs" ino=646 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:loop_control_device_t tclass=chr_file permissive=1 [ 284.058436][ T5877] usb 4-1: config 0 interface 132 altsetting 0 endpoint 0x82 has invalid wMaxPacketSize 0 [ 284.114957][ T5877] usb 4-1: New USB device found, idVendor=0413, idProduct=6023, bcdDevice=ec.e5 [ 284.130423][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.177219][ T5877] usb 4-1: Product: syz [ 284.195960][ T5877] usb 4-1: Manufacturer: syz [ 284.214125][ T5877] usb 4-1: SerialNumber: syz [ 284.279860][ T5877] usb 4-1: config 0 descriptor?? [ 284.326875][ T5877] em28xx 4-1:0.132: New device syz syz @ 480 Mbps (0413:6023, interface 132, class 132) [ 284.368923][ T5877] em28xx 4-1:0.132: Video interface 132 found: [ 285.038430][ T5877] em28xx 4-1:0.132: unknown em28xx chip ID (0) [ 285.237499][ T36] nci: nci_rsp_packet: unsupported rsp opcode 0xf09 [ 286.049644][ T8824] netlink: 'syz.6.689': attribute type 10 has an invalid length. [ 286.058184][ T8824] batman_adv: batadv0: Adding interface: wlan0 [ 286.164538][ T8824] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 286.759902][ T8824] batman_adv: batadv0: Interface activated: wlan0 [ 287.038880][ T8787] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 287.135806][ T5877] em28xx 4-1:0.132: failed to trigger read from i2c address 0xa0 (error=-5) [ 287.177004][ T5877] em28xx 4-1:0.132: board has no eeprom [ 287.261765][ T5877] em28xx 4-1:0.132: Identified as Leadtek Winfast USB II (card=7) [ 287.318978][ T5877] em28xx 4-1:0.132: analog set to bulk mode. [ 287.326138][ T8836] netlink: 'syz.3.693': attribute type 1 has an invalid length. [ 287.502656][ T5884] em28xx 4-1:0.132: Registering V4L2 extension [ 287.557435][ T5877] usb 4-1: USB disconnect, device number 18 [ 287.630175][ T5877] em28xx 4-1:0.132: Disconnecting em28xx [ 287.663859][ T8846] overlayfs: failed to resolve './file1/file0': -2 [ 287.679414][ T8836] 8021q: adding VLAN 0 to HW filter on device bond3 [ 287.770880][ T8843] veth3: entered promiscuous mode [ 287.803205][ T8843] bond3: (slave veth3): Enslaving as an active interface with a down link [ 288.047487][ T8836] bond3: (slave vlan2): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 288.314106][ T5884] em28xx 4-1:0.132: Config register raw data: 0xffffffed [ 288.345939][ T5884] em28xx 4-1:0.132: AC97 chip type couldn't be determined [ 288.358967][ T5884] em28xx 4-1:0.132: No AC97 audio processor [ 288.431504][ T5884] usb 4-1: Decoder not found [ 288.438150][ T5884] em28xx 4-1:0.132: failed to create media graph [ 288.518698][ T5884] em28xx 4-1:0.132: V4L2 device video103 deregistered [ 288.560180][ T5884] em28xx 4-1:0.132: Remote control support is not available for this card. [ 288.612272][ T5877] em28xx 4-1:0.132: Closing input extension [ 288.681173][ T5877] em28xx 4-1:0.132: Freeing device [ 289.279712][ T8876] team0 (unregistering): Port device team_slave_0 removed [ 289.750164][ C0] wlan0: beacon TX faster than countdown (channel/color switch) completion [ 290.221836][ T8876] team0 (unregistering): Port device team_slave_1 removed [ 291.199057][ T8897] syzkaller1: entered promiscuous mode [ 291.204718][ T8897] syzkaller1: entered allmulticast mode [ 291.318476][ T8902] IPv6: addrconf: prefix option has invalid lifetime [ 291.852309][ T30] audit: type=1400 audit(1760114930.429:571): avc: denied { setopt } for pid=8898 comm="syz.6.710" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 291.948970][ T30] audit: type=1400 audit(1760114930.429:572): avc: denied { ioctl } for pid=8898 comm="syz.6.710" path="socket:[22338]" dev="sockfs" ino=22338 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 293.275692][ T8917] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 294.365524][ T30] audit: type=1400 audit(1760114932.836:573): avc: denied { write } for pid=8933 comm="syz.5.720" path="socket:[23049]" dev="sockfs" ino=23049 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 296.050299][ T8957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.725'. [ 296.060309][ T30] audit: type=1400 audit(1760114934.606:574): avc: denied { read } for pid=8949 comm="syz.1.724" path="socket:[23097]" dev="sockfs" ino=23097 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 296.613624][ T8959] netlink: 88 bytes leftover after parsing attributes in process `syz.6.728'. [ 296.655552][ T8966] FAULT_INJECTION: forcing a failure. [ 296.655552][ T8966] name failslab, interval 1, probability 0, space 0, times 0 [ 296.657869][ T8969] netlink: 176 bytes leftover after parsing attributes in process `syz.5.725'. [ 296.683866][ T30] audit: type=1400 audit(1760114935.226:575): avc: denied { connect } for pid=8954 comm="syz.5.725" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 296.712221][ T8966] CPU: 1 UID: 0 PID: 8966 Comm: syz.3.729 Not tainted syzkaller #0 PREEMPT(full) [ 296.712247][ T8966] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 296.712258][ T8966] Call Trace: [ 296.712264][ T8966] [ 296.712270][ T8966] dump_stack_lvl+0x16c/0x1f0 [ 296.712302][ T8966] should_fail_ex+0x512/0x640 [ 296.712328][ T8966] ? __kmalloc_node_track_caller_noprof+0xcb/0x8a0 [ 296.712350][ T8966] should_failslab+0xc2/0x120 [ 296.712374][ T8966] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 296.712395][ T8966] ? cond_bools_copy+0x45/0xf0 [ 296.712414][ T8966] ? rcu_is_watching+0x12/0xc0 [ 296.712441][ T8966] ? kmemdup_noprof+0x29/0x60 [ 296.712465][ T8966] kmemdup_noprof+0x29/0x60 [ 296.712490][ T8966] cond_bools_copy+0x45/0xf0 [ 296.712512][ T8966] hashtab_duplicate+0x242/0x5d0 [ 296.712529][ T8966] ? __pfx_cond_bools_copy+0x10/0x10 [ 296.712555][ T8966] ? __pfx_cond_bools_destroy+0x10/0x10 [ 296.712579][ T8966] cond_policydb_dup+0x155/0x750 [ 296.712607][ T8966] ? __asan_memcpy+0x3c/0x60 [ 296.712636][ T8966] security_set_bools+0x13f/0x6c0 [ 296.712663][ T8966] ? sel_commit_bools_write+0x25c/0x420 [ 296.712690][ T8966] sel_commit_bools_write+0x36e/0x420 [ 296.712713][ T8966] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 296.712745][ T8966] ? __pfx_sel_commit_bools_write+0x10/0x10 [ 296.712770][ T8966] vfs_write+0x2a0/0x11d0 [ 296.712792][ T8966] ? __pfx_vfs_write+0x10/0x10 [ 296.712806][ T8966] ? find_held_lock+0x2b/0x80 [ 296.712828][ T8966] ? __fget_files+0x204/0x3c0 [ 296.712849][ T8966] ? __fget_files+0x20e/0x3c0 [ 296.712864][ T8966] ? __fget_files+0x180/0x3c0 [ 296.712888][ T8966] __x64_sys_pwrite64+0x1eb/0x250 [ 296.712905][ T8966] ? __pfx___x64_sys_pwrite64+0x10/0x10 [ 296.712929][ T8966] do_syscall_64+0xcd/0xfa0 [ 296.712955][ T8966] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 296.712972][ T8966] RIP: 0033:0x7f5749b8eec9 [ 296.712987][ T8966] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 296.713004][ T8966] RSP: 002b:00007f574aaff038 EFLAGS: 00000246 ORIG_RAX: 0000000000000012 [ 296.713021][ T8966] RAX: ffffffffffffffda RBX: 00007f5749de5fa0 RCX: 00007f5749b8eec9 [ 296.713032][ T8966] RDX: 0000000000000001 RSI: 0000200000000080 RDI: 0000000000000007 [ 296.713042][ T8966] RBP: 00007f574aaff090 R08: 0000000000000000 R09: 0000000000000000 [ 296.713053][ T8966] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 296.713063][ T8966] R13: 00007f5749de6038 R14: 00007f5749de5fa0 R15: 00007fff8aadb1b8 [ 296.713088][ T8966] [ 296.970917][ C1] vkms_vblank_simulate: vblank timer overrun [ 297.368961][ T8969] netlink: 48 bytes leftover after parsing attributes in process `syz.5.725'. [ 297.489435][ T8969] netlink: 'syz.5.725': attribute type 33 has an invalid length. [ 297.497226][ T8969] netlink: 152 bytes leftover after parsing attributes in process `syz.5.725'. [ 297.906132][ T8987] netlink: 48 bytes leftover after parsing attributes in process `syz.6.731'. [ 299.463556][ T8997] fuse: Bad value for 'user_id' [ 299.468504][ T8997] fuse: Bad value for 'user_id' [ 299.482350][ T8996] fuse: Bad value for 'user_id' [ 299.487278][ T8996] fuse: Bad value for 'user_id' [ 301.077775][ T9016] FAULT_INJECTION: forcing a failure. [ 301.077775][ T9016] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 301.096650][ T9016] CPU: 1 UID: 0 PID: 9016 Comm: syz.3.738 Not tainted syzkaller #0 PREEMPT(full) [ 301.096676][ T9016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 301.096687][ T9016] Call Trace: [ 301.096693][ T9016] [ 301.096699][ T9016] dump_stack_lvl+0x16c/0x1f0 [ 301.096731][ T9016] should_fail_ex+0x512/0x640 [ 301.096761][ T9016] _copy_from_user+0x2e/0xd0 [ 301.096780][ T9016] copy_msghdr_from_user+0x98/0x160 [ 301.096814][ T9016] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 301.096846][ T9016] ? kfree+0x252/0x6d0 [ 301.096867][ T9016] ? __lock_acquire+0x62e/0x1ce0 [ 301.096901][ T9016] ___sys_recvmsg+0xdb/0x1a0 [ 301.096927][ T9016] ? __pfx____sys_recvmsg+0x10/0x10 [ 301.096967][ T9016] ? __pfx___might_resched+0x10/0x10 [ 301.096995][ T9016] do_recvmmsg+0x2fe/0x750 [ 301.097024][ T9016] ? __pfx_do_recvmmsg+0x10/0x10 [ 301.097054][ T9016] ? __mutex_unlock_slowpath+0x161/0x7b0 [ 301.097078][ T9016] ? __fget_files+0x20e/0x3c0 [ 301.097101][ T9016] __x64_sys_recvmmsg+0x22a/0x280 [ 301.097127][ T9016] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 301.097160][ T9016] do_syscall_64+0xcd/0xfa0 [ 301.097194][ T9016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 301.097212][ T9016] RIP: 0033:0x7f5749b8eec9 [ 301.097228][ T9016] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 301.097245][ T9016] RSP: 002b:00007f574aade038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 301.097261][ T9016] RAX: ffffffffffffffda RBX: 00007f5749de6090 RCX: 00007f5749b8eec9 [ 301.097273][ T9016] RDX: 0000000000000a0d RSI: 00002000000066c0 RDI: 0000000000000003 [ 301.097283][ T9016] RBP: 00007f574aade090 R08: 0000000000000000 R09: 0000000000000000 [ 301.097293][ T9016] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 301.097303][ T9016] R13: 00007f5749de6128 R14: 00007f5749de6090 R15: 00007fff8aadb1b8 [ 301.097327][ T9016] [ 301.288765][ C1] vkms_vblank_simulate: vblank timer overrun [ 301.442027][ T5884] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 301.474532][ T9023] program syz.5.742 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 301.853851][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 302.428422][ T5884] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 302.619096][ T24] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 302.654146][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 302.750725][ T5884] usb 2-1: config 0 descriptor?? [ 302.794241][ T5884] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 302.808857][ T24] usb 4-1: Using ep0 maxpacket: 8 [ 302.820327][ T24] usb 4-1: config 0 has an invalid interface number: 96 but max is 0 [ 302.828682][ T24] usb 4-1: config 0 has no interface number 0 [ 302.834815][ T24] usb 4-1: config 0 interface 96 altsetting 3 endpoint 0x88 has an invalid bInterval 254, changing to 11 [ 302.851995][ T24] usb 4-1: config 0 interface 96 has no altsetting 0 [ 302.863610][ T24] usb 4-1: New USB device found, idVendor=0b57, idProduct=2a8d, bcdDevice=33.74 [ 302.867445][ T9042] input: syz0 as /devices/virtual/input/input14 [ 302.911662][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 302.928899][ T24] usb 4-1: Product: syz [ 302.935739][ T30] audit: type=1400 audit(1760114941.506:576): avc: denied { ioctl } for pid=9044 comm="syz.6.750" path="socket:[23724]" dev="sockfs" ino=23724 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 302.948740][ T24] usb 4-1: Manufacturer: syz [ 302.967053][ T24] usb 4-1: SerialNumber: syz [ 302.984082][ T24] usb 4-1: config 0 descriptor?? [ 303.812900][ T5884] gspca_sonixj: reg_r err -110 [ 303.831717][ T5884] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 304.262240][ T9060] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9060 comm=syz.5.755 [ 304.461380][ T30] audit: type=1326 audit(1760114943.036:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b338eec9 code=0x7ffc0000 [ 304.530651][ T30] audit: type=1326 audit(1760114943.036:578): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=155 compat=0 ip=0x7f89b338eec9 code=0x7ffc0000 [ 304.606562][ T30] audit: type=1326 audit(1760114943.036:579): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b338eec9 code=0x7ffc0000 [ 304.630687][ T30] audit: type=1326 audit(1760114943.036:580): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f89b338eec9 code=0x7ffc0000 [ 304.656396][ T30] audit: type=1326 audit(1760114943.036:581): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b338eec9 code=0x7ffc0000 [ 304.680568][ T30] audit: type=1326 audit(1760114943.036:582): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7f89b338eec9 code=0x7ffc0000 [ 304.704864][ T30] audit: type=1326 audit(1760114943.036:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b338eec9 code=0x7ffc0000 [ 304.728814][ T30] audit: type=1326 audit(1760114943.036:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9062 comm="syz.5.756" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f89b338eec9 code=0x7ffc0000 [ 304.932995][ T24] usb 4-1: USB disconnect, device number 19 [ 304.948945][ T5956] usb 6-1: new high-speed USB device number 14 using dummy_hcd [ 304.973441][ T5877] usb 2-1: USB disconnect, device number 22 [ 305.040643][ T9077] netlink: 'syz.1.761': attribute type 4 has an invalid length. [ 305.070931][ T9077] netlink: 'syz.1.761': attribute type 4 has an invalid length. [ 305.758812][ T5956] usb 6-1: Using ep0 maxpacket: 8 [ 305.770754][ T5956] usb 6-1: config 16 has an invalid descriptor of length 0, skipping remainder of the config [ 305.781812][ T5956] usb 6-1: config 16 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 3 [ 305.797507][ T5956] usb 6-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 305.806727][ T5956] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 306.196679][ T9090] 9pnet_fd: Insufficient options for proto=fd [ 306.339978][ T30] audit: type=1400 audit(1760114944.766:585): avc: denied { mounton } for pid=9084 comm="syz.6.763" path="/syzcgroup/net/syz6/cgroup.procs" dev="cgroup" ino=505 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=file permissive=1 [ 306.418143][ T5956] usbtmc 6-1:16.0: bulk endpoints not found [ 306.909316][ T9101] input: syz0 as /devices/virtual/input/input16 [ 307.735584][ T9108] netlink: 'syz.1.767': attribute type 1 has an invalid length. [ 307.857693][ T9108] 8021q: adding VLAN 0 to HW filter on device bond3 [ 308.134680][ T9112] veth3: entered promiscuous mode [ 308.208934][ T24] usb 6-1: USB disconnect, device number 14 [ 308.586474][ T9120] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=8192 sclass=netlink_route_socket pid=9120 comm=syz.1.769 [ 309.068127][ T9115] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 310.054345][ T30] audit: type=1400 audit(1760114948.266:586): avc: denied { create } for pid=9130 comm="syz.3.772" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 310.081123][ T9134] netlink: 8 bytes leftover after parsing attributes in process `syz.3.772'. [ 310.091231][ T9134] FAULT_INJECTION: forcing a failure. [ 310.091231][ T9134] name failslab, interval 1, probability 0, space 0, times 0 [ 310.104352][ T9134] CPU: 1 UID: 0 PID: 9134 Comm: syz.3.772 Not tainted syzkaller #0 PREEMPT(full) [ 310.104376][ T9134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 310.104386][ T9134] Call Trace: [ 310.104392][ T9134] [ 310.104399][ T9134] dump_stack_lvl+0x16c/0x1f0 [ 310.104430][ T9134] should_fail_ex+0x512/0x640 [ 310.104457][ T9134] ? kmem_cache_alloc_noprof+0x62/0x6e0 [ 310.104486][ T9134] should_failslab+0xc2/0x120 [ 310.104507][ T9134] kmem_cache_alloc_noprof+0x75/0x6e0 [ 310.104532][ T9134] ? __kernfs_new_node+0xd2/0x8e0 [ 310.104561][ T9134] ? __kernfs_new_node+0xd2/0x8e0 [ 310.104583][ T9134] __kernfs_new_node+0xd2/0x8e0 [ 310.104610][ T9134] ? __pfx___kernfs_new_node+0x10/0x10 [ 310.104641][ T9134] ? find_held_lock+0x2b/0x80 [ 310.104664][ T9134] ? kernfs_root+0xee/0x2a0 [ 310.104693][ T9134] kernfs_new_node+0x13c/0x1e0 [ 310.104723][ T9134] __kernfs_create_file+0x53/0x350 [ 310.104746][ T9134] sysfs_add_file_mode_ns+0x207/0x3c0 [ 310.104775][ T9134] internal_create_group+0x578/0xf30 [ 310.104806][ T9134] ? __pfx_internal_create_group+0x10/0x10 [ 310.104835][ T9134] ? kernfs_create_link+0x1bd/0x240 [ 310.104858][ T9134] internal_create_groups+0x9d/0x150 [ 310.104884][ T9134] device_add+0x6d1/0x1aa0 [ 310.104915][ T9134] ? __pfx_device_add+0x10/0x10 [ 310.104942][ T9134] ? lockdep_init_map_type+0x5c/0x280 [ 310.104960][ T9134] ? __init_waitqueue_head+0xca/0x150 [ 310.104987][ T9134] netdev_register_kobject+0x1a9/0x3d0 [ 310.105011][ T9134] register_netdevice+0x13dc/0x2270 [ 310.105040][ T9134] ? __pfx_register_netdevice+0x10/0x10 [ 310.105058][ T9134] ? gtp_newlink+0x2eb/0x1390 [ 310.105087][ T9134] gtp_newlink+0x599/0x1390 [ 310.105112][ T9134] ? __pfx_gtp_newlink+0x10/0x10 [ 310.105136][ T9134] rtnl_newlink+0xc42/0x2000 [ 310.105171][ T9134] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.105196][ T9134] ? find_held_lock+0x2b/0x80 [ 310.105219][ T9134] ? avc_has_perm_noaudit+0x117/0x3b0 [ 310.105247][ T9134] ? avc_has_perm_noaudit+0x149/0x3b0 [ 310.105292][ T9134] ? find_held_lock+0x2b/0x80 [ 310.105317][ T9134] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.105343][ T9134] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.105368][ T9134] ? rtnetlink_rcv_msg+0x93a/0xe90 [ 310.105395][ T9134] ? __pfx_rtnl_newlink+0x10/0x10 [ 310.105423][ T9134] rtnetlink_rcv_msg+0x95b/0xe90 [ 310.105453][ T9134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.105487][ T9134] ? ref_tracker_free+0x37c/0x830 [ 310.105508][ T9134] netlink_rcv_skb+0x158/0x420 [ 310.105526][ T9134] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 310.105554][ T9134] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 310.105582][ T9134] ? netlink_deliver_tap+0x1ae/0xd30 [ 310.105614][ T9134] netlink_unicast+0x5a7/0x870 [ 310.105635][ T9134] ? __pfx_netlink_unicast+0x10/0x10 [ 310.105663][ T9134] netlink_sendmsg+0x8c8/0xdd0 [ 310.105685][ T9134] ? __pfx_netlink_sendmsg+0x10/0x10 [ 310.105713][ T9134] ____sys_sendmsg+0xa95/0xc70 [ 310.105734][ T9134] ? copy_msghdr_from_user+0x10a/0x160 [ 310.105760][ T9134] ? __pfx_____sys_sendmsg+0x10/0x10 [ 310.105792][ T9134] ___sys_sendmsg+0x134/0x1d0 [ 310.105820][ T9134] ? __pfx____sys_sendmsg+0x10/0x10 [ 310.105880][ T9134] __sys_sendmsg+0x16d/0x220 [ 310.105906][ T9134] ? __pfx___sys_sendmsg+0x10/0x10 [ 310.105949][ T9134] do_syscall_64+0xcd/0xfa0 [ 310.105978][ T9134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 310.105996][ T9134] RIP: 0033:0x7f5749b8eec9 [ 310.106011][ T9134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 310.106033][ T9134] RSP: 002b:00007f574aabd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 310.106050][ T9134] RAX: ffffffffffffffda RBX: 00007f5749de6180 RCX: 00007f5749b8eec9 [ 310.106062][ T9134] RDX: 0000000000008080 RSI: 0000200000000080 RDI: 0000000000000008 [ 310.106073][ T9134] RBP: 00007f574aabd090 R08: 0000000000000000 R09: 0000000000000000 [ 310.106083][ T9134] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 310.106093][ T9134] R13: 00007f5749de6218 R14: 00007f5749de6180 R15: 00007fff8aadb1b8 [ 310.106120][ T9134] [ 310.995498][ T5884] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 311.232038][ T5884] usb 2-1: Using ep0 maxpacket: 16 [ 311.246122][ T5884] usb 2-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 311.270805][ T5884] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 312.061144][ T5884] usb 2-1: config 0 descriptor?? [ 312.102770][ T5884] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 312.311151][ T30] audit: type=1400 audit(1760114950.876:587): avc: denied { mount } for pid=9149 comm="syz.0.778" name="/" dev="autofs" ino=23525 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 312.939369][ T5884] gspca_sonixj: reg_w1 err -110 [ 312.950151][ T5884] sonixj 2-1:0.0: probe with driver sonixj failed with error -110 [ 313.048157][ T5884] usb 2-1: USB disconnect, device number 23 [ 314.488747][ T5926] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 314.768434][ T24] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 314.777992][ T5926] usb 7-1: Using ep0 maxpacket: 16 [ 314.988327][ T5926] usb 7-1: config 0 has an invalid interface number: 1 but max is 0 [ 314.996603][ T5926] usb 7-1: config 0 has no interface number 0 [ 315.007172][ T5926] usb 7-1: New USB device found, idVendor=04fc, idProduct=1528, bcdDevice=6d.5d [ 315.017296][ T5926] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.025425][ T5926] usb 7-1: Product: syz [ 315.030142][ T5926] usb 7-1: Manufacturer: syz [ 315.036054][ T5926] usb 7-1: SerialNumber: syz [ 315.041012][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 315.053511][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 315.068277][ T24] usb 6-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 315.115989][ T5926] usb 7-1: config 0 descriptor?? [ 315.123625][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 315.133513][ T5926] gspca_main: spca1528-2.14.0 probing 04fc:1528 [ 315.152245][ T24] usb 6-1: config 0 descriptor?? [ 315.374330][ T24] usbhid 6-1:0.0: can't add hid device: -71 [ 315.386247][ T24] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 315.457570][ T24] usb 6-1: USB disconnect, device number 15 [ 315.708686][ T5926] gspca_spca1528: reg_w err -110 [ 315.729233][ T5926] spca1528 7-1:0.1: probe with driver spca1528 failed with error -110 [ 316.404638][ T5956] usb 7-1: USB disconnect, device number 12 [ 316.479678][ T30] audit: type=1400 audit(1760114955.046:588): avc: denied { bind } for pid=9208 comm="syz.3.791" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 316.503273][ T30] audit: type=1400 audit(1760114955.046:589): avc: denied { write } for pid=9208 comm="syz.3.791" path="socket:[24625]" dev="sockfs" ino=24625 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 316.856668][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.863383][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 319.608171][ T5961] IPVS: starting estimator thread 0... [ 319.808715][ T9241] IPVS: using max 55 ests per chain, 132000 per kthread [ 320.084125][ T9248] netlink: 34 bytes leftover after parsing attributes in process `syz.6.801'. [ 320.650975][ T9247] SELinux: security_context_str_to_sid (user_u) failed with errno=-22 [ 321.151378][ T36] Bluetooth: hci1: Frame reassembly failed (-84) [ 321.475794][ T9266] bridge1: entered promiscuous mode [ 321.481539][ T9266] bridge1: entered allmulticast mode [ 322.219282][ T5961] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 322.659851][ T5961] usb 2-1: Using ep0 maxpacket: 16 [ 322.802013][ T5961] usb 2-1: config index 0 descriptor too short (expected 16456, got 72) [ 322.839794][ T5961] usb 2-1: config 0 has an invalid interface number: 125 but max is 1 [ 322.895292][ T9248] syz.6.801 (9248) used greatest stack depth: 19704 bytes left [ 322.943190][ T5961] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 323.025921][ T5961] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 323.036410][ T9275] netlink: 'syz.6.809': attribute type 4 has an invalid length. [ 323.069599][ T9275] netlink: 17 bytes leftover after parsing attributes in process `syz.6.809'. [ 323.098703][ T5961] usb 2-1: config 0 has no interface number 0 [ 323.105542][ T9279] netlink: 24 bytes leftover after parsing attributes in process `syz.0.811'. [ 323.166037][ T5961] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 323.179368][ T9275] netlink: 20 bytes leftover after parsing attributes in process `syz.6.809'. [ 323.235734][ T5820] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 323.242475][ T5813] Bluetooth: hci1: command 0x1003 tx timeout [ 323.270497][ T5961] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 323.280921][ T5961] usb 2-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 323.293452][ T5961] usb 2-1: config 0 interface 125 has no altsetting 0 [ 323.319673][ T5961] usb 2-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 323.333388][ T5961] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.342674][ T5961] usb 2-1: Product: syz [ 323.346869][ T5961] usb 2-1: Manufacturer: syz [ 323.354378][ T5961] usb 2-1: SerialNumber: syz [ 323.365568][ T5961] usb 2-1: config 0 descriptor?? [ 323.429025][ T42] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 323.630070][ T42] usb 4-1: config index 0 descriptor too short (expected 7768, got 18) [ 323.644421][ T42] usb 4-1: New USB device found, idVendor=0483, idProduct=3747, bcdDevice=52.4d [ 323.658725][ T30] audit: type=1326 audit(1760114962.196:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2177f8eec9 code=0x7ffc0000 [ 323.659217][ T42] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 323.758046][ T30] audit: type=1326 audit(1760114962.206:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2177f8eec9 code=0x7ffc0000 [ 323.761576][ T42] usb 4-1: config 0 descriptor?? [ 323.962917][ T30] audit: type=1326 audit(1760114962.216:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=35 compat=0 ip=0x7f2177f8eec9 code=0x7ffc0000 [ 323.986529][ T30] audit: type=1326 audit(1760114962.216:593): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2177f8eec9 code=0x7ffc0000 [ 324.114367][ T9298] netlink: 68 bytes leftover after parsing attributes in process `syz.0.816'. [ 324.200487][ T30] audit: type=1326 audit(1760114962.216:594): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2177f8eec9 code=0x7ffc0000 [ 324.226463][ T30] audit: type=1326 audit(1760114962.216:595): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=53 compat=0 ip=0x7f2177f8eec9 code=0x7ffc0000 [ 324.251607][ T30] audit: type=1326 audit(1760114962.216:596): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2177f8eec9 code=0x7ffc0000 [ 324.275851][ T30] audit: type=1326 audit(1760114962.216:597): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2177f8eec9 code=0x7ffc0000 [ 324.319861][ T30] audit: type=1326 audit(1760114962.216:598): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=42 compat=0 ip=0x7f2177f8eec9 code=0x7ffc0000 [ 324.344921][ T42] ftdi_sio 4-1:0.0: Ignoring interface reserved for JTAG [ 324.366605][ T30] audit: type=1326 audit(1760114962.216:599): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9288 comm="syz.6.815" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2177f8eec9 code=0x7ffc0000 [ 324.585930][ T5870] usb 4-1: USB disconnect, device number 20 [ 325.370531][ T5870] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 325.863112][ T5961] usb 2-1: USB disconnect, device number 24 [ 325.959056][ T5870] usb 7-1: Using ep0 maxpacket: 32 [ 326.164834][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 326.189133][ T5870] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 326.203624][ T5870] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBD, changing to 0x8D [ 326.216471][ T5870] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8D has invalid maxpacket 11 [ 326.229254][ T5870] usb 7-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 326.243480][ T5870] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 326.254329][ T5870] usb 7-1: Product: syz [ 326.259273][ T5870] usb 7-1: Manufacturer: syz [ 326.263896][ T5870] usb 7-1: SerialNumber: syz [ 326.289929][ T5870] usb 7-1: config 0 descriptor?? [ 326.565972][ T9309] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 326.656047][ T9328] netlink: 44 bytes leftover after parsing attributes in process `syz.1.822'. [ 326.670278][ T9328] netlink: 9 bytes leftover after parsing attributes in process `syz.1.822'. [ 327.046356][ T5884] usb 7-1: USB disconnect, device number 13 [ 327.520500][ T9319] ALSA: mixer_oss: invalid OSS volume '' [ 327.739547][ T9343] netlink: 'syz.0.829': attribute type 1 has an invalid length. [ 327.807235][ T9345] netlink: 'syz.6.830': attribute type 23 has an invalid length. [ 327.871427][ T9343] veth11: entered promiscuous mode [ 328.124205][ T9353] devpts: Unknown parameter 'm' [ 329.007249][ T30] kauditd_printk_skb: 5 callbacks suppressed [ 329.007266][ T30] audit: type=1400 audit(1760114966.696:605): avc: denied { remount } for pid=9346 comm="syz.5.831" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 329.845583][ T30] audit: type=1400 audit(1760114968.386:606): avc: denied { unmount } for pid=6805 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 329.889292][ T9365] autofs: Unknown parameter '0x0000000000000000' [ 330.168700][ T5956] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 330.242619][ T9377] netlink: 40 bytes leftover after parsing attributes in process `syz.5.836'. [ 330.358922][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 330.517175][ T5956] usb 4-1: New USB device found, idVendor=0471, idProduct=0327, bcdDevice=61.a4 [ 330.530157][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.530168][ T5926] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 330.710986][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 330.723023][ T5926] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 330.732983][ T5926] usb 7-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 330.760203][ T5926] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 330.761698][ T5956] usb 4-1: config 0 descriptor?? [ 330.991326][ T5956] gspca_main: sonixj-2.14.0 probing 0471:0327 [ 330.994831][ T5926] usb 7-1: config 0 descriptor?? [ 331.025273][ T5926] usbhid 7-1:0.0: can't add hid device: -22 [ 331.045691][ T5926] usbhid 7-1:0.0: probe with driver usbhid failed with error -22 [ 331.314073][ T9397] syz2: rxe_newlink: already configured on bond0 [ 331.407325][ T30] audit: type=1400 audit(1760114969.896:607): avc: denied { getopt } for pid=9398 comm="syz.1.845" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 332.463716][ T30] audit: type=1400 audit(1760114971.036:608): avc: denied { shutdown } for pid=9407 comm="syz.5.848" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 332.768677][ T5961] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 333.178696][ T5961] usb 2-1: Using ep0 maxpacket: 32 [ 333.185054][ T5961] usb 2-1: New USB device found, idVendor=04b4, idProduct=861f, bcdDevice=f9.d6 [ 333.194535][ T5961] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.205035][ T5961] usb 2-1: config 0 descriptor?? [ 333.213679][ T5961] usb 2-1: dvb_usb_v2: found a 'Anysee' in warm state [ 333.222165][ T5961] usb 2-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 333.228837][ T5961] dvb_usb_anysee 2-1:0.0: probe with driver dvb_usb_anysee failed with error -22 [ 333.300736][ T5961] usb 7-1: USB disconnect, device number 14 [ 334.389066][ T5961] usb 2-1: USB disconnect, device number 25 [ 334.400651][ T30] audit: type=1400 audit(1760114972.946:609): avc: denied { associate } for pid=9411 comm="syz.1.849" name="file0" scontext=root:object_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 334.421549][ C0] vkms_vblank_simulate: vblank timer overrun [ 334.506991][ T9419] loop7: detected capacity change from 0 to 16384 [ 334.599833][ T5956] gspca_sonixj: reg_r err -110 [ 334.606078][ T5956] sonixj 4-1:0.0: probe with driver sonixj failed with error -110 [ 335.173307][ T5884] usb 4-1: USB disconnect, device number 21 [ 335.700297][ T9422] loop7: detected capacity change from 16384 to 0 [ 336.115680][ T30] audit: type=1400 audit(1760114974.686:610): avc: denied { relabelfrom } for pid=9441 comm="syz.1.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 336.173279][ T30] audit: type=1400 audit(1760114974.716:611): avc: denied { relabelto } for pid=9441 comm="syz.1.857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 336.192771][ C1] vkms_vblank_simulate: vblank timer overrun [ 336.288697][ T5961] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 337.027487][ T9464] rdma_rxe: rxe_newlink: failed to add bond0 [ 337.132521][ T5961] usb 6-1: Using ep0 maxpacket: 16 [ 337.340187][ T5961] usb 6-1: config 4 has an invalid interface number: 51 but max is 0 [ 337.348545][ T5961] usb 6-1: config 4 has no interface number 0 [ 337.354873][ T5961] usb 6-1: config 4 interface 51 has no altsetting 0 [ 337.381202][ T5961] usb 6-1: New USB device found, idVendor=954f, idProduct=4199, bcdDevice= f.76 [ 337.392817][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 337.541715][ T5961] usb 6-1: Product: syz [ 337.546035][ T5961] usb 6-1: Manufacturer: syz [ 337.564565][ T5961] usb 6-1: SerialNumber: syz [ 338.004284][ T5961] cdc_eem 6-1:4.51: probe with driver cdc_eem failed with error -22 [ 338.016939][ T5961] usb 6-1: USB disconnect, device number 16 [ 338.348689][ T5926] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 338.517869][ T9489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.869'. [ 338.527212][ T5926] usb 4-1: Using ep0 maxpacket: 16 [ 338.553501][ T5926] usb 4-1: config 0 has no interfaces? [ 338.562904][ T9489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.869'. [ 338.566592][ T5926] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 338.593162][ T5926] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 338.614591][ T5926] usb 4-1: Manufacturer: syz [ 338.640450][ T9489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.869'. [ 338.651994][ T5926] usb 4-1: config 0 descriptor?? [ 338.666210][ T9489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.869'. [ 338.776926][ T9489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.869'. [ 338.823567][ T9489] netlink: 60 bytes leftover after parsing attributes in process `syz.5.869'. [ 338.984716][ T9504] Bluetooth: MGMT ver 1.23 [ 339.081086][ T5956] usb 4-1: USB disconnect, device number 22 [ 339.092580][ T30] audit: type=1400 audit(1760114977.556:612): avc: denied { append } for pid=9500 comm="syz.6.871" name="event1" dev="devtmpfs" ino=919 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:event_device_t tclass=chr_file permissive=1 [ 339.897845][ T30] audit: type=1400 audit(1760114978.466:613): avc: denied { write } for pid=9517 comm="syz.0.875" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 340.378861][ T5956] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 341.112022][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 341.130363][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 341.169269][ T5956] usb 4-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 341.190184][ T9533] netlink: 148 bytes leftover after parsing attributes in process `syz.1.879'. [ 341.192088][ T5956] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 341.238974][ T5956] usb 4-1: config 0 descriptor?? [ 341.488813][ T30] audit: type=1400 audit(1760114980.056:614): avc: denied { bind } for pid=9532 comm="syz.1.879" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 341.508138][ C1] vkms_vblank_simulate: vblank timer overrun [ 341.581294][ T9543] CIFS: No dialect specified on mount. Default has changed to a more secure dialect, SMB2.1 or later (e.g. SMB3.1.1), from CIFS (SMB1). To use the less secure SMB1 dialect to access old servers which do not support SMB3.1.1 (or even SMB3 or SMB2.1) specify vers=1.0 on mount. [ 341.607960][ T9543] CIFS mount error: No usable UNC path provided in device string! [ 341.607960][ T9543] [ 341.618304][ T9543] CIFS: VFS: CIFS mount error: No usable UNC path provided in device string! [ 342.154274][ T30] audit: type=1400 audit(1760114980.726:615): avc: denied { setopt } for pid=9534 comm="syz.5.880" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 342.154382][ T5956] mcp2221 0003:04D8:00DD.0002: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.3-1/input0 [ 342.174713][ C1] vkms_vblank_simulate: vblank timer overrun [ 342.479671][ T9559] netlink: 4 bytes leftover after parsing attributes in process `syz.0.885'. [ 342.489113][ T9559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 342.531539][ T9561] netlink: 44 bytes leftover after parsing attributes in process `syz.6.884'. [ 342.672646][ T9559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 342.802336][ T24] usb 4-1: USB disconnect, device number 23 [ 343.867195][ T30] audit: type=1400 audit(1760114982.406:616): avc: denied { write } for pid=9582 comm="syz.5.888" name="urandom" dev="devtmpfs" ino=9 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:urandom_device_t tclass=chr_file permissive=1 [ 345.119228][ T30] audit: type=1400 audit(1760114983.596:617): avc: denied { write } for pid=9609 comm="syz.1.893" name="file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 345.183605][ T30] audit: type=1400 audit(1760114983.596:618): avc: denied { open } for pid=9609 comm="syz.1.893" path="/185/file0/file0" dev="fuse" ino=64 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 345.945742][ T9643] rdma_rxe: rxe_newlink: failed to add bond0 [ 345.963172][ T9645] netlink: 'syz.1.901': attribute type 1 has an invalid length. [ 346.017582][ T9645] 8021q: adding VLAN 0 to HW filter on device bond4 [ 346.102895][ T9648] veth5: entered promiscuous mode [ 348.981239][ T5961] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 348.981373][ T9681] netlink: 68 bytes leftover after parsing attributes in process `syz.1.910'. [ 349.184030][ T5961] usb 6-1: config 1 has an invalid interface number: 7 but max is 0 [ 349.192169][ T5961] usb 6-1: config 1 has no interface number 0 [ 349.202707][ T5961] usb 6-1: config 1 interface 7 altsetting 0 has an endpoint descriptor with address 0xDB, changing to 0x8B [ 349.214271][ T5961] usb 6-1: config 1 interface 7 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 64 [ 349.224865][ T5961] usb 6-1: config 1 interface 7 altsetting 0 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 349.237655][ T5961] usb 6-1: New USB device found, idVendor=1199, idProduct=68a3, bcdDevice= 0.00 [ 349.253884][ T5961] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 349.262130][ T5961] usb 6-1: Product: syz [ 349.266302][ T5961] usb 6-1: Manufacturer: syz [ 349.270971][ T5961] usb 6-1: SerialNumber: syz [ 349.278341][ T9678] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 349.285662][ T5956] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 349.441122][ T5956] usb 4-1: Using ep0 maxpacket: 16 [ 349.448955][ T5956] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 349.460414][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 349.471682][ T5956] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 349.482352][ T5956] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 349.492094][ T5956] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 349.506308][ T5956] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 349.515847][ T5956] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 349.523918][ T5956] usb 4-1: Manufacturer: syz [ 349.527365][ T9678] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 349.537341][ T5956] usb 4-1: config 0 descriptor?? [ 349.544601][ T5961] usb 6-1: No status endpoint found [ 349.828770][ T5956] rc_core: IR keymap rc-hauppauge not found [ 349.836123][ T5956] Registered IR keymap rc-empty [ 349.847590][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 349.871632][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 349.899889][ T5956] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 349.915271][ T5956] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input17 [ 349.935341][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 349.959480][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 349.978850][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 349.999555][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.020742][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.039405][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.058768][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.078755][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.098732][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.118774][ T5956] mceusb 4-1:0.0: Error: mce write submit urb error = -90 [ 350.145014][ T5956] mceusb 4-1:0.0: Registered 424242424242 with mce emulator interface version 1 [ 350.154160][ T5956] mceusb 4-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 350.395054][ T9687] netlink: 80 bytes leftover after parsing attributes in process `syz.5.909'. [ 350.811712][ T5956] usb 4-1: USB disconnect, device number 24 [ 351.780242][ T5884] usb 6-1: USB disconnect, device number 17 [ 352.284036][ T9712] orangefs_mount: mount request failed with -4 [ 352.417041][ T9726] netlink: 'syz.1.922': attribute type 1 has an invalid length. [ 352.581771][ T9730] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 352.679912][ T9726] 8021q: adding VLAN 0 to HW filter on device bond5 [ 352.723310][ T9731] veth7: entered promiscuous mode [ 353.924285][ T9756] xt_CONNSECMARK: invalid mode: 66 [ 354.131728][ T30] audit: type=1326 audit(1760114992.706:619): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9761 comm="syz.6.934" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7f2177f8eec9 code=0x0 [ 354.209779][ T30] audit: type=1400 audit(1760114992.706:620): avc: denied { setopt } for pid=9759 comm="syz.1.933" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 355.131711][ T9779] netlink: 'syz.6.935': attribute type 1 has an invalid length. [ 355.155230][ T9779] netlink: 228 bytes leftover after parsing attributes in process `syz.6.935'. [ 355.327559][ T9784] xt_hashlimit: overflow, try lower: 3/0 [ 355.525650][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 355.568428][ T9787] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.624372][ T5956] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 355.664339][ T9787] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.813123][ T5956] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 355.824560][ T5956] usb 2-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 355.834792][ T5956] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 355.853400][ T9787] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.863638][ T5956] usb 2-1: config 0 descriptor?? [ 355.871132][ T5956] pwc: Askey VC010 type 2 USB webcam detected. [ 355.947965][ T9787] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.184621][ T1523] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.236791][ T2915] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.273294][ T5956] pwc: recv_control_msg error -32 req 02 val 2b00 [ 356.280366][ T9785] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 356.300147][ T9785] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 356.310059][ T2915] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.320775][ T2915] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 356.386380][ T5956] pwc: recv_control_msg error -32 req 02 val 2700 [ 356.466225][ T5956] pwc: recv_control_msg error -71 req 04 val 1000 [ 356.484678][ T5956] pwc: recv_control_msg error -71 req 04 val 1300 [ 356.491776][ T5956] pwc: recv_control_msg error -71 req 04 val 1400 [ 356.513828][ T5956] pwc: recv_control_msg error -71 req 02 val 2000 [ 356.544062][ T5956] pwc: recv_control_msg error -71 req 02 val 2100 [ 356.582306][ T5956] pwc: recv_control_msg error -71 req 04 val 1500 [ 356.599442][ T5956] pwc: recv_control_msg error -71 req 02 val 2500 [ 356.607091][ T5956] pwc: recv_control_msg error -71 req 02 val 2400 [ 356.622838][ T5956] pwc: recv_control_msg error -71 req 02 val 2600 [ 356.637072][ T5956] pwc: recv_control_msg error -71 req 02 val 2900 [ 356.650300][ T5956] pwc: recv_control_msg error -71 req 02 val 2800 [ 356.662519][ T5956] pwc: recv_control_msg error -71 req 04 val 1100 [ 356.684603][ T5956] pwc: recv_control_msg error -71 req 04 val 1200 [ 356.735141][ T5956] pwc: Registered as video103. [ 357.347701][ T5956] input: PWC snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/input/input18 [ 357.452892][ T9816] FAULT_INJECTION: forcing a failure. [ 357.452892][ T9816] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 357.453278][ T9817] FAULT_INJECTION: forcing a failure. [ 357.453278][ T9817] name failslab, interval 1, probability 0, space 0, times 0 [ 357.466351][ T9816] CPU: 0 UID: 0 PID: 9816 Comm: syz.5.941 Not tainted syzkaller #0 PREEMPT(full) [ 357.466370][ T9816] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.466379][ T9816] Call Trace: [ 357.466384][ T9816] [ 357.466390][ T9816] dump_stack_lvl+0x16c/0x1f0 [ 357.466419][ T9816] should_fail_ex+0x512/0x640 [ 357.466451][ T9816] _copy_to_user+0x32/0xd0 [ 357.466468][ T9816] simple_read_from_buffer+0xcb/0x170 [ 357.466494][ T9816] proc_fail_nth_read+0x197/0x240 [ 357.466513][ T9816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.466532][ T9816] ? rw_verify_area+0xcf/0x6c0 [ 357.466553][ T9816] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 357.466570][ T9816] vfs_read+0x1e4/0xcf0 [ 357.466588][ T9816] ? __pfx___mutex_lock+0x10/0x10 [ 357.466603][ T9816] ? __pfx_vfs_read+0x10/0x10 [ 357.466632][ T9816] ? __fget_files+0x20e/0x3c0 [ 357.466655][ T9816] ksys_read+0x12a/0x250 [ 357.466668][ T9816] ? __pfx_ksys_read+0x10/0x10 [ 357.466689][ T9816] do_syscall_64+0xcd/0xfa0 [ 357.466714][ T9816] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.466729][ T9816] RIP: 0033:0x7f89b338d8dc [ 357.466742][ T9816] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 357.466756][ T9816] RSP: 002b:00007f89b42ad030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 357.466771][ T9816] RAX: ffffffffffffffda RBX: 00007f89b35e6180 RCX: 00007f89b338d8dc [ 357.466780][ T9816] RDX: 000000000000000f RSI: 00007f89b42ad0a0 RDI: 0000000000000007 [ 357.466789][ T9816] RBP: 00007f89b42ad090 R08: 0000000000000000 R09: 0000000000000000 [ 357.466798][ T9816] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.466807][ T9816] R13: 00007f89b35e6218 R14: 00007f89b35e6180 R15: 00007ffdff53b418 [ 357.466829][ T9816] [ 357.495518][ T5956] usb 2-1: USB disconnect, device number 26 [ 357.678721][ T9817] CPU: 0 UID: 0 PID: 9817 Comm: syz.3.945 Not tainted syzkaller #0 PREEMPT(full) [ 357.678746][ T9817] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 357.678757][ T9817] Call Trace: [ 357.678762][ T9817] [ 357.678769][ T9817] dump_stack_lvl+0x16c/0x1f0 [ 357.678801][ T9817] should_fail_ex+0x512/0x640 [ 357.678828][ T9817] ? __kmalloc_cache_noprof+0x5f/0x780 [ 357.678854][ T9817] should_failslab+0xc2/0x120 [ 357.678874][ T9817] __kmalloc_cache_noprof+0x72/0x780 [ 357.678897][ T9817] ? xfrm_lookup_with_ifid+0x8b4/0x1e40 [ 357.678925][ T9817] ? ip6_setup_cork+0x223/0x1530 [ 357.678948][ T9817] ? ip6_setup_cork+0x223/0x1530 [ 357.678965][ T9817] ip6_setup_cork+0x223/0x1530 [ 357.678989][ T9817] ip6_make_skb+0x25b/0x3f0 [ 357.679006][ T9817] ? ip6_dst_check+0x343/0x950 [ 357.679021][ T9817] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 357.679042][ T9817] ? __pfx_ip6_make_skb+0x10/0x10 [ 357.679062][ T9817] ? ip6_dst_lookup_flow+0x164/0x1d0 [ 357.679096][ T9817] ? udpv6_sendmsg+0x2365/0x2d30 [ 357.679117][ T9817] udpv6_sendmsg+0x2365/0x2d30 [ 357.679143][ T9817] ? __pfx_ip_generic_getfrag+0x10/0x10 [ 357.679167][ T9817] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 357.679190][ T9817] ? avc_has_perm_noaudit+0x149/0x3b0 [ 357.679217][ T9817] ? avc_has_perm+0x144/0x1f0 [ 357.679262][ T9817] ? __import_iovec+0x1dd/0x650 [ 357.679279][ T9817] ? __might_fault+0xe3/0x190 [ 357.679302][ T9817] ? __might_fault+0x13b/0x190 [ 357.679326][ T9817] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 357.679352][ T9817] ? inet6_sendmsg+0x105/0x140 [ 357.679377][ T9817] inet6_sendmsg+0x105/0x140 [ 357.679404][ T9817] ____sys_sendmsg+0x705/0xc70 [ 357.679425][ T9817] ? copy_msghdr_from_user+0x10a/0x160 [ 357.679458][ T9817] ? __pfx_____sys_sendmsg+0x10/0x10 [ 357.679481][ T9817] ? __pfx__kstrtoull+0x10/0x10 [ 357.679507][ T9817] ___sys_sendmsg+0x134/0x1d0 [ 357.679533][ T9817] ? __pfx____sys_sendmsg+0x10/0x10 [ 357.679570][ T9817] ? find_held_lock+0x2b/0x80 [ 357.679609][ T9817] __sys_sendmmsg+0x200/0x420 [ 357.679637][ T9817] ? __pfx___sys_sendmmsg+0x10/0x10 [ 357.679670][ T9817] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 357.679707][ T9817] ? fput+0x9b/0xd0 [ 357.679736][ T9817] ? ksys_write+0x1ac/0x250 [ 357.679752][ T9817] ? __pfx_ksys_write+0x10/0x10 [ 357.679773][ T9817] __x64_sys_sendmmsg+0x9c/0x100 [ 357.679797][ T9817] ? lockdep_hardirqs_on+0x7c/0x110 [ 357.679823][ T9817] do_syscall_64+0xcd/0xfa0 [ 357.679850][ T9817] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 357.679867][ T9817] RIP: 0033:0x7f5749b8eec9 [ 357.679881][ T9817] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 357.679896][ T9817] RSP: 002b:00007f574aabd038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 357.679914][ T9817] RAX: ffffffffffffffda RBX: 00007f5749de6180 RCX: 00007f5749b8eec9 [ 357.679925][ T9817] RDX: 000000000000003b RSI: 0000200000001840 RDI: 0000000000000008 [ 357.679934][ T9817] RBP: 00007f574aabd090 R08: 0000000000000000 R09: 0000000000000000 [ 357.679944][ T9817] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 357.679954][ T9817] R13: 00007f5749de6218 R14: 00007f5749de6180 R15: 00007fff8aadb1b8 [ 357.679976][ T9817] [ 359.108828][ T5961] usb 7-1: new high-speed USB device number 15 using dummy_hcd [ 359.708850][ T5961] usb 7-1: device descriptor read/64, error -71 [ 359.979190][ T5961] usb 7-1: new high-speed USB device number 16 using dummy_hcd [ 360.008072][ T42] IPVS: starting estimator thread 0... [ 360.162490][ T5961] usb 7-1: device descriptor read/64, error -71 [ 360.266040][ T9841] IPVS: using max 41 ests per chain, 98400 per kthread [ 360.292130][ T5961] usb usb7-port1: attempt power cycle [ 360.401795][ T9856] netlink: 8 bytes leftover after parsing attributes in process `syz.1.954'. [ 360.453517][ T9857] netlink: 44 bytes leftover after parsing attributes in process `syz.1.954'. [ 361.219199][ T30] audit: type=1400 audit(1760114999.436:621): avc: denied { bind } for pid=9855 comm="syz.3.957" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 361.264929][ T5961] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 361.324918][ T5961] usb 7-1: device descriptor read/8, error -71 [ 361.711156][ T5961] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 361.740043][ T5961] usb 7-1: device descriptor read/8, error -71 [ 361.793418][ T9883] 9pnet_fd: Insufficient options for proto=fd [ 361.898959][ T5961] usb usb7-port1: unable to enumerate USB device [ 361.920163][ T9874] ptrace attach of "./syz-executor exec"[6805] was attempted by "./syz-executor exec"[9874] [ 362.149727][ T9889] tipc: Enabling of bearer rejected, failed to enable media [ 362.380993][ T30] audit: type=1400 audit(1760115000.956:622): avc: denied { getopt } for pid=9898 comm="syz.5.966" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 362.418780][ T42] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 362.648741][ T42] usb 7-1: Using ep0 maxpacket: 16 [ 362.661285][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 362.697769][ T42] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 362.764273][ T42] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 362.780572][ T42] usb 7-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 362.791320][ T42] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 362.805227][ T42] usb 7-1: config 0 descriptor?? [ 363.119283][ T5926] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 363.221887][ T42] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 363.235298][ T42] microsoft 0003:045E:07DA.0003: unknown main item tag 0x0 [ 363.263644][ T42] microsoft 0003:045E:07DA.0003: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.6-1/input0 [ 363.292591][ T42] microsoft 0003:045E:07DA.0003: no inputs found [ 363.299772][ T42] microsoft 0003:045E:07DA.0003: could not initialize ff, continuing anyway [ 363.319686][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 363.333922][ T5926] usb 2-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 363.343486][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 363.356758][ T5926] usb 2-1: Product: syz [ 363.363133][ T5926] usb 2-1: Manufacturer: syz [ 363.368043][ T5926] usb 2-1: SerialNumber: syz [ 363.377565][ T5926] usb 2-1: config 0 descriptor?? [ 363.396843][ T5926] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 363.547698][ T5926] usb 2-1: setting power ON [ 363.666861][ T30] audit: type=1400 audit(1760115002.236:623): avc: denied { append } for pid=9885 comm="syz.6.964" name="ptp0" dev="devtmpfs" ino=1265 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:clock_device_t tclass=chr_file permissive=1 [ 363.730685][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 363.778310][ T5926] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 363.815020][ T5926] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 363.842565][ T5926] usb 2-1: media controller created [ 363.871631][ T5926] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 363.998714][ T30] audit: type=1400 audit(1760115002.566:624): avc: denied { ioctl } for pid=9912 comm="syz.1.971" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x542a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 364.278934][ T5926] usb 2-1: selecting invalid altsetting 6 [ 364.293374][ T5926] usb 2-1: digital interface selection failed (-22) [ 364.327100][ T9931] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.387049][ T5926] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 364.397476][ T5926] usb 2-1: setting power OFF [ 364.403271][ T5926] dvb-usb: bulk message failed: -22 (2/0) [ 364.413581][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 364.433111][ T5926] (NULL device *): no alternate interface [ 364.699698][ T5926] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 364.744540][ T5926] usb 2-1: USB disconnect, device number 27 [ 364.920928][ T9936] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9936 comm=syz.0.976 [ 364.935449][ T9936] netlink: 24 bytes leftover after parsing attributes in process `syz.0.976'. [ 365.104975][ T5870] usb 7-1: USB disconnect, device number 19 [ 369.275576][ T9986] netlink: 2088 bytes leftover after parsing attributes in process `syz.1.989'. [ 369.375484][ T9992] tipc: Started in network mode [ 369.380767][ T9992] tipc: Node identity , cluster identity 4711 [ 369.386900][ T9992] tipc: Failed to obtain node identity [ 369.398548][ T9992] tipc: Enabling of bearer rejected, failed to enable media [ 369.535883][ T9995] syz2: rxe_newlink: already configured on bond0 [ 370.088701][ T5956] usb 7-1: new low-speed USB device number 20 using dummy_hcd [ 370.251659][ T5956] usb 7-1: config 7 has no interfaces? [ 370.615377][T10017] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1001'. [ 370.682134][ T30] audit: type=1400 audit(1760115009.256:625): avc: denied { unmount } for pid=5810 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 371.121389][T10014] lo: entered allmulticast mode [ 371.141136][T10014] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 371.258664][ T5961] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 371.287455][T10014] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1000'. [ 371.447372][ T5961] usb 4-1: Using ep0 maxpacket: 32 [ 371.486780][ T5961] usb 4-1: config 0 has an invalid interface number: 239 but max is 0 [ 371.629584][ T5961] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 371.657960][ T5961] usb 4-1: config 0 has no interface number 0 [ 371.678947][ T5961] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x2 has invalid maxpacket 8 [ 371.700535][ T5961] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x8 has invalid maxpacket 1023, setting to 64 [ 371.711795][ T5961] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xA9, changing to 0x89 [ 371.779367][ T5961] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x89 has invalid maxpacket 28648, setting to 1024 [ 371.852318][T10038] program syz.5.1005 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 371.874027][ T5961] usb 4-1: config 0 interface 239 altsetting 4 bulk endpoint 0x89 has invalid maxpacket 1024 [ 371.885262][ T5961] usb 4-1: config 0 interface 239 altsetting 4 has an endpoint descriptor with address 0xD5, changing to 0x85 [ 371.896994][ T5961] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has an invalid bInterval 0, changing to 7 [ 371.908281][ T5961] usb 4-1: config 0 interface 239 altsetting 4 endpoint 0x85 has invalid wMaxPacketSize 0 [ 371.918338][ T5961] usb 4-1: config 0 interface 239 has no altsetting 0 [ 371.929907][ T5961] usb 4-1: New USB device found, idVendor=105b, idProduct=1799, bcdDevice=36.e9 [ 371.940216][ T5961] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 371.948638][ T5961] usb 4-1: Product: syz [ 371.952872][ T5961] usb 4-1: Manufacturer: syz [ 371.958666][ T5961] usb 4-1: SerialNumber: syz [ 372.059746][ T5961] usb 4-1: config 0 descriptor?? [ 372.065588][T10028] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 372.077775][T10028] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 372.108745][ T5820] Bluetooth: hci1: urb ffff8880307e4800 submission failed (90) [ 372.338247][T10024] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 372.369572][T10024] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 372.405235][ T5961] usb 4-1: USB disconnect, device number 25 [ 372.797187][ T30] audit: type=1400 audit(1760115011.306:626): avc: denied { watch_reads } for pid=10044 comm="syz.1.1007" path="/205" dev="tmpfs" ino=1071 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 372.823945][ T30] audit: type=1400 audit(1760115011.326:627): avc: denied { setattr } for pid=10044 comm="syz.1.1007" name="msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 373.010901][ T5956] usb 7-1: New USB device found, idVendor=05d1, idProduct=2021, bcdDevice=af.12 [ 373.029001][ T30] audit: type=1400 audit(1760115011.556:628): avc: denied { accept } for pid=10044 comm="syz.1.1007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 373.049177][ T5956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.058774][ T5956] usb 7-1: Product: Е [ 373.072527][ T5956] usb 7-1: Manufacturer: 䠊 [ 373.083590][T10053] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1010'. [ 373.105354][ T5956] usb 7-1: can't set config #7, error -71 [ 373.120188][ T5956] usb 7-1: USB disconnect, device number 20 [ 373.122567][T10053] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1010'. [ 373.252539][T10059] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 373.303293][T10058] overlayfs: option "workdir=./bus" is useless in a non-upper mount, ignore [ 373.329113][T10059] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 373.339056][T10058] overlayfs: at least 2 lowerdir are needed while upperdir nonexistent [ 373.404072][ T30] audit: type=1326 audit(1760115011.976:629): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10062 comm="syz.5.1014" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f89b338eec9 code=0x0 [ 373.973805][T10085] syz_tun: entered allmulticast mode [ 374.047605][T10087] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1012'. [ 374.582559][T10098] ip6t_rpfilter: unknown options [ 374.635133][T10095] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 374.682786][T10079] syz_tun: left allmulticast mode [ 376.560923][T10111] xt_CT: You must specify a L4 protocol and not use inversions on it [ 377.061114][T10123] fuse: Invalid rootmode [ 377.802429][T10115] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1024'. [ 378.243427][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.249959][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.328498][ T30] audit: type=1400 audit(1760115016.896:630): avc: denied { create } for pid=10144 comm="syz.5.1036" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 378.333311][T10145] netlink: 'syz.5.1036': attribute type 25 has an invalid length. [ 378.349187][ C1] vkms_vblank_simulate: vblank timer overrun [ 378.685256][ T30] audit: type=1400 audit(1760115017.256:631): avc: denied { listen } for pid=10149 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 378.723923][ T5956] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 378.751794][ T30] audit: type=1400 audit(1760115017.256:632): avc: denied { accept } for pid=10149 comm="syz.3.1038" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 378.888652][ T5956] usb 6-1: Using ep0 maxpacket: 8 [ 378.906622][ T5956] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 378.920559][ T5956] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 379.241568][ T5956] usb 6-1: New USB device found, idVendor=0e9c, idProduct=0000, bcdDevice=5b.1e [ 379.252077][ T5956] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 379.495486][ T5956] usb 6-1: Product: syz [ 379.615380][ T5956] usb 6-1: Manufacturer: syz [ 379.646177][T10166] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1041'. [ 379.835437][ T10] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 379.846303][ T5956] usb 6-1: SerialNumber: syz [ 379.855409][ T5956] usb 6-1: config 0 descriptor?? [ 379.908680][ T5956] rc_core: IR keymap rc-streamzap not found [ 379.921165][ T5956] Registered IR keymap rc-empty [ 379.938755][ T5956] rc rc0: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0 [ 379.975206][ T5956] input: Streamzap PC Remote Infrared Receiver as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/rc/rc0/input20 [ 380.000374][ T10] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x85 has invalid wMaxPacketSize 0 [ 380.010314][ T10] usb 7-1: New USB device found, idVendor=2040, idProduct=1605, bcdDevice= a.94 [ 380.024243][ T10] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 380.044587][ T10] usb 7-1: config 0 descriptor?? [ 380.070953][ T5956] usb 6-1: USB disconnect, device number 18 [ 380.119806][T10171] netlink: 168 bytes leftover after parsing attributes in process `syz.1.1042'. [ 381.248614][T10183] rdma_rxe: rxe_newlink: failed to add bond0 [ 381.576051][ T10] usb 7-1: USB disconnect, device number 21 [ 381.844073][T10189] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1047'. [ 382.145344][T10194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 382.218156][ T5877] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 382.516173][ T30] audit: type=1400 audit(1760115021.076:633): avc: denied { read } for pid=10193 comm="syz.6.1049" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 382.556273][ T5877] usb 2-1: config 1 has too many interfaces: 66, using maximum allowed: 32 [ 382.566198][ T5877] usb 2-1: config 1 has an invalid descriptor of length 115, skipping remainder of the config [ 382.577127][ T5877] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 66 [ 382.587993][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 101, changing to 10 [ 382.644268][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 25953, setting to 1024 [ 382.790464][ T5877] usb 2-1: New USB device found, idVendor=7d25, idProduct=a415, bcdDevice= 0.40 [ 382.942665][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=4, SerialNumber=0 [ 382.991542][ T5877] usb 2-1: Product: syz [ 382.995778][ T5877] usb 2-1: Manufacturer: syz [ 383.426624][T10192] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 383.441504][ T5877] cdc_wdm 2-1:1.0: skipping garbage [ 383.465972][ T5877] cdc_wdm 2-1:1.0: skipping garbage [ 383.486977][ T5877] cdc_wdm 2-1:1.0: cdc-wdm0: USB WDM device [ 383.505412][ T5877] cdc_wdm 2-1:1.0: Unknown control protocol [ 383.682124][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 383.688827][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 383.695857][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 383.696178][ T30] audit: type=1400 audit(1760115022.256:634): avc: denied { read write } for pid=10191 comm="syz.1.1048" name="cdc-wdm0" dev="devtmpfs" ino=3080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 383.702441][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 383.702708][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 383.739161][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 383.748901][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 383.755523][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 383.762649][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 383.769250][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 383.776115][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 383.781432][ T30] audit: type=1400 audit(1760115022.256:635): avc: denied { open } for pid=10191 comm="syz.1.1048" path="/dev/cdc-wdm0" dev="devtmpfs" ino=3080 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:modem_device_t tclass=chr_file permissive=1 [ 383.782707][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 383.814359][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 383.820966][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 383.828612][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 383.835212][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 383.847149][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 383.853769][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 383.860571][ C0] cdc_wdm 2-1:1.0: nonzero urb status received: -71 [ 383.867177][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - 0 bytes [ 383.873867][ C0] cdc_wdm 2-1:1.0: wdm_int_callback - usb_submit_urb failed with result -1 [ 383.887594][ T10] usb 2-1: USB disconnect, device number 28 [ 384.162107][T10215] /dev/sg0: Can't lookup blockdev [ 384.166796][T10214] ptrace attach of "./syz-executor exec"[5810] was attempted by ""[10214] [ 384.278855][ T5956] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 384.428687][ T5956] usb 7-1: Using ep0 maxpacket: 8 [ 384.439604][ T5956] usb 7-1: config 0 has an invalid interface number: 56 but max is 0 [ 384.474597][ T5956] usb 7-1: config 0 has no interface number 0 [ 384.496198][ T5956] usb 7-1: New USB device found, idVendor=0b48, idProduct=3007, bcdDevice=4f.64 [ 384.514447][ T5956] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 385.259663][ T5956] usb 7-1: Product: syz [ 385.264830][ T5956] usb 7-1: Manufacturer: syz [ 385.491152][ T30] audit: type=1400 audit(1760115023.286:636): avc: denied { map } for pid=10220 comm="syz.0.1057" path="socket:[28964]" dev="sockfs" ino=28964 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 385.567963][ T5956] usb 7-1: SerialNumber: syz [ 385.599965][ T5956] usb 7-1: config 0 descriptor?? [ 385.903127][ T5956] dvb-usb: found a 'Technotrend TT Connect S2-3600' in warm state. [ 386.057015][ T30] audit: type=1400 audit(1760115024.626:637): avc: denied { read write } for pid=10208 comm="syz.6.1053" name="mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 386.152856][T10237] syzkaller0: entered promiscuous mode [ 386.158419][T10237] syzkaller0: entered allmulticast mode [ 386.299140][ T30] audit: type=1400 audit(1760115024.626:638): avc: denied { open } for pid=10208 comm="syz.6.1053" path="/dev/input/mouse0" dev="devtmpfs" ino=974 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:mouse_device_t tclass=chr_file permissive=1 [ 386.676295][T10242] netlink: 'syz.5.1062': attribute type 21 has an invalid length. [ 386.805285][T10246] rdma_rxe: rxe_newlink: failed to add bond0 [ 387.119000][ T5877] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 387.429098][ T5877] usb 6-1: Using ep0 maxpacket: 32 [ 387.507744][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 387.672831][ T5956] pctv452e: pctv452e_power_ctrl: 1 [ 387.672831][ T5956] [ 387.705345][ T5877] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 387.860651][ T5877] usb 6-1: New USB device found, idVendor=056a, idProduct=006a, bcdDevice= 0.00 [ 387.995062][ T5877] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.029926][ T5956] pctv452e: pctv452e_power_ctrl: Warning set interface returned: -22 [ 388.029926][ T5956] [ 388.040348][ T5956] dvb-usb: bulk message failed: -22 (5/0) [ 388.051196][ T5956] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 388.062171][ T5956] dvbdev: DVB: registering new adapter (Technotrend TT Connect S2-3600) [ 388.078954][ T5956] usb 7-1: media controller created [ 388.084652][ T5956] dvb-usb: bulk message failed: -22 (8/0) [ 388.090723][ T5956] pctv452e: I2C error -22; AA 01 A0 01 14 -> aa 01 31 04 a0 01 14 [ 388.098695][ T5956] dvb-usb: MAC address reading failed. [ 388.111469][ T5956] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 388.125873][ T5877] usb 6-1: config 0 descriptor?? [ 388.139130][ T30] audit: type=1326 audit(1760115026.716:639): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d758eec9 code=0x7ffc0000 [ 388.236775][ T30] audit: type=1326 audit(1760115026.736:640): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=314 compat=0 ip=0x7fa0d758eec9 code=0x7ffc0000 [ 388.236903][ T5956] DVB: Unable to find symbol stb0899_attach() [ 388.264510][T10257] overlayfs: failed to clone upperpath [ 388.276100][ T30] audit: type=1326 audit(1760115026.736:641): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d758eec9 code=0x7ffc0000 [ 388.310038][ T30] audit: type=1326 audit(1760115026.736:642): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa0d758eec9 code=0x7ffc0000 [ 388.339001][ T30] audit: type=1326 audit(1760115026.736:643): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10249 comm="syz.0.1063" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fa0d758eec9 code=0x7ffc0000 [ 388.372759][ T5956] dvb-usb: no frontend was attached by 'Technotrend TT Connect S2-3600' [ 388.520435][ T5956] rc_core: IR keymap rc-tt-1500 not found [ 388.533326][ T5956] Registered IR keymap rc-empty [ 388.541102][ T5956] rc rc0: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0 [ 388.561052][ T5956] input: Technotrend TT Connect S2-3600 as /devices/platform/dummy_hcd.6/usb7/7-1/rc/rc0/input22 [ 388.576068][ T5956] dvb-usb: schedule remote query interval to 100 msecs. [ 388.583405][ T5956] pctv452e: pctv452e_power_ctrl: 0 [ 388.583405][ T5956] [ 388.591388][ T5956] dvb-usb: Technotrend TT Connect S2-3600 successfully initialized and connected. [ 388.614636][ T5877] wacom 0003:056A:006A.0004: item fetching failed at offset 0/2 [ 388.656392][ T5877] wacom 0003:056A:006A.0004: parse failed [ 388.662769][ T5877] wacom 0003:056A:006A.0004: probe with driver wacom failed with error -22 [ 388.701623][ T5956] dvb-usb: bulk message failed: -22 (4/0) [ 388.717739][ T5956] dvb-usb: error -22 while querying for an remote control event. [ 388.821465][ T5956] usb 6-1: USB disconnect, device number 19 [ 388.841347][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 388.847118][ T10] dvb-usb: error -22 while querying for an remote control event. [ 388.983130][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 388.990004][ T10] dvb-usb: error -22 while querying for an remote control event. [ 389.113194][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 389.119297][ T10] dvb-usb: error -22 while querying for an remote control event. [ 389.249966][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 389.255796][ T10] dvb-usb: error -22 while querying for an remote control event. [ 389.379006][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 389.384875][ T10] dvb-usb: error -22 while querying for an remote control event. [ 389.519503][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 389.525342][ T10] dvb-usb: error -22 while querying for an remote control event. [ 389.756625][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 389.762808][ T10] dvb-usb: error -22 while querying for an remote control event. [ 390.339691][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 390.345495][ T10] dvb-usb: error -22 while querying for an remote control event. [ 390.467094][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 390.487269][ T10] dvb-usb: error -22 while querying for an remote control event. [ 390.610358][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 390.616729][ T10] dvb-usb: error -22 while querying for an remote control event. [ 390.731261][ T10] dvb-usb: bulk message failed: -22 (4/0) [ 390.741015][ T10] dvb-usb: error -22 while querying for an remote control event. [ 390.858665][ T5956] dvb-usb: bulk message failed: -22 (4/0) [ 390.864966][ T5956] dvb-usb: error -22 while querying for an remote control event. [ 390.900321][ T42] usb 7-1: USB disconnect, device number 22 [ 391.020412][ T42] dvb-usb: Technotrend TT Connect S2-3600 successfully deinitialized and disconnected. [ 392.600453][T10286] veth5: entered promiscuous mode [ 393.170706][T10313] binder: 10312:10313 unknown command 0 [ 393.288959][T10313] binder: 10312:10313 ioctl c0306201 200000000080 returned -22 [ 394.665326][T10325] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 395.036219][T10313] binder: 10312:10313 ioctl 8008f512 2000000000c0 returned -22 [ 395.048395][T10313] netlink: 16186 bytes leftover after parsing attributes in process `syz.5.1075'. [ 395.399105][ T5884] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 395.808948][ T5884] usb 6-1: device descriptor read/64, error -71 [ 396.517257][ T5884] usb 6-1: new high-speed USB device number 21 using dummy_hcd [ 396.818626][T10366] netlink: 'syz.5.1089': attribute type 4 has an invalid length. [ 396.881806][ T30] kauditd_printk_skb: 24 callbacks suppressed [ 396.881828][ T30] audit: type=1400 audit(1760115035.326:668): avc: denied { listen } for pid=10363 comm="syz.5.1089" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 397.920199][ T30] audit: type=1400 audit(1760115036.486:669): avc: denied { read } for pid=10391 comm="syz.5.1097" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 397.990511][ T30] audit: type=1400 audit(1760115036.486:670): avc: denied { open } for pid=10391 comm="syz.5.1097" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 398.025751][T10401] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1100'. [ 398.063265][T10401] netlink: 176 bytes leftover after parsing attributes in process `syz.0.1100'. [ 398.072716][ T30] audit: type=1400 audit(1760115036.486:671): avc: denied { ioctl } for pid=10391 comm="syz.5.1097" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x743e scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 398.168429][T10405] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 398.232823][T10405] netlink: 'syz.1.1099': attribute type 11 has an invalid length. [ 398.421651][T10401] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1100'. [ 398.444536][T10401] netlink: 'syz.0.1100': attribute type 33 has an invalid length. [ 398.457978][T10401] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1100'. [ 398.678697][ T5956] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 399.305594][ T5956] usb 4-1: too many configurations: 228, using maximum allowed: 8 [ 399.317034][ T5956] usb 4-1: config index 0 descriptor too short (expected 122, got 72) [ 399.336376][ T5956] usb 4-1: config index 1 descriptor too short (expected 122, got 72) [ 399.355258][ T5956] usb 4-1: config index 2 descriptor too short (expected 122, got 72) [ 399.376760][ T5956] usb 4-1: config index 3 descriptor too short (expected 122, got 72) [ 399.390814][ T5956] usb 4-1: config index 4 descriptor too short (expected 122, got 72) [ 399.402098][ T5956] usb 4-1: config index 5 descriptor too short (expected 122, got 72) [ 399.439258][ T5956] usb 4-1: config index 6 descriptor too short (expected 122, got 72) [ 399.457980][ T5956] usb 4-1: config index 7 descriptor too short (expected 122, got 72) [ 399.486579][ T5956] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 399.689406][ T5956] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.724965][ T5956] usb 4-1: Product: syz [ 399.817435][T10428] IPVS: sh: FWM 3 0x00000003 - no destination available [ 400.128671][ T5956] usb 4-1: Manufacturer: syz [ 400.133375][ T5956] usb 4-1: SerialNumber: syz [ 400.224503][ T5956] usb 4-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 400.281730][ T9] usb 4-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 400.582318][T10438] rdma_rxe: rxe_newlink: failed to add bond0 [ 400.960333][T10404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 400.992461][T10404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 401.237459][T10442] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1112'. [ 401.297847][T10444] FAULT_INJECTION: forcing a failure. [ 401.297847][T10444] name failslab, interval 1, probability 0, space 0, times 0 [ 401.310585][T10444] CPU: 0 UID: 0 PID: 10444 Comm: syz.5.1113 Not tainted syzkaller #0 PREEMPT(full) [ 401.310601][T10444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 401.310607][T10444] Call Trace: [ 401.310612][T10444] [ 401.310617][T10444] dump_stack_lvl+0x16c/0x1f0 [ 401.310641][T10444] should_fail_ex+0x512/0x640 [ 401.310657][T10444] ? fs_reclaim_acquire+0xae/0x150 [ 401.310672][T10444] should_failslab+0xc2/0x120 [ 401.310684][T10444] __kmalloc_noprof+0xdd/0x880 [ 401.310699][T10444] ? kfree+0x252/0x6d0 [ 401.310712][T10444] ? trace_kmalloc+0x2b/0xd0 [ 401.310722][T10444] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 401.310737][T10444] ? tomoyo_realpath_from_path+0xc2/0x6e0 [ 401.310748][T10444] tomoyo_realpath_from_path+0xc2/0x6e0 [ 401.310762][T10444] ? tomoyo_fill_path_info+0x233/0x420 [ 401.310778][T10444] tomoyo_mount_acl+0x1ae/0x850 [ 401.310788][T10444] ? bpf_ksym_find+0x127/0x1c0 [ 401.310804][T10444] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 401.310820][T10444] ? is_bpf_text_address+0x94/0x1a0 [ 401.310835][T10444] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 401.310845][T10444] ? unwind_get_return_address+0x59/0xa0 [ 401.310874][T10444] ? tomoyo_domain+0xbb/0x150 [ 401.310886][T10444] ? tomoyo_profile+0x47/0x60 [ 401.310901][T10444] tomoyo_mount_permission+0x16d/0x420 [ 401.310911][T10444] ? tomoyo_mount_permission+0x14f/0x420 [ 401.310922][T10444] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 401.310941][T10444] security_sb_mount+0x9b/0x260 [ 401.310959][T10444] path_mount+0x158/0x23a0 [ 401.310975][T10444] ? __pfx_path_mount+0x10/0x10 [ 401.310987][T10444] ? kmem_cache_free+0x2d4/0x6c0 [ 401.311003][T10444] ? putname+0x154/0x1a0 [ 401.311018][T10444] ? putname+0x154/0x1a0 [ 401.311029][T10444] ? putname+0x154/0x1a0 [ 401.311043][T10444] ? __x64_sys_mount+0x293/0x310 [ 401.311054][T10444] __x64_sys_mount+0x293/0x310 [ 401.311066][T10444] ? __pfx___x64_sys_mount+0x10/0x10 [ 401.311083][T10444] do_syscall_64+0xcd/0xfa0 [ 401.311100][T10444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 401.311112][T10444] RIP: 0033:0x7f89b338eec9 [ 401.311121][T10444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 401.311131][T10444] RSP: 002b:00007f89b42ef038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 401.311142][T10444] RAX: ffffffffffffffda RBX: 00007f89b35e5fa0 RCX: 00007f89b338eec9 [ 401.311149][T10444] RDX: 0000200000000080 RSI: 0000200000000400 RDI: 0000000000000000 [ 401.311155][T10444] RBP: 00007f89b42ef090 R08: 0000200000000540 R09: 0000000000000000 [ 401.311166][T10444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 401.311172][T10444] R13: 00007f89b35e6038 R14: 00007f89b35e5fa0 R15: 00007ffdff53b418 [ 401.311187][T10444] [ 401.311218][T10444] ERROR: Out of memory at tomoyo_realpath_from_path. [ 401.594541][ T9] ath9k_htc 4-1:1.0: ath9k_htc: Target is unresponsive [ 401.603983][ T9] ath9k_htc: Failed to initialize the device [ 401.705200][ T9] usb 4-1: ath9k_htc: USB layer deinitialized [ 403.082110][ T5820] Bluetooth: hci5: command 0x0c1a tx timeout [ 403.349977][T10452] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 403.605650][ T5877] usb 4-1: USB disconnect, device number 26 [ 406.533696][T10488] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1124'. [ 406.929859][T10496] veth5: entered promiscuous mode [ 407.307508][T10511] netlink: 'syz.1.1130': attribute type 1 has an invalid length. [ 408.324728][T10531] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.436510][ T30] audit: type=1400 audit(1760115047.006:672): avc: denied { map } for pid=10505 comm="syz.6.1129" path="/dev/comedi4" dev="devtmpfs" ino=1280 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=chr_file permissive=1 [ 409.015073][T10539] trusted_key: encrypted_key: insufficient parameters specified [ 409.235071][T10546] autofs: Unknown parameter '0x0000000000000000' [ 409.915071][T10581] veth5: entered promiscuous mode [ 410.621436][T10595] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 410.641757][T10595] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 410.936183][ T30] audit: type=1400 audit(1760115049.496:673): avc: denied { connect } for pid=10599 comm="syz.3.1144" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 411.242240][T10606] program syz.1.1145 is using a deprecated SCSI ioctl, please convert it to SG_IO [ 411.253022][ T30] audit: type=1400 audit(1760115049.826:674): avc: denied { bind } for pid=10602 comm="syz.1.1145" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 411.531346][T10604] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 411.537725][T10604] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 411.544615][T10604] Bluetooth: hci5: Opcode 0x0c1a failed: -4 [ 411.551061][T10604] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 413.029416][ T5813] Bluetooth: hci3: command 0x0406 tx timeout [ 413.891862][T10639] binder: 10638:10639 ioctl 4018620d 0 returned -22 [ 414.242087][ T5135] Bluetooth: hci5: command 0x0c1a tx timeout [ 414.248261][ T5813] Bluetooth: hci0: command 0x0c1a tx timeout [ 414.840060][ T5813] Bluetooth: hci4: command 0x0406 tx timeout [ 416.493342][T10651] A link change request failed with some changes committed already. Interface hsr_slave_0 may have been left with an inconsistent configuration, please check. [ 416.532577][ T30] audit: type=1400 audit(1760115055.056:675): avc: denied { ioctl } for pid=10650 comm="syz.3.1158" path="socket:[29756]" dev="sockfs" ino=29756 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 416.850618][ T30] audit: type=1400 audit(1760115055.136:676): avc: denied { ioctl } for pid=10658 comm="syz.1.1161" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 416.942178][T10668] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1162'. [ 416.952287][T10668] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1162'. [ 417.970822][T10684] bridge1: entered promiscuous mode [ 417.976101][T10684] bridge1: entered allmulticast mode [ 418.499540][ T30] audit: type=1400 audit(1760115057.066:677): avc: denied { mounton } for pid=10683 comm="syz.6.1167" path="/bus" dev="proc" ino=4026531853 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=dir permissive=1 [ 418.522935][T10685] overlayfs: failed to resolve './file0': -2 [ 418.619587][T10693] FAULT_INJECTION: forcing a failure. [ 418.619587][T10693] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 418.685728][T10693] CPU: 0 UID: 0 PID: 10693 Comm: syz.3.1168 Not tainted syzkaller #0 PREEMPT(full) [ 418.685754][T10693] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 418.685764][T10693] Call Trace: [ 418.685770][T10693] [ 418.685777][T10693] dump_stack_lvl+0x16c/0x1f0 [ 418.685809][T10693] should_fail_ex+0x512/0x640 [ 418.685839][T10693] _copy_from_user+0x2e/0xd0 [ 418.685858][T10693] __do_sys_add_key+0x22e/0x470 [ 418.685884][T10693] ? __pfx___do_sys_add_key+0x10/0x10 [ 418.685910][T10693] ? ksys_write+0x1ac/0x250 [ 418.685937][T10693] do_syscall_64+0xcd/0xfa0 [ 418.685966][T10693] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 418.685983][T10693] RIP: 0033:0x7f5749b8eec9 [ 418.685998][T10693] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 418.686015][T10693] RSP: 002b:00007f574aabd038 EFLAGS: 00000246 ORIG_RAX: 00000000000000f8 [ 418.686032][T10693] RAX: ffffffffffffffda RBX: 00007f5749de6180 RCX: 00007f5749b8eec9 [ 418.686043][T10693] RDX: 0000200000000100 RSI: 0000200000000180 RDI: 0000200000000140 [ 418.686054][T10693] RBP: 00007f574aabd090 R08: fffffffffffffffe R09: 0000000000000000 [ 418.686065][T10693] R10: 00000000000000ca R11: 0000000000000246 R12: 0000000000000001 [ 418.686075][T10693] R13: 00007f5749de6218 R14: 00007f5749de6180 R15: 00007fff8aadb1b8 [ 418.686100][T10693] [ 418.840131][ T30] audit: type=1400 audit(1760115057.416:678): avc: denied { remount } for pid=10694 comm="syz.5.1170" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 419.112128][T10702] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1173'. [ 419.484879][T10704] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1173'. [ 419.557568][T10704] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1173'. [ 419.566742][T10704] netlink: 'syz.5.1173': attribute type 6 has an invalid length. [ 419.574730][T10704] netlink: 43 bytes leftover after parsing attributes in process `syz.5.1173'. [ 419.586877][T10702] netdevsim netdevsim5 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.669160][T10702] netdevsim netdevsim5 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.671080][T10707] overlayfs: missing 'workdir' [ 419.853806][T10702] netdevsim netdevsim5 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.962563][T10702] netdevsim netdevsim5 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.132043][ T13] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.163425][ T1523] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.185758][ T1523] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.219324][ T1523] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 420.328621][ T5926] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 420.561319][T10719] syz_tun: entered allmulticast mode [ 420.599196][ T5926] usb 2-1: Using ep0 maxpacket: 8 [ 420.619975][ T5926] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 420.637587][ T5926] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 420.653189][T10724] netlink: 'syz.6.1179': attribute type 39 has an invalid length. [ 420.672237][ T5926] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 420.702910][ T5926] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.717353][ T5926] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 420.729572][ T5926] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 420.743121][ T5926] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 420.760558][ T5926] usb 2-1: config 168 interface 0 has no altsetting 0 [ 420.778230][ T5926] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 420.787612][ T5926] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 420.801328][ T5926] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 420.842965][ T5926] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 420.858247][ T5926] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 420.893006][T10731] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1181'. [ 420.904748][ T5926] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 420.940717][ T5926] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 420.982887][ T5926] usb 2-1: config 168 interface 0 has no altsetting 0 [ 420.991327][ T5926] usb 2-1: config 168 descriptor has 1 excess byte, ignoring [ 421.005592][T10733] ptrace attach of ""[10735] was attempted by "./syz-executor exec"[10733] [ 421.031527][ T5926] usb 2-1: too many endpoints for config 168 interface 0 altsetting 188: 100, using maximum allowed: 30 [ 421.072075][ T5926] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x3 has an invalid bInterval 255, changing to 11 [ 421.084661][ T5926] usb 2-1: config 168 interface 0 altsetting 188 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 421.106948][ T5926] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 421.119165][ T5926] usb 2-1: config 168 interface 0 altsetting 188 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 421.183510][ T5926] usb 2-1: config 168 interface 0 altsetting 188 has 2 endpoint descriptors, different from the interface descriptor's value: 100 [ 421.197928][ T5926] usb 2-1: config 168 interface 0 has no altsetting 0 [ 421.211503][ T5926] usb 2-1: string descriptor 0 read error: -22 [ 421.218367][T10715] syz_tun: left allmulticast mode [ 421.231580][ T5926] usb 2-1: New USB device found, idVendor=0a07, idProduct=0064, bcdDevice=40.6e [ 421.289247][ T5926] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.353455][ T5926] adutux 2-1:168.0: ADU100 now attached to /dev/usb/adutux0 [ 421.704427][T10749] 9pnet_fd: Insufficient options for proto=fd [ 422.056606][T10712] vxcan3: entered promiscuous mode [ 422.131797][T10748] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1185'. [ 422.314655][ T5926] usb 2-1: USB disconnect, device number 29 [ 423.152900][ T30] audit: type=1400 audit(1760115061.726:679): avc: denied { create } for pid=10759 comm="syz.3.1189" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=appletalk_socket permissive=1 [ 423.485189][ T42] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 423.960955][ T42] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 423.979500][ T42] usb 6-1: config 0 has no interface number 0 [ 424.024367][ T42] usb 6-1: New USB device found, idVendor=10c4, idProduct=eac1, bcdDevice=85.a7 [ 424.049331][ T42] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.069910][ T42] usb 6-1: Product: syz [ 424.079070][ T42] usb 6-1: Manufacturer: syz [ 424.236264][ T42] usb 6-1: SerialNumber: syz [ 424.249119][ T42] usb 6-1: config 0 descriptor?? [ 424.567177][T10787] syz_tun: entered allmulticast mode [ 424.775860][ T42] usb 6-1: selecting invalid altsetting 2 [ 424.814024][ T42] i2c-cp2615 6-1:0.1: probe with driver i2c-cp2615 failed with error -22 [ 425.051569][T10799] overlayfs: overlapping lowerdir path [ 425.163956][T10800] overlayfs: "xino=on" is useless with all layers on same fs, ignore. [ 425.464034][T10783] syz_tun: left allmulticast mode [ 425.497872][ T10] usb 6-1: USB disconnect, device number 22 [ 425.921496][T10815] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11008 sclass=netlink_route_socket pid=10815 comm=syz.3.1203 [ 426.129981][ T30] audit: type=1400 audit(1760115064.636:680): avc: denied { write } for pid=10809 comm="syz.1.1201" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 426.591458][T10823] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1205'. [ 426.794783][T10831] FAULT_INJECTION: forcing a failure. [ 426.794783][T10831] name failslab, interval 1, probability 0, space 0, times 0 [ 426.886942][T10831] CPU: 1 UID: 0 PID: 10831 Comm: syz.1.1207 Not tainted syzkaller #0 PREEMPT(full) [ 426.886969][T10831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 426.886980][T10831] Call Trace: [ 426.886986][T10831] [ 426.886994][T10831] dump_stack_lvl+0x16c/0x1f0 [ 426.887026][T10831] should_fail_ex+0x512/0x640 [ 426.887054][T10831] should_failslab+0xc2/0x120 [ 426.887075][T10831] __kmalloc_node_track_caller_noprof+0xde/0x8a0 [ 426.887096][T10831] ? sidtab_sid2str_get+0x17a/0x680 [ 426.887122][T10831] ? kmemdup_noprof+0x29/0x60 [ 426.887147][T10831] kmemdup_noprof+0x29/0x60 [ 426.887174][T10831] sidtab_sid2str_get+0x17a/0x680 [ 426.887197][T10831] sidtab_entry_to_string+0x33/0x110 [ 426.887218][T10831] security_sid_to_context_core+0x35c/0x640 [ 426.887241][T10831] selinux_inode_init_security+0x460/0x660 [ 426.887265][T10831] ? __pfx_selinux_inode_init_security+0x10/0x10 [ 426.887285][T10831] ? trace_kmalloc+0x2b/0xd0 [ 426.887305][T10831] ? security_inode_init_security+0x13f/0x390 [ 426.887335][T10831] security_inode_init_security+0x1e8/0x390 [ 426.887361][T10831] ? __pfx_shmem_initxattrs+0x10/0x10 [ 426.887381][T10831] ? __pfx_security_inode_init_security+0x10/0x10 [ 426.887414][T10831] shmem_mknod+0x22e/0x450 [ 426.887439][T10831] ? __pfx_shmem_create+0x10/0x10 [ 426.887458][T10831] lookup_open.isra.0+0x11d3/0x1580 [ 426.887491][T10831] ? __pfx_lookup_open.isra.0+0x10/0x10 [ 426.887522][T10831] ? find_held_lock+0x2b/0x80 [ 426.887551][T10831] ? __pfx_down_write+0x10/0x10 [ 426.887578][T10831] path_openat+0x893/0x2cb0 [ 426.887605][T10831] ? __pfx_path_openat+0x10/0x10 [ 426.887631][T10831] do_filp_open+0x20b/0x470 [ 426.887650][T10831] ? __pfx_do_filp_open+0x10/0x10 [ 426.887688][T10831] ? alloc_fd+0x471/0x7d0 [ 426.887715][T10831] do_sys_openat2+0x11b/0x1d0 [ 426.887738][T10831] ? __pfx_do_sys_openat2+0x10/0x10 [ 426.887763][T10831] ? __fget_files+0x20e/0x3c0 [ 426.887786][T10831] __x64_sys_openat+0x174/0x210 [ 426.887823][T10831] ? __pfx___x64_sys_openat+0x10/0x10 [ 426.887845][T10831] ? ksys_write+0x1ac/0x250 [ 426.887864][T10831] ? __x64_sys_quotactl_fd+0x378/0x540 [ 426.887889][T10831] do_syscall_64+0xcd/0xfa0 [ 426.887917][T10831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 426.887936][T10831] RIP: 0033:0x7f4c2df8eec9 [ 426.887950][T10831] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 426.887971][T10831] RSP: 002b:00007f4c2ef0a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000101 [ 426.887989][T10831] RAX: ffffffffffffffda RBX: 00007f4c2e1e5fa0 RCX: 00007f4c2df8eec9 [ 426.888000][T10831] RDX: 0000000000002040 RSI: 0000200000000080 RDI: ffffffffffffff9c [ 426.888011][T10831] RBP: 00007f4c2ef0a090 R08: 0000000000000000 R09: 0000000000000000 [ 426.888022][T10831] R10: ce8697e3d5188492 R11: 0000000000000246 R12: 0000000000000002 [ 426.888032][T10831] R13: 00007f4c2e1e6038 R14: 00007f4c2e1e5fa0 R15: 00007ffd3d60d288 [ 426.888059][T10831] [ 427.701320][T10829] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1204'. [ 427.718071][T10845] xt_TPROXY: Can be used only with -p tcp or -p udp [ 427.745350][T10829] netlink: 9 bytes leftover after parsing attributes in process `syz.5.1204'. [ 429.100357][T10825] ALSA: mixer_oss: invalid OSS volume '' [ 429.562984][T10863] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 431.442631][ T30] audit: type=1326 audit(1760115069.226:681): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10878 comm="syz.1.1218" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f4c2df8eec9 code=0x2f900000 [ 433.490195][ T5956] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 433.649211][ T5956] usb 2-1: Using ep0 maxpacket: 16 [ 433.658273][ T5956] usb 2-1: config 0 has no interfaces? [ 433.672151][ T5956] usb 2-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 433.681796][ T5956] usb 2-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 433.690144][ T5956] usb 2-1: Manufacturer: syz [ 433.706792][ T5956] usb 2-1: config 0 descriptor?? [ 433.784177][ T30] audit: type=1400 audit(1760115072.356:682): avc: denied { create } for pid=10919 comm="syz.0.1230" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 434.047561][T10921] smc: removing ib device syz2 [ 434.612997][T10921] ------------[ cut here ]------------ [ 434.618463][T10921] WARNING: CPU: 1 PID: 10921 at drivers/infiniband/sw/rxe/rxe_pool.c:116 rxe_pool_cleanup+0x41/0x60 [ 434.629461][T10921] Modules linked in: [ 434.633528][T10921] CPU: 1 UID: 0 PID: 10921 Comm: syz.0.1230 Not tainted syzkaller #0 PREEMPT(full) [ 434.642918][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 434.653377][T10921] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 434.659032][T10921] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 b5 77 31 f9 e8 b0 77 31 f9 90 <0f> 0b 90 5b e9 a6 77 31 f9 e8 31 fd 99 f9 eb da 66 66 2e 0f 1f 84 [ 434.678807][T10921] RSP: 0018:ffffc90002e671b8 EFLAGS: 00010293 [ 434.685494][T10921] RAX: 0000000000000000 RBX: ffff8880310b1358 RCX: ffffffff8864be04 [ 434.693645][T10921] RDX: ffff8880260e4900 RSI: ffffffff888afd00 RDI: ffff8880310b13d8 [ 434.701679][T10921] RBP: ffffffff888961a0 R08: 0000000000000005 R09: 0000000000000001 [ 434.709852][T10921] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880310b0698 [ 434.717978][T10921] R13: ffff8880310affe0 R14: ffff8880310affe0 R15: ffff8880310b10b8 [ 434.726137][T10921] FS: 00007fa0d83f46c0(0000) GS:ffff888124add000(0000) knlGS:0000000000000000 [ 434.735178][T10921] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 434.741811][T10921] CR2: 0000200000000040 CR3: 00000000323bf000 CR4: 00000000003526f0 [ 434.750373][T10921] Call Trace: [ 434.753640][T10921] [ 434.756547][T10921] rxe_dealloc+0x25/0xc0 [ 434.760803][T10921] ib_dealloc_device+0x46/0x230 [ 434.765635][T10921] __ib_unregister_device+0x396/0x480 [ 434.771010][T10921] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 434.776886][T10921] ib_unregister_device_and_put+0x5a/0x80 [ 434.782791][T10921] nldev_dellink+0x21f/0x320 [ 434.787359][T10921] ? __pfx_nldev_dellink+0x10/0x10 [ 434.792507][T10921] ? cap_capable+0xb3/0x250 [ 434.796991][T10921] ? bpf_lsm_capable+0x9/0x10 [ 434.801677][T10921] ? security_capable+0x7e/0x260 [ 434.806599][T10921] ? ns_capable+0xd7/0x110 [ 434.811216][T10921] ? __pfx_nldev_dellink+0x10/0x10 [ 434.816326][T10921] rdma_nl_rcv_msg+0x38a/0x6e0 [ 434.821187][T10921] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 434.826471][T10921] ? __lock_acquire+0x62e/0x1ce0 [ 434.831434][T10921] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 434.837830][T10921] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 434.844944][T10921] ? netlink_deliver_tap+0x1ae/0xd30 [ 434.850240][T10921] netlink_unicast+0x5a7/0x870 [ 434.855391][T10921] ? __pfx_netlink_unicast+0x10/0x10 [ 434.860685][T10921] netlink_sendmsg+0x8c8/0xdd0 [ 434.865426][T10921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 434.870876][T10921] ____sys_sendmsg+0xa95/0xc70 [ 434.875625][T10921] ? copy_msghdr_from_user+0x10a/0x160 [ 434.881097][T10921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 434.886359][T10921] ? __pfx_futex_wake_mark+0x10/0x10 [ 434.891643][T10921] ___sys_sendmsg+0x134/0x1d0 [ 434.896298][T10921] ? __pfx____sys_sendmsg+0x10/0x10 [ 434.901689][T10921] __sys_sendmsg+0x16d/0x220 [ 434.906259][T10921] ? __pfx___sys_sendmsg+0x10/0x10 [ 434.911368][T10921] ? __x64_sys_futex+0x1e0/0x4c0 [ 434.916285][T10921] do_syscall_64+0xcd/0xfa0 [ 434.920796][T10921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 434.926672][T10921] RIP: 0033:0x7fa0d758eec9 [ 434.931263][T10921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 434.951124][T10921] RSP: 002b:00007fa0d83f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 434.960108][T10921] RAX: ffffffffffffffda RBX: 00007fa0d77e6090 RCX: 00007fa0d758eec9 [ 434.968060][T10921] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 434.976049][T10921] RBP: 00007fa0d7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 434.984621][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 434.992756][T10921] R13: 00007fa0d77e6128 R14: 00007fa0d77e6090 R15: 00007fffd8321ab8 [ 435.000738][T10921] [ 435.003740][T10921] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 435.010998][T10921] CPU: 1 UID: 0 PID: 10921 Comm: syz.0.1230 Not tainted syzkaller #0 PREEMPT(full) [ 435.020345][T10921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/02/2025 [ 435.030378][T10921] Call Trace: [ 435.033634][T10921] [ 435.036536][T10921] dump_stack_lvl+0x3d/0x1f0 [ 435.041123][T10921] vpanic+0x640/0x6f0 [ 435.045084][T10921] ? rxe_pool_cleanup+0x41/0x60 [ 435.049907][T10921] panic+0xca/0xd0 [ 435.053615][T10921] ? __pfx_panic+0x10/0x10 [ 435.058012][T10921] ? check_panic_on_warn+0x1f/0xb0 [ 435.063115][T10921] check_panic_on_warn+0xab/0xb0 [ 435.068025][T10921] __warn+0xf6/0x3c0 [ 435.071889][T10921] ? rxe_pool_cleanup+0x41/0x60 [ 435.076728][T10921] report_bug+0x3c3/0x580 [ 435.081046][T10921] ? rxe_pool_cleanup+0x41/0x60 [ 435.085880][T10921] handle_bug+0x184/0x210 [ 435.090185][T10921] exc_invalid_op+0x17/0x50 [ 435.094659][T10921] asm_exc_invalid_op+0x1a/0x20 [ 435.099480][T10921] RIP: 0010:rxe_pool_cleanup+0x41/0x60 [ 435.104930][T10921] Code: 00 00 00 00 fc ff df 48 89 fa 48 c1 ea 03 80 3c 02 00 75 1f 48 83 bb 80 00 00 00 00 75 06 5b e9 b5 77 31 f9 e8 b0 77 31 f9 90 <0f> 0b 90 5b e9 a6 77 31 f9 e8 31 fd 99 f9 eb da 66 66 2e 0f 1f 84 [ 435.124508][T10921] RSP: 0018:ffffc90002e671b8 EFLAGS: 00010293 [ 435.130724][T10921] RAX: 0000000000000000 RBX: ffff8880310b1358 RCX: ffffffff8864be04 [ 435.139022][T10921] RDX: ffff8880260e4900 RSI: ffffffff888afd00 RDI: ffff8880310b13d8 [ 435.146963][T10921] RBP: ffffffff888961a0 R08: 0000000000000005 R09: 0000000000000001 [ 435.154905][T10921] R10: 0000000000000002 R11: 0000000000000000 R12: ffff8880310b0698 [ 435.162854][T10921] R13: ffff8880310affe0 R14: ffff8880310affe0 R15: ffff8880310b10b8 [ 435.170801][T10921] ? __pfx_rxe_dealloc+0x10/0x10 [ 435.175808][T10921] ? __ib_unregister_device+0x384/0x480 [ 435.181331][T10921] ? rxe_pool_cleanup+0x40/0x60 [ 435.186168][T10921] ? rxe_pool_cleanup+0x40/0x60 [ 435.190996][T10921] rxe_dealloc+0x25/0xc0 [ 435.195210][T10921] ib_dealloc_device+0x46/0x230 [ 435.200045][T10921] __ib_unregister_device+0x396/0x480 [ 435.205394][T10921] ? __pfx_ib_device_get_by_index+0x10/0x10 [ 435.211265][T10921] ib_unregister_device_and_put+0x5a/0x80 [ 435.216972][T10921] nldev_dellink+0x21f/0x320 [ 435.221549][T10921] ? __pfx_nldev_dellink+0x10/0x10 [ 435.226666][T10921] ? cap_capable+0xb3/0x250 [ 435.231145][T10921] ? bpf_lsm_capable+0x9/0x10 [ 435.235795][T10921] ? security_capable+0x7e/0x260 [ 435.240706][T10921] ? ns_capable+0xd7/0x110 [ 435.245109][T10921] ? __pfx_nldev_dellink+0x10/0x10 [ 435.250192][T10921] rdma_nl_rcv_msg+0x38a/0x6e0 [ 435.254939][T10921] ? __pfx_rdma_nl_rcv_msg+0x10/0x10 [ 435.260199][T10921] ? __lock_acquire+0x62e/0x1ce0 [ 435.265120][T10921] rdma_nl_rcv_skb.constprop.0.isra.0+0x2d0/0x430 [ 435.271515][T10921] ? __pfx_rdma_nl_rcv_skb.constprop.0.isra.0+0x10/0x10 [ 435.278442][T10921] ? netlink_deliver_tap+0x1ae/0xd30 [ 435.283705][T10921] netlink_unicast+0x5a7/0x870 [ 435.288450][T10921] ? __pfx_netlink_unicast+0x10/0x10 [ 435.293729][T10921] netlink_sendmsg+0x8c8/0xdd0 [ 435.298474][T10921] ? __pfx_netlink_sendmsg+0x10/0x10 [ 435.303733][T10921] ____sys_sendmsg+0xa95/0xc70 [ 435.308493][T10921] ? copy_msghdr_from_user+0x10a/0x160 [ 435.313966][T10921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 435.319233][T10921] ? __pfx_futex_wake_mark+0x10/0x10 [ 435.324504][T10921] ___sys_sendmsg+0x134/0x1d0 [ 435.329170][T10921] ? __pfx____sys_sendmsg+0x10/0x10 [ 435.334360][T10921] __sys_sendmsg+0x16d/0x220 [ 435.338941][T10921] ? __pfx___sys_sendmsg+0x10/0x10 [ 435.344029][T10921] ? __x64_sys_futex+0x1e0/0x4c0 [ 435.348962][T10921] do_syscall_64+0xcd/0xfa0 [ 435.353446][T10921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 435.359309][T10921] RIP: 0033:0x7fa0d758eec9 [ 435.363711][T10921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 435.383410][T10921] RSP: 002b:00007fa0d83f4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 435.391804][T10921] RAX: ffffffffffffffda RBX: 00007fa0d77e6090 RCX: 00007fa0d758eec9 [ 435.399749][T10921] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000007 [ 435.407689][T10921] RBP: 00007fa0d7611f91 R08: 0000000000000000 R09: 0000000000000000 [ 435.415630][T10921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 435.423599][T10921] R13: 00007fa0d77e6128 R14: 00007fa0d77e6090 R15: 00007fffd8321ab8 [ 435.431565][T10921] [ 435.434801][T10921] Kernel Offset: disabled [ 435.439099][T10921] Rebooting in 86400 seconds..