last executing test programs: 1m37.199017004s ago: executing program 2 (id=707): r0 = syz_io_uring_setup(0x10c6, &(0x7f0000000b40)={0x0, 0xbdee, 0x800, 0x400001, 0x1ef}, &(0x7f0000000200)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r1, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r3 = openat$udambuf(0xffffffffffffff9c, &(0x7f0000000000), 0x2) r4 = epoll_create1(0x0) r5 = gettid() kcmp$KCMP_EPOLL_TFD(r5, r5, 0x7, r4, &(0x7f0000000280)={r4, 0xffffffffffffffff, 0xfffe}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r6, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r8}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x8800}, 0x90) r9 = memfd_create(&(0x7f0000000340)='y\x105\xfb\xf7u\x83%:r\xc2\xb9x\xa4q\xc1\xea_\x8cZ7\xe7a\x9b\x11x\x0e\xa1\xcf\x1a\x98S7\xc9\x00\x00\x00\x00\x00\x00\a\x00\x00\x00\x00\x00\x00\x04\x879\xa24\xa9am\xde\xb2\xd3\xcbZJoa\xc4\x1acB\xaa\xc1\xfb Q\xd4\xf4\x01\xa52\xe2DG\xd4\xbd{\x9f\xa9\x97\x9b@\xdb\x00b\xe1br\xb6\x008\xe3\x10\xff\xc2\x9d\r2\x9e\x8e\x04sW\x1b\xb7\xb3\xa2\xc9&@\xca\xda\xdc\xe2/\x97X\xac\b\xb0\xc2<\x80E\x1a\xbc\xc7W\xda9VsA\xaf\xc6\xcf\xe1\xa1\xb5M\xa2\x85\xa6y\xc4J\xf1\xf7\xfcD\x95\xe3\xeb\xc7\xbc\x91\xb0\xa8\x9eo\xebF(\x9dL\x01vRk\xaacB\x04\xa7I\v\x86EZ\x96\xd5\x14OD\\\xe8R\xe4\xcd\xec\xcc\xd1\x0fre\xe86\xcd\xeb\xc4$\x98\x06J\xd6dD\x8d_U`ji{\xab\x97\xaf;l\x1f\xaf\xb38U\xcb\xfa\xb3j\x92\f\x81\xa0\xa2-g\b\x99\x0e\x8d\x8d\x16\xd9w\\\xf8\xce\xb0j\x9d\'\x93\xef\x1d\xa0H\xd9\xbd\xd9\xaf\x12$\x8d\x16%\x8b\x00', 0x3) ftruncate(r9, 0xffff) fcntl$addseals(r9, 0x409, 0x7) r10 = ioctl$UDMABUF_CREATE(r3, 0x40187542, &(0x7f0000000100)={r9, 0x0, 0x0, 0x1000}) syz_io_uring_submit(r1, r2, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd=r10, 0x0, 0x0, 0x0, {0x414}, 0x1}) io_uring_enter(r0, 0x3f72, 0x74f1, 0xc00000000000000, 0x0, 0x39) 1m36.853022797s ago: executing program 2 (id=710): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3fc, 0x0, 0x32}, 0x9c) prlimit64(0x0, 0xe, &(0x7f0000000240)={0x8, 0x248}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f00000001c0)=0x8) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x6770c000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940000000fad413e850000000700000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffffffffffff30}, 0x94) fsconfig$FSCONFIG_CMD_RECONFIGURE(0xffffffffffffffff, 0x7, 0x0, 0x0, 0x0) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='numa_maps\x00') getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000640)={0x0, @in6={{0xa, 0x4e21, 0x7fffffff, @dev={0xfe, 0x80, '\x00', 0x2e}, 0x7}}, [0x3, 0x9, 0x3, 0x8, 0x0, 0x7, 0x8232, 0x7, 0x7, 0x81, 0x8000, 0x9, 0x1, 0xffff, 0x4]}, &(0x7f0000000140)=0x100) 1m35.737179101s ago: executing program 2 (id=711): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_usb_connect(0x2, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="1201000059770c40c009030243d3000000010902120001000000000904"], 0x0) syz_usb_control_io(r1, 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={0xffffffffffffffff, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r2, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x2000000000000158, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, r3, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_SET_FEATURES(r4, 0x4008af00, &(0x7f0000000080)=0x200000000) r5 = dup2(r4, r4) write$vhost_msg(r5, &(0x7f0000000340)={0x1, {0x0, 0x0, 0x0, 0x2, 0x3}}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x20, 0xf, 0x10, 0x5, 0x40, 0x1, 0xe4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x1}, 0x50) r8 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x4}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000600)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x6, 0x8}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0xc, 0xc, &(0x7f0000000180)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1f}, {0x85, 0x0, 0x0, 0x15}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000680)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xc, 0x5, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0xa286, 0x0, 0x0, 0x0, 0x4}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000280)='GPL\x00', 0x7, 0xe, &(0x7f00000002c0)=""/14, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000400)={0x2, 0x3, 0x7fffffff, 0x4}, 0x10, r2, r5, 0x8, &(0x7f0000000700)=[r6, 0x1, r7, r8, r9, r10, r11], &(0x7f0000000740)=[{0x4, 0x4, 0x2, 0x1}, {0x1, 0x4, 0x2, 0x6}, {0x4, 0x5, 0x3, 0x6}, {0x3, 0x4, 0x2, 0x2}, {0x3, 0x4, 0x7, 0xa}, {0x0, 0x1, 0x8, 0x9}, {0x5, 0x3, 0x8, 0x5}, {0x4, 0x2, 0x1, 0xb}], 0x10, 0x1}, 0x94) r12 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000002c0)={0x0, 0x7fff, 0x4}, 0xc) r13 = open(&(0x7f0000000380)='./bus\x00', 0x40, 0x0) r14 = creat(&(0x7f0000000200)='./bus\x00', 0x84) write$FUSE_NOTIFY_STORE(r14, &(0x7f0000000240)=ANY=[@ANYBLOB='+\x00\x00\x00', @ANYRES32=r13], 0x2b) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)='%-010d \x00'}, 0x20) r16 = syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='mounts\x00') read$FUSE(r16, &(0x7f0000000980)={0x2020}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0xf, 0x11, &(0x7f0000000080)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @exit], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000140)='syzkaller\x00', 0x569f, 0x8, &(0x7f00000001c0)=""/8, 0x41100, 0x4, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000280)={0x1, 0x9, 0x3, 0x6}, 0x10, r2, 0xffffffffffffffff, 0x4, &(0x7f0000000440)=[r12, r14, r15, r16], &(0x7f0000000500)=[{0x4, 0x3, 0xd, 0x5}, {0x1, 0x5, 0x10, 0xa}, {0x3, 0x2, 0x9, 0x3}, {0x1, 0x3, 0x9}], 0x10, 0x7}, 0x94) syz_usb_control_io$cdc_ncm(r1, 0x0, &(0x7f0000000480)={0x44, &(0x7f0000000180)=ANY=[@ANYBLOB="001004"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$printer(r1, 0x0, &(0x7f0000000640)={0x34, &(0x7f0000000300)={0x0, 0x12, 0x1, "f7"}, 0x0, 0x0, 0x0, 0x0, 0x0}) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000300)={0x58, 0x2, 0x6, 0x3, 0x0, 0x0, {0x0, 0x0, 0x7}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000}, 0x4010) 1m32.867306361s ago: executing program 2 (id=717): r0 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r0, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r2 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r2, 0x3b81, &(0x7f0000000200)={0xc}) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r2, 0x3ba0, &(0x7f0000000180)={0x48, 0x5, r1}) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f0000000040)="240000001a005f3814f9dc070009040180002000000000000000000008000f0040000000", 0x24) clock_gettime(0x0, &(0x7f0000000000)) syz_io_uring_setup(0x1458, &(0x7f00000004c0)={0x0, 0x3, 0x10180, 0x2000, 0x3ae}, &(0x7f0000000100)=0x0, &(0x7f00000002c0)=0x0) r6 = socket(0x40000000015, 0x5, 0x0) connect$pppl2tp(r6, &(0x7f0000000880)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x3, 0x3, 0x2, 0x0, {0xa, 0x4e20, 0x7fff, @remote, 0x6}}}, 0x3a) syz_open_dev$vcsa(0x0, 0x1, 0x40002) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, 0xffffffffffffffff, 0x0, 0xd}, 0x18) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r7, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_open_dev$tty1(0xc, 0x4, 0x1) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000001040)={0xf, {"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", 0x1000}}, 0x1006) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) connect$l2tp6(r6, &(0x7f0000000000)={0xa, 0x0, 0x5, @local, 0x8, 0x2}, 0x20) syz_io_uring_submit(r4, r5, &(0x7f0000000000)=@IORING_OP_OPENAT={0x12, 0x0, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000280)='./file1\x00', 0xc0, 0x8002, 0x23456}) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x64, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xd3}, @IPSET_ATTR_TIMEOUT={0x8}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x2002c0c4}, 0x0) openat$autofs(0xffffffffffffff9c, &(0x7f0000000000), 0x200, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 1m32.214763426s ago: executing program 2 (id=720): socketpair$unix(0x1, 0x3, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() mkdir(&(0x7f0000000640)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000000)='cgroup2\x00', 0x0, 0x0) chdir(&(0x7f0000000240)='./file0\x00') mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) r0 = open(&(0x7f0000000100)='./file0\x00', 0x0, 0x0) r1 = openat$cgroup_type(r0, &(0x7f00000002c0), 0x2, 0x0) write$cgroup_type(r1, &(0x7f0000000800), 0x9) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeea, 0x8031, 0xffffffffffffffff, 0xfb80000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000280), 0x80c80, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000040)={0x1c, 0x5e, 0xe25, 0x0, 0x3, "", [@nested={0xc, 0xea, 0x0, 0x1, [@typed={0x8, 0x2, 0x0, 0x0, @u32=0x2}]}]}, 0x1c}], 0x1}, 0x20048000) r6 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r6, 0x4020ae46, &(0x7f0000000400)={0x0, 0x1, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) r7 = ioctl$KVM_CREATE_VCPU(r6, 0xae41, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) ioctl$KVM_SET_SREGS(r0, 0x4138ae84, &(0x7f0000000100)={{0xffff1000, 0xdddd1000, 0x3, 0x0, 0x8, 0x8, 0x0, 0x2, 0x0, 0x6, 0x9, 0x10}, {0x8080000, 0x0, 0xc, 0x8, 0x7c, 0x0, 0x0, 0x0, 0x7, 0x7, 0x0, 0xff}, {0x2fff, 0x5000, 0xc, 0x0, 0x7, 0x4, 0x0, 0x0, 0x3, 0x0, 0x0, 0xfc}, {0x100000, 0xd000, 0x0, 0x0, 0x0, 0x0, 0xff, 0x0, 0x0, 0x0, 0x4}, {0xeeee8000, 0x3000, 0x9, 0x0, 0x0, 0x4, 0x20, 0xe, 0x0, 0x3e}, {0x0, 0x2000, 0xf, 0x7, 0x0, 0x0, 0x2, 0xfe, 0x0, 0x0, 0x80}, {0x8080000, 0x0, 0xf, 0x6, 0x5, 0x5, 0x3, 0x0, 0x4, 0x0, 0x0, 0xfe}, {0x80a0000, 0xdddd1000, 0x0, 0x1, 0x0, 0x1, 0x0, 0xa, 0x26, 0x0, 0xfc}, {0x80a0000}, {0x2000}, 0xfdfcffdb, 0x0, 0x3000, 0x28, 0xb, 0x0, 0x80a0000, [0x0, 0x0, 0x1]}) ioctl$KVM_TRANSLATE(r7, 0xc018ae85, &(0x7f00000000c0)={0x40000, 0xeeee0000, 0x0, 0xfc, 0x1}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x161) syz_clone3(&(0x7f0000000500)={0x81103280, &(0x7f00000000c0), 0x0, 0x0, {0x1a}, 0x0, 0x0, 0x0, 0x0}, 0x58) mount$fuse(0x0, 0x0, 0x0, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB='fd=', @ANYRESDEC=0x0]) fsetxattr(r3, &(0x7f0000000000)=@known='system.advise\x00', &(0x7f00000000c0)='autofs\x00', 0x7, 0x0) mount(0x0, &(0x7f0000000440)='./file0\x00', &(0x7f0000000280)='autofs\x00', 0x201000c, &(0x7f0000000040)) 1m29.667897748s ago: executing program 2 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x101420, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 1m14.551011726s ago: executing program 32 (id=732): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x101420, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) close(r4) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x8001}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40088c1}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x25dfdbfe, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 10.913899347s ago: executing program 0 (id=1048): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000795d6c08450c3a616dc4010203010902120001000000000904"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x8}, 0x1c) r2 = socket$inet6(0xa, 0x80000, 0x1) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) syz_usb_control_io$hid(r0, 0x0, &(0x7f0000000400)={0x2c, &(0x7f00000000c0)=ANY=[@ANYRESOCT=r0, @ANYRESDEC=r0, @ANYRESDEC=r0, @ANYRES64=r2, @ANYRESDEC=r0, @ANYRES8=r0, @ANYRESOCT=r0], 0x0, 0x0, 0x0, 0x0}) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0}, 0x18) socket$inet(0x2, 0x2, 0x1) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x14}, 0x4010) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x0, 0x1001f0) r3 = syz_open_dev$MSR(&(0x7f0000000540), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = openat(0xffffffffffffff9c, 0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f00000001c0)={0xa, 0x8000002, 0x0, @dev={0xfe, 0x80, '\x00', 0xc}, 0x8001}, 0x1c) ioctl$SNAPSHOT_CREATE_IMAGE(r4, 0x40043311, &(0x7f0000000240)) poll(0x0, 0x0, 0x0) mkdir(0x0, 0x41) r5 = openat$vcsu(0xffffff9c, &(0x7f0000000080), 0x88080, 0x0) ppoll(&(0x7f0000000040)=[{r5, 0x40}], 0x1, 0x0, 0x0, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r4, 0x29, 0x2a, &(0x7f0000000440)={0x1, {{0xa, 0x4e23, 0xb23, @private2={0xfc, 0x2, '\x00', 0x1}, 0xfffffffc}}}, 0x88) syz_usb_control_io(r0, 0x0, &(0x7f0000000980)={0x84, &(0x7f0000000080)=ANY=[@ANYBLOB="20000104000012"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, 0xffffffffffffffff, 0x0) 10.850670184s ago: executing program 1 (id=1050): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="9fd8010018"], &(0x7f0000000100)=""/141, 0x4e, 0x8d, 0x1, 0x7}, 0x28) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00', {0x2}}) write$tun(r0, &(0x7f0000000100)=ANY=[@ANYBLOB="06000000bbbbbbbbbbbbaaaaaaaaaabb88f5"], 0x72) 9.626979805s ago: executing program 5 (id=1054): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) mount$fuse(0x0, 0x0, &(0x7f0000000740), 0x8040a4, &(0x7f0000000240)=ANY=[]) syz_usb_connect$uac1(0x4, 0x98, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902860003010140750904000000010100000a24010600080201020904010000010200000904010101010200000b2402010c038f076d15630a24020198010f07347c0924020208000180020924020109010809590905010940020610050725010001070009040200000102000009040201010141d9420a0582090004ee007f072501020407"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, &(0x7f0000000080)=0x3) syz_usb_connect$printer(0x0, 0x2d, &(0x7f00000000c0)=ANY=[@ANYBLOB="12011003000000202505a8a440400102030109021b000101cb300f090400000107010301090501020800100307"], &(0x7f00000006c0)={0xa, &(0x7f0000000100)={0xa, 0x6, 0x310, 0x71, 0x1a, 0x1, 0xff, 0x4}, 0x21, &(0x7f0000000140)={0x5, 0xf, 0x21, 0x4, [@ptm_cap={0x3}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0x8, 0x7, 0x7}, @ext_cap={0x7, 0x10, 0x2, 0x10, 0xe, 0x0, 0x8}, @wireless={0xb, 0x10, 0x1, 0x6, 0xca, 0x1, 0x60, 0x8, 0x1}]}, 0x6, [{0xbf, &(0x7f0000000340)=@string={0xbf, 0x3, "769f60be6da4a11b5240b55265af4a1cf18d4ce2fbdf3a5fad6d1a16924df7971f071299c6699535e9fd74bfa6d6aeeb5d9c6b8d7dac38a09a1985cdbf2880ebcbf0b6835f45d4955eac9950dd2acd22c3d7058454f02f3a3b6be9afc46dbf1cbf78ea3e3f16085ee1e62e729249d4e106dd5d4f7cab3c7d2bd64556f2ece258b0b8d853cce475eccc0f6f8b3716be1ce5309944f8bf13a4a00d7e4c29f50f79cfa2eab4e06104c00593e2d450514c65e3eb73a686c89bb392b89f2ce5"}}, {0x4, &(0x7f0000000480)=@lang_id={0x4, 0x3, 0xc04}}, {0x2, &(0x7f00000004c0)=@string={0x2}}, {0x49, &(0x7f0000000540)=@string={0x49, 0x3, "22e397cfd2169b886272289e7ca1a0bc48f23f6b9d863a54eeb4bc37fcaeea14da15cf9347a796a19ecdb11d11aa38cdec8760ec80bad158daa2feaa8781192261875c5c5e1915"}}, {0x4, &(0x7f0000000600)=@lang_id={0x4, 0x3, 0x2001}}, {0x4, &(0x7f0000000640)=@lang_id={0x4, 0x3, 0x809}}]}) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r5, 0x40047438, &(0x7f0000000180)=""/246) writev(r5, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 9.579821139s ago: executing program 3 (id=1055): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000080)) r4 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="28001000", @ANYRES16=r8, @ANYBLOB], 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r10, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0xff07}, 0x2004000) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x84) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="4006840000008422bf882320a070480b2d0618b01e7f939616d9d08f2133dbc0c0e8aaf14627ca9cc1462a93ede7ead42f52b94b3db8e80fdc6cf26f012553df63c09e889579448008a9c40ff68cca31c2aaa94fc28105b88d852b3079df26caad1d195dfc31f650e32460043d95f7592a130cc94092d881a8e42b88adacd4f2ca970351491c323d6562"], &(0x7f0000000280)={0x0, 0x3, 0x91, @string={0x91, 0x3, "9f716b814adc753dfb0f1d4046c1dd28758022a4117a10b1f135ca3a218527726ad38f62662e4fa751439548f44e23518fa57b8c42cd040f4e66609bdf1d5d61346b91d85cd4759026efb86c13120ef12e2a0954bd5de305906f991bfce6b8e1a828ee88d237779d488e87bd7d124bd64c48eb7dacfa69fd539e28353e3828c30737755b7a2e8c48664aa184c47eb1"}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x9e, 0x6, "9b21ac18", "8d29cfc4"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x1d, 0x3, 0xd2, 0xc2, 0x800}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x1000, 0x29, [0xf]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x33}, &(0x7f0000000840)={0x40, 0x9, 0x1}, &(0x7f0000000880)={0x40, 0xb, 0x2, "95b2"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xb230}, &(0x7f0000000900)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000940)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, &(0x7f0000000980)={0x40, 0x19, 0x2}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000a00)={0x40, 0x1c, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000340)={0x40, 0x21, 0x1, 0xfd}}) syz_usb_disconnect(r4) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x5c, &(0x7f0000000480)={[{0x17, 0x4e00, "b81eab85e0a0ddbe95a91d056dab0197f3606eda586654"}, {0x39, 0x4e00, "ce0c32a7d9d6e656970b434ff2684077d52414ac46df7bb0921c8176cdf97196b8a18fa3c134320afdee25c234a573b137a3c4840fd2aa68d1"}]}) preadv(r11, &(0x7f0000000180)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0x0, 0x0) 9.558909209s ago: executing program 1 (id=1056): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)={0x40, 0x3, 0x2, "acd5"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.88534618s ago: executing program 3 (id=1063): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)={0x40, 0x3, 0x2, "acd5"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 7.566776311s ago: executing program 4 (id=1065): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = dup(r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r3, 0x6, 0xd, 0x0, 0x0) getsockopt$inet6_tcp_buf(r3, 0x6, 0x1a, 0x0, &(0x7f0000000080)) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r8) sendmsg$IEEE802154_LLSEC_ADD_KEY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="07062bbd7000fedbdf2527000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) syz_genetlink_get_family_id$netlbl_mgmt(0x0, r7) sendmsg$NLBL_MGMT_C_ADDDEF(r7, 0x0, 0xa000000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x68, 0x10, 0x401, 0xfffffffc, 0x80, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x40, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x30, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MACADDR_DATA={0x1c, 0x5, 0x0, 0x1, [{0xa, 0x4, @local}, {0xa, 0x4, @local}]}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x3}, @IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x68}, 0x1, 0x0, 0x0, 0x4001}, 0x0) 7.274947306s ago: executing program 3 (id=1066): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x401, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) socket$packet(0x11, 0x3, 0x300) ioctl$KVM_IRQ_LINE(0xffffffffffffffff, 0x4008ae61, 0x0) write$vga_arbiter(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) unshare(0x2c020400) mount$fuse(0x0, 0x0, &(0x7f0000000740), 0x8040a4, &(0x7f0000000240)=ANY=[]) syz_usb_connect$uac1(0x4, 0x98, &(0x7f0000000200)=ANY=[@ANYBLOB="12011003000000106b1d01014000010203010902860003010140750904000000010100000a24010600080201020904010000010200000904010101010200000b2402010c038f076d15630a24020198010f07347c0924020208000180020924020109010809590905010940020610050725010001070009040200000102000009040201010141d9420a0582090004ee007f072501020407"], &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x3, [{0x0, 0x0}, {0x0, 0x0}, {0x0, 0x0}]}) r5 = openat$ptmx(0xffffffffffffff9c, &(0x7f00000002c0), 0x60a80, 0x0) ioctl$TIOCSETD(r5, 0x5423, &(0x7f0000000080)=0x3) syz_emit_vhci(&(0x7f0000000280)=ANY=[@ANYBLOB="040302"], 0x4) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1a01, 0x0) ioctl$EVIOCGPROP(r6, 0x40047438, &(0x7f0000000180)=""/246) writev(r6, &(0x7f0000000440)=[{&(0x7f0000000280)="c021", 0x1700}], 0x1) 6.522836702s ago: executing program 0 (id=1067): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000"], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200009a00000000000000000000008500000027000000850000000700000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$cdc_ncm(0x1, 0xfb, &(0x7f0000002700)=ANY=[@ANYBLOB="12011002020000102505a1a44000010203010902e9000201f830080904000001020d0000072406000177bd0524002cc50d240f0102000000ff01f6000806241a010131052415060007240a040900ff042401020470241303fe4d576699da0ef4b298edc0d1243c9f25cad028d3f74bf7d8f8ac76f1b940ac30d28a1db0f50d2ea6788d40ce0ee9b44e12d4b9ccf2df3257e9d8c0074ad0509b0f67bfe97612921050da66a20d48741e74a81315b3e400ac004e3efc9a6d127eb088d7491405240102800524010180090581030004ec02040904010000020d00000904010102020d000009058202ff0307ef04090503020002098101"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) tee(0xffffffffffffffff, r3, 0x6, 0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0xd, 0x0, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000029c0)={0x2, 0xf, 0x6, 0x6, 0x23, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x2, 0x5, 0x9, 0x226, 0xe537}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0x6}, @sadb_lifetime={0x4, 0x3, 0xee, 0x1, 0x4, 0xffffffffffffffed}, @sadb_x_nat_t_type={0x1, 0x14, 0xa}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e20, 0x6, @local, 0xe}}, @sadb_lifetime={0x4, 0x3, 0x10001, 0x0, 0x8, 0x7}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd29, 0x3503}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0xcbe, @mcast2, 0x6}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x18027df8}}]}, 0x118}}, 0x80) ioctl$UI_GET_SYSNAME(r8, 0x8040552c, 0xfffffffffffffffc) prlimit64(r6, 0x2, &(0x7f0000000000)={0x6a90}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 6.454963042s ago: executing program 1 (id=1068): r0 = syz_usb_connect$hid(0x0, 0x3f, &(0x7f0000000240)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x46d, 0xc29c, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x0, 0x0, 0x50, 0xb1, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x3, 0x0, 0x3, 0x0, {0x9, 0x21, 0x101, 0x2, 0x1, {0x22, 0x3}}, {{{0x9, 0x5, 0x81, 0x3, 0x44, 0x9, 0x2, 0xfb}}, [{{0x9, 0x5, 0x2, 0x3, 0x20, 0x4, 0x10, 0x76}}]}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f00000003c0)={0x0, 0x8, 0x8, {0x8, 0x8, "2cf4b1aeed82"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) 6.404760928s ago: executing program 5 (id=1069): syz_usb_connect(0x5, 0x36, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) r3 = openat$iommufd(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r3, 0x3b81, &(0x7f00000003c0)={0xc, 0x0, 0x0}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r5) sendmsg$NLBL_CIPSOV4_C_ADD(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)={0x44, r6, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_TAGLST={0x4}, @NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x1}, @NLBL_CIPSOV4_A_DOI={0x8}, @NLBL_CIPSOV4_A_MLSLVLLST={0x4}, @NLBL_CIPSOV4_A_MLSCATLST={0x18, 0xc, 0x0, 0x1, [{0x14, 0xb, 0x0, 0x1, [@NLBL_CIPSOV4_A_MLSCATLOC={0x8}, @NLBL_CIPSOV4_A_MLSCATREM={0x8}]}]}]}, 0x44}}, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(r3, 0x3ba0, &(0x7f00000002c0)={0x48, 0x5, r4, 0x0, 0xffffffffffffffff, 0x1}) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(r3, 0x3ba0, &(0x7f0000000100)={0x48, 0x7, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2752ad}) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r8, &(0x7f0000000100)={0x1f, 0xffff}, 0x6) r9 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fff7ff9}]}) syz_fuse_handle_req(0xffffffffffffffff, 0x0, 0x0, &(0x7f0000006bc0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000006680)={0x90, 0x0, 0x54, {0x1, 0x2, 0x7, 0x3, 0x8, 0x7e0, {0x0, 0x3d727124, 0x7ff, 0x7ff, 0x653, 0xd9c, 0x0, 0x1d3, 0xfffffff7, 0x6000, 0x8, 0x0, 0x0, 0x5, 0x100}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) fchown(r9, 0x0, 0x0) close_range(r9, 0xffffffffffffffff, 0x0) 5.633352824s ago: executing program 4 (id=1070): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = getuid() r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x120}}, 0x50) sendmmsg$unix(r2, &(0x7f00000117c0)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000400)="85d63d2c2dbc5228aed47c875f4ddc3ead96809dd1698da66122d064cd6683208b58e4c7c7b81cb4962e725cd7f600fa9cae79171c5d27ae1d0b3259c4ad9fac8d83e1c4025ffe9538483d7d9d8554402329b1349f007add5d961e886f3b9dde1d83e8c8cd5021b5c440fdf8ce06b020d65764d24918494b692d8138a2f8c1ec548e92683e9b5d5ce57e2569", 0x8c}], 0x1, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r10}}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r11, r9}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r1, r0, r0]}}], 0xf8, 0x8004000}}, {{&(0x7f000000e280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000e700)=[{&(0x7f000000e300)="b5043ca24a04b1ef855655237b018b62ed32f4ac2b40b6af42987630b4bb3e9c7df54121d1201bce5c3afa2126c1ddc9d63487f982480c4d751a8c634a8927cd73173456ce5ae0c474c5207064bc851c9016a6cc23e087e0cee2a2bd212f57d2d6c263ab4bbc830b4bbe1a882d35a842ad3f5ae563fa22d1e35ca75d75fb96503ee75a0216e601c846ff3b06bb2c78669e257423caf6c902828a415ddb9a832a0d8b0c68c4cd2f02cfdb3dc2ac798b95b36baf268c851678caae87fb7d189ab21bd1210a2760dac4e4ce095104e8cade0b131e9bed3e083f1eaf6c18f59ee21a0dda415d01caefba5b", 0xe9}, {&(0x7f000000e400)="20cc27ae4901cd55f4c0f8f58b91ac938d2ad0ff26957d41ade4771d517a891164c02f77bcbd41543958f990c7c6b72b05df583d0d8eefdc3c767385890e3491cbaa089988bfacc8c261317018ebc8b39b9112ffecff4f25514e8c3dab16ef1f393949014b6699816e0229eff0ecccd26c6870ad1dce148fe4eb7ba6bd9c0f4ef5ccd68853bb7456422bdc12b6629e2efc745f8fd2b8f65da67e850c1485b4173b46", 0xa2}, {&(0x7f000000e4c0)="9bb9fb8542f9ab5636fb105089486fadc70f21efc92ea08f9d323ec82be516ee69e7d0eca3fd91e1e5dcd071c0d366b2ffbf3277e67a622887035ecce0ccc67a4d3c6089d48257f7096dff0ec4dd989c75546a55c1bb8bbfee5bcfa389fd87b7c29a37a619efa15f29fba331127bdaf5e8947cc946b9c26ab0c39d940219c227e1884e9e3d06bac71996137a151166d33a7c3aa3d3c0d7d4349dc04e9f2291dd4ee5d7aaff8949f22cc1e4650cafa8cc99623325aef77c393363c22f409a2631fb8c4a185ff9b6f19bb24e7e8423fe058708e38620f1ae46451048d4f7cb5de0127b40d09a9bbe3e33cdc4093469537d94", 0xf1}, {&(0x7f00000004c0)="5ef9394db083c4efda3d35c359b278a5b2ccfa27a1e8ffa06213ce8326f1875666076e7076a760ccd5a6d8865494320276aafc82315a536d20febbd95214328d70af494ffc6e0906190381a50de5222c99b75ebfcfe4785a63300aaed54f52478b9dc956330f292b862b7bbe11991f601fc43d15014b36", 0x77}, {&(0x7f000000e640)="0a12c32b5f04d51cbf7c9deca81cbda72f45a40e2001dfbe8370f2ac40b62eb5349448ebb0ae7802eb89d16b9afc44f41d79f1d56979ab12df86404d925f30ba2f6c1face6a29ab9e56f3ccfe1b08cbaf9aa9aef57f31ea3820ee6c6f1ecff3fc0bcae3c392e907c4a307aad170faefbe0bc47dc413b7fb1b975fd7116272c35d8ebcfefb7b7431f25cc73c5986f12cdf212295ca0a7a9ce122415641f5602da2a35137f03c731f0771116c02238ea645f351c", 0xb3}], 0x5, &(0x7f000000e7c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdff0300"/20, @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="10000000000000000100000001000000"], 0x70, 0x24008000}}, {{&(0x7f000000e840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000ec00)=[{&(0x7f000000e8c0)="575300913b19", 0x6}, {&(0x7f000000e900)="01f42c66b0e13e17b99dace00e33d1835bf306c267a245fcda77354b4464c78e272d2014cf1a38818015fc5785ed12bebfb549be1327d1a699b7408d12518e572ba41eba9a8c755d824e9e25084588d8935ff0280b25c15d9862c0e8e213c4653fa65ce86ae63eff2d817b2e9c3d6b851e0c949a62d622dbb313ba3c5b9c65578a84899726e5559420b557a3d0162fb21a45bc9b6c2fec150f3e6daccd6dcc738783d384514997ee273a9cafa76aa7b21035594c7c2dd80035ff938b4285359bad34600c17f4882c2188b34bb7f9136273776b71c96714280320bfdb02b6ef", 0xdf}, {&(0x7f000000ea00)="528da205d123f00022fa262c0420fc0089559ba22bedbd4aef724dd319187b17d067ca351d655b291c50b8b6fb14fcbe9c5cac55f05f18985c305101df123989a93b56af8df5ab537920d416cf618a6c213e8dc1f0a1fa2c27dbdec63aa51df06f792a32d3b849347026fd4e207008b75e1864347bcd51a0f22134ef0b79c5929fb1e5b961fa8c28df0b195cc1db74eda23ca5b1c2803bad3234a399af81ad4b416d8632c5da92f733df09cf61fdc69c517caa5042f53cc98469c7e67a4e091c1fe6d080aff0dc412fe5bde42defac72e732b96ef1f878a790940b", 0xdb}, {&(0x7f000000eb00)}, {&(0x7f000000eb40)="1df41711511eb41dfb23d40686bbf1dcb183659ddf8a8a0b19f7a5247ee0d92041ab65d2a0c9b4c68abf769d0fac60aa75330ad6a5b9323715fa787064d370f6629969d5b4d64c0a434d95122d79cb5473dbc4c935685d901af51023597cece2f68bb12c766695db433ac5525733bc7dd9bd2658037adc237215cce749c06449b2d05c1e1bcc2f63f9a8c0d62bc27aa7e16b318927b8da708935682e2164351e0ff9a34b346bfd8101540573666dcb5506532ab63b71c174", 0xb8}], 0x5, 0x0, 0x0, 0x4000004}}, {{&(0x7f000000ec80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000ed80)=[{&(0x7f000000ed00)="9557d95f91d384453097268da2e557eb081fadc443dbef8dae50be0eaef9452b0b91dd47539c2a11f982496c95085a5119f86e1f79f3d52dd2776ad3c710e71bf416f3c564d9f07997892c900a45890297d9fabd", 0x54}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="711aa710700b0631f4c3c8ad061862f624b230c0bdaa4dede94dfc3a0aa429e2355cb9856996ad3b9fde90d1fb8869c508c241d20664d4f270cf0c04a5be809b208de546cdc928ab0f7309c29e468055444fe6a04565ec0ed140", @ANYRES32, @ANYRES32=r7], 0x18, 0x400c000}}, {{0x0, 0x0, &(0x7f000000f000)=[{&(0x7f000000ee00)="a22b809a2cbd728f71690bb46ad74cc88330c061dad86c6863f0eabd1ba94714087397d0e85eac5ea0d92f962570ddf929b1fd33864920de8e4a49049cd6499f19ece3494ab9e454fb49db66bca1b0ccc1d8524293e171168897e550d42b283f307d2be00091ca64e90264cdc72ed2023417adf01606abb5e11f628febe2483a", 0x80}, {&(0x7f0000000600)="552ad38f33477f2d6ebc13e37e5d5b755fa6703487690f229301fa829451082e4401fdbb2083edfe6436fc237cbaca83a14daa2ae56c8c697033a8436eba5dbe5a3845ff03dc78a9cdab2879c681f9171e087e6e4dbaf086bc98b8f948f986f32d5cc23352d9ce3787194bf5c2aa74615ce383440d", 0x75}, {&(0x7f000000ef00)="230f1c1e78257b95977ab29e6ab0c371a571eaedc3345ea7cd524ab18aa1c288bfd165fb21ce09ecb23d8b5cd105437b75c834a0ed38875370f12909113041a3e45db02f5497395e5eddfb7d2ab433037b3bb2d1c20f", 0x56}, {&(0x7f000000ef80)="3fad524e29af202870ffee45dfef521d9707bd36dfbe0042e1ee20396389f917c3f71c7c916069f9a90b6998548c4b696ef0c3d20ee4993eb25df715228802da9edca4eb52624c5dd2b6bba355891ef00788db", 0x53}], 0x4, &(0x7f0000004540)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES16=r10, @ANYRES32=r2, @ANYRES32=r7, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000a1b24a5723d86263f409000000798d4fc025151ee2fc00615c5feff781731df503ccfb", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYBLOB="73a2ec9302161b8ef80be90c361149a116f6f3d244e408f92c66ce658266041c5a3d9994ada123575e378c546320bd8afa2933fb33279bc40b69422e99de7b7e753d07ed8f2928ced111070b", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="9565de2e15f0cba6fba036178ad5edb13aedfd90e6400e08949cd0a9a9f8ea18167acf66b6691f4c12d435d7b97da20ade5cc5fadfb12cd5cc83e971c799e0261a3ad109b57c1799aaf24ddb74a2bf78f8a8da5a23a5523318fc12787cd1845efa2c492cc64cee42277e7941f85eb9a32a3c5ce7ddbf4ec0ed39f0d1e5971c80c59ccf109cc0ad19b9858cf0636553646efce7d50d", @ANYRES32=r7, @ANYBLOB="10000000000000000100000001000000"], 0xe0, 0xc009}}, {{&(0x7f000000f2c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000010380)=[{&(0x7f0000000300)="6c55846ead2b492636536c817b4d36079c764e151ca0df57c85ba5bcb34d3f8c217e5db728297ade262e940dbe54cec102d9db7be3a2c55648fadc6f", 0x3c}, {&(0x7f000000f380)="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", 0x1000}], 0x2, &(0x7f0000000800)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r3}}}, @rights={{0x28, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x6d, 0x1, 0x2, {r5, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r11, r3, r10}}}, @rights={{0x2c, 0x1, 0x1, [r0, r7, r7, 0xffffffffffffffff, r7, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r6}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r10}}}], 0x150, 0x884}}, {{&(0x7f00000104c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000011540)=[{&(0x7f0000010540)="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", 0x1000}], 0x1, &(0x7f0000004280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118, 0x20000000}}], 0x7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38, 0x5, 0x10000001, 0x0, 0x0, 0x2, 0x9, 0x700b86cb, 0x40, 0x83}, 0x0) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x8baa, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, 0x0, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(r4, 0x0, 0x0) 5.50459014s ago: executing program 4 (id=1071): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='virtio_transport_alloc_pkt\x00'}, 0x18) prlimit64(0x0, 0xe, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20000801) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) capset(&(0x7f0000000000)={0x20071026}, &(0x7f0000000040)={0x200000, 0x200003, 0x0, 0x0, 0x7, 0x3}) r0 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x23}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) syz_80211_inject_frame(0x0, 0x0, 0xb5) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$unix(0x1, 0x2, 0x0) r4 = socket$inet6(0xa, 0x80002, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$inet6_mreq(r4, 0x29, 0x1b, 0x0, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000d00)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa1e86dd6000010400008700fc010000000000"], 0x0) syz_open_dev$video4linux(0x0, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 5.167170032s ago: executing program 5 (id=1072): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e06"], 0x9) 5.138374613s ago: executing program 5 (id=1073): ioctl$TIOCSETD(0xffffffffffffffff, 0x5423, 0x0) capset(&(0x7f0000000000)={0x20080522}, 0x0) r0 = openat$mixer(0xffffffffffffff9c, &(0x7f0000000040), 0x101000, 0x0) r1 = syz_io_uring_setup(0x8d2, &(0x7f00000000c0)={0x0, 0x951a, 0x3010, 0x1}, &(0x7f0000000140)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f0000000200)=@IORING_OP_MADVISE={0x19, 0x1, 0x0, 0x0, 0x0, &(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x17, 0x1}) io_uring_enter(r1, 0x47ba, 0x3e80, 0x0, 0x0, 0x0) ioctl$SOUND_MIXER_INFO(r0, 0x805c4d65, &(0x7f0000000080)) r4 = syz_usb_connect(0x5, 0x46, &(0x7f0000000780)=ANY=[], 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r6, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="28001000", @ANYRES16=r8, @ANYBLOB="0700000000000000000002000000140001"], 0x28}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x18, r10, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0xff07}, 0x2004000) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x14, 0x2d, 0x9, 0x70bd27, 0x0, {0x5}}, 0x14}}, 0x84) r11 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) syz_usb_control_io(r4, &(0x7f0000000500)={0x2c, &(0x7f00000001c0)=ANY=[@ANYBLOB="4006840000008422bf882320a070480b2d0618b01e7f939616d9d08f2133dbc0c0e8aaf14627ca9cc1462a93ede7ead42f52b94b3db8e80fdc6cf26f012553df63c09e889579448008a9c40ff68cca31c2aaa94fc28105b88d852b3079df26caad1d195dfc31f650e32460043d95f7592a130cc94092d881a8e42b88adacd4f2ca970351491c323d6562"], &(0x7f0000000280)={0x0, 0x3, 0x91, @string={0x91, 0x3, "9f716b814adc753dfb0f1d4046c1dd28758022a4117a10b1f135ca3a218527726ad38f62662e4fa751439548f44e23518fa57b8c42cd040f4e66609bdf1d5d61346b91d85cd4759026efb86c13120ef12e2a0954bd5de305906f991bfce6b8e1a828ee88d237779d488e87bd7d124bd64c48eb7dacfa69fd539e28353e3828c30737755b7a2e8c48664aa184c47eb1"}}, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000540)={0x20, 0x29, 0xf, {0xf, 0x29, 0x3, 0x80, 0x9e, 0x6, "9b21ac18", "8d29cfc4"}}, &(0x7f0000000140)={0x20, 0x2a, 0xc, {0xc, 0x2a, 0x7, 0x18, 0x1d, 0x3, 0xd2, 0xc2, 0x800}}}, &(0x7f0000000ac0)={0x84, &(0x7f0000000380)=ANY=[@ANYBLOB="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"], &(0x7f0000000680)={0x0, 0xa, 0x1, 0x5}, &(0x7f00000006c0)={0x0, 0x8, 0x1, 0x3}, &(0x7f0000000700)={0x20, 0x0, 0x4, {0x3, 0x1}}, &(0x7f0000000740)={0x20, 0x0, 0x8, {0x1000, 0x29, [0xf]}}, &(0x7f0000000800)={0x40, 0x7, 0x2, 0x33}, &(0x7f0000000840)={0x40, 0x9, 0x1}, &(0x7f0000000880)={0x40, 0xb, 0x2, "95b2"}, &(0x7f00000008c0)={0x40, 0xf, 0x2, 0xb230}, &(0x7f0000000900)={0x40, 0x13, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}}, &(0x7f0000000940)={0x40, 0x17, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3f}}, &(0x7f0000000980)={0x40, 0x19, 0x2}, &(0x7f00000009c0)={0x40, 0x1a, 0x2, 0x2}, &(0x7f0000000a00)={0x40, 0x1c, 0x1}, &(0x7f0000000a40)={0x40, 0x1e, 0x1, 0x1}, &(0x7f0000000340)={0x40, 0x21, 0x1, 0xfd}}) syz_usb_disconnect(r4) syz_usb_ep_write$ath9k_ep1(r4, 0x82, 0x5c, &(0x7f0000000480)={[{0x17, 0x4e00, "b81eab85e0a0ddbe95a91d056dab0197f3606eda586654"}, {0x39, 0x4e00, "ce0c32a7d9d6e656970b434ff2684077d52414ac46df7bb0921c8176cdf97196b8a18fa3c134320afdee25c234a573b137a3c4840fd2aa68d1"}]}) preadv(r11, &(0x7f0000000180)=[{&(0x7f0000000080)=""/85, 0x55}], 0x1, 0x0, 0x0) 4.813215002s ago: executing program 4 (id=1074): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000400)={0x0, 0x6}, 0x0) listen(0xffffffffffffffff, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8f}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x6) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) fstat(r3, &(0x7f0000000440)) prctl$PR_SET_IO_FLUSHER(0x39, 0x1) bind$inet(0xffffffffffffffff, &(0x7f0000000100)={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x25, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x10) 4.152013008s ago: executing program 0 (id=1075): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0xfe5d, 0x30, 0x1, 0x0, 0x0, {}, [{0x90, 0x1, [@m_ct={0x44, 0x2, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18, 0x1, {0x9d, 0x11e41e7a, 0x20000000, 0x3, 0xf}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x804}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000580)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_sfeatures={0x51}}) prlimit64(0x0, 0xb, &(0x7f0000000540)={0xc, 0x9}, 0x0) (async) prlimit64(0x0, 0xb, &(0x7f0000000540)={0xc, 0x9}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) syz_open_dev$usbfs(&(0x7f0000000280), 0x3, 0x389001) (async) r5 = syz_open_dev$usbfs(&(0x7f0000000280), 0x3, 0x389001) ioctl$TIOCSETD(r4, 0x5423, &(0x7f0000000080)=0xf) ioctl$TCFLSH(r4, 0x400455c8, 0x4) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) (async) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000180)) r6 = openat$audio(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) (async) ioctl$USBDEVFS_CONTROL(r5, 0xc0105500, &(0x7f0000000500)={0x40, 0xf, 0x5, 0x1ff, 0x0, 0x5, 0x0}) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) (async) ioctl$SNDCTL_DSP_CHANNELS(r6, 0xc0045006, &(0x7f0000000080)=0x7f) ioctl$SNDCTL_DSP_SPEED(r6, 0xc0045002, &(0x7f0000000000)=0x40000001) r7 = openat$fb0(0xffffffffffffff9c, &(0x7f00000002c0), 0x0, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x4e20, 0x80000000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xf}, 0x1c) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) (async) ioctl$FBIOPUT_VSCREENINFO(r7, 0x4601, &(0x7f0000000380)={0x320, 0x78, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, {}, {}, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4, 0x8, 0x3, 0x1ff, 0x3d, 0x5, 0x3, 0x53, 0x202, 0x1, 0xc}) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f00000005c0)=""/131, 0x83, 0x0, &(0x7f0000000680)=""/4096, 0x1000}}, 0x10) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1}, 0x8) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000300)={0x1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={0x0, &(0x7f0000000340)=""/2, 0x0, 0x2, 0x1, 0x47}, 0x28) 4.131540305s ago: executing program 1 (id=1076): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r0]) 4.041489812s ago: executing program 1 (id=1077): r0 = socket$netlink(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x84}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r1}, 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, r2}, 0x38) close_range(r0, 0xffffffffffffffff, 0x0) 4.029797664s ago: executing program 3 (id=1078): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000000000105509147200ed0000000109022400010000000009040000030300000009210000000122050009058103"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x802, 0x0) openat$ptmx(0xffffffffffffff9c, 0x0, 0x2000, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000200)=0x5) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x80200, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) mkdir(&(0x7f00000003c0)='./file0\x00', 0x21) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='sysfs\x00', 0x1214040, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f0000000300)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) mkdir(&(0x7f0000000200)='./bus\x00', 0x10) chroot(&(0x7f0000000000)='./bus\x00') syz_open_dev$tty1(0xc, 0x4, 0x1) 3.893270938s ago: executing program 4 (id=1079): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000140)={{0x12, 0x1, 0x0, 0xb5, 0x40, 0x33, 0x40, 0x1a86, 0x7522, 0x3536, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0xe4, 0xd6, 0x24}}]}}]}}, 0x0) syz_usb_control_io$cdc_ecm(r0, 0x0, &(0x7f0000000040)={0x1c, &(0x7f0000000200)={0x40, 0x3, 0x2, "acd5"}, 0x0, 0x0}) syz_usb_control_io$cdc_ecm(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) 2.450718821s ago: executing program 1 (id=1080): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = syz_usb_connect(0x0, 0x3f, &(0x7f00000000c0)=ANY=[@ANYBLOB="11010000733336088dee1edb23610000000109022d0101100000000904000003fe03010009cd8d1f0002000000090505020000fcffff09058b1e20"], 0x0) syz_usb_control_io$printer(r0, 0x0, &(0x7f0000000480)={0x53, &(0x7f00000001c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0}) r1 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) r2 = syz_open_dev$char_usb(0xc, 0xb4, 0x0) ioctl$EVIOCGMASK(r2, 0x5b02, 0x0) read$char_usb(r1, 0x0, 0x0) syz_usb_disconnect(r0) syz_open_dev$char_usb(0xc, 0xb4, 0xc) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r3 = syz_open_dev$sndmidi(0x0, 0x2, 0x141102) writev(r3, &(0x7f0000000840)=[{0x0}, {0x0}], 0x2) clock_gettime(0x2, &(0x7f00000010c0)) 2.246709439s ago: executing program 0 (id=1081): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) read$FUSE(0xffffffffffffffff, &(0x7f0000000c80)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r6 = getuid() r7 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)={{'fd', 0x3d, r7}, 0x2c, {'rootmode', 0x3d, 0x4000}}) read$FUSE(r7, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) write$FUSE_INIT(r7, &(0x7f0000004200)={0x50, 0x0, r8, {0x7, 0x29, 0xfffffffe, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x0, 0x120}}, 0x50) sendmmsg$unix(r2, &(0x7f00000117c0)=[{{&(0x7f0000000380)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000000040)=[{&(0x7f0000000400)="85d63d2c2dbc5228aed47c875f4ddc3ead96809dd1698da66122d064cd6683208b58e4c7c7b81cb4962e725cd7f600fa9cae79171c5d27ae1d0b3259c4ad9fac8d83e1c4025ffe9538483d7d9d8554402329b1349f007add5d961e886f3b9dde1d83e8c8cd5021b5c440fdf8ce06b020d65764d24918494b692d8138a2f8c1ec548e92683e9b5d5ce57e2569", 0x8c}], 0x1, &(0x7f0000002cc0)=[@cred={{0x1c, 0x1, 0x2, {r5, r6, r10}}}, @rights={{0x10}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {r11, r9}}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [r1, 0xffffffffffffffff, r2, r1]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r2, r2, r1, r0, r0]}}], 0xf8, 0x8004000}}, {{&(0x7f000000e280)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000e700)=[{&(0x7f000000e300)="b5043ca24a04b1ef855655237b018b62ed32f4ac2b40b6af42987630b4bb3e9c7df54121d1201bce5c3afa2126c1ddc9d63487f982480c4d751a8c634a8927cd73173456ce5ae0c474c5207064bc851c9016a6cc23e087e0cee2a2bd212f57d2d6c263ab4bbc830b4bbe1a882d35a842ad3f5ae563fa22d1e35ca75d75fb96503ee75a0216e601c846ff3b06bb2c78669e257423caf6c902828a415ddb9a832a0d8b0c68c4cd2f02cfdb3dc2ac798b95b36baf268c851678caae87fb7d189ab21bd1210a2760dac4e4ce095104e8cade0b131e9bed3e083f1eaf6c18f59ee21a0dda415d01caefba5b", 0xe9}, {&(0x7f000000e400)="20cc27ae4901cd55f4c0f8f58b91ac938d2ad0ff26957d41ade4771d517a891164c02f77bcbd41543958f990c7c6b72b05df583d0d8eefdc3c767385890e3491cbaa089988bfacc8c261317018ebc8b39b9112ffecff4f25514e8c3dab16ef1f393949014b6699816e0229eff0ecccd26c6870ad1dce148fe4eb7ba6bd9c0f4ef5ccd68853bb7456422bdc12b6629e2efc745f8fd2b8f65da67e850c1485b4173b46", 0xa2}, {&(0x7f000000e4c0)="9bb9fb8542f9ab5636fb105089486fadc70f21efc92ea08f9d323ec82be516ee69e7d0eca3fd91e1e5dcd071c0d366b2ffbf3277e67a622887035ecce0ccc67a4d3c6089d48257f7096dff0ec4dd989c75546a55c1bb8bbfee5bcfa389fd87b7c29a37a619efa15f29fba331127bdaf5e8947cc946b9c26ab0c39d940219c227e1884e9e3d06bac71996137a151166d33a7c3aa3d3c0d7d4349dc04e9f2291dd4ee5d7aaff8949f22cc1e4650cafa8cc99623325aef77c393363c22f409a2631fb8c4a185ff9b6f19bb24e7e8423fe058708e38620f1ae46451048d4f7cb5de0127b40d09a9bbe3e33cdc4093469537d94", 0xf1}, {&(0x7f00000004c0)="5ef9394db083c4efda3d35c359b278a5b2ccfa27a1e8ffa06213ce8326f1875666076e7076a760ccd5a6d8865494320276aafc82315a536d20febbd95214328d70af494ffc6e0906190381a50de5222c99b75ebfcfe4785a63300aaed54f52478b9dc956330f292b862b7bbe11991f601fc43d15014b36", 0x77}, {&(0x7f000000e640)="0a12c32b5f04d51cbf7c9deca81cbda72f45a40e2001dfbe8370f2ac40b62eb5349448ebb0ae7802eb89d16b9afc44f41d79f1d56979ab12df86404d925f30ba2f6c1face6a29ab9e56f3ccfe1b08cbaf9aa9aef57f31ea3820ee6c6f1ecff3fc0bcae3c392e907c4a307aad170faefbe0bc47dc413b7fb1b975fd7116272c35d8ebcfefb7b7431f25cc73c5986f12cdf212295ca0a7a9ce122415641f5602da2a35137f03c731f0771116c02238ea645f351c", 0xb3}], 0x5, &(0x7f000000e7c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fdff0300"/20, @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="0000000020000000000000000100000001000000", @ANYRES32=r7, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="10000000000000000100000001000000"], 0x70, 0x24008000}}, {{&(0x7f000000e840)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f000000ec00)=[{&(0x7f000000e8c0)="575300913b19", 0x6}, {&(0x7f000000e900)="01f42c66b0e13e17b99dace00e33d1835bf306c267a245fcda77354b4464c78e272d2014cf1a38818015fc5785ed12bebfb549be1327d1a699b7408d12518e572ba41eba9a8c755d824e9e25084588d8935ff0280b25c15d9862c0e8e213c4653fa65ce86ae63eff2d817b2e9c3d6b851e0c949a62d622dbb313ba3c5b9c65578a84899726e5559420b557a3d0162fb21a45bc9b6c2fec150f3e6daccd6dcc738783d384514997ee273a9cafa76aa7b21035594c7c2dd80035ff938b4285359bad34600c17f4882c2188b34bb7f9136273776b71c96714280320bfdb02b6ef", 0xdf}, {&(0x7f000000ea00)="528da205d123f00022fa262c0420fc0089559ba22bedbd4aef724dd319187b17d067ca351d655b291c50b8b6fb14fcbe9c5cac55f05f18985c305101df123989a93b56af8df5ab537920d416cf618a6c213e8dc1f0a1fa2c27dbdec63aa51df06f792a32d3b849347026fd4e207008b75e1864347bcd51a0f22134ef0b79c5929fb1e5b961fa8c28df0b195cc1db74eda23ca5b1c2803bad3234a399af81ad4b416d8632c5da92f733df09cf61fdc69c517caa5042f53cc98469c7e67a4e091c1fe6d080aff0dc412fe5bde42defac72e732b96ef1f878a790940b", 0xdb}, {&(0x7f000000eb00)}, {&(0x7f000000eb40)="1df41711511eb41dfb23d40686bbf1dcb183659ddf8a8a0b19f7a5247ee0d92041ab65d2a0c9b4c68abf769d0fac60aa75330ad6a5b9323715fa787064d370f6629969d5b4d64c0a434d95122d79cb5473dbc4c935685d901af51023597cece2f68bb12c766695db433ac5525733bc7dd9bd2658037adc237215cce749c06449b2d05c1e1bcc2f63f9a8c0d62bc27aa7e16b318927b8da708935682e2164351e0ff9a34b346bfd8101540573666dcb5506532ab63b71c174", 0xb8}], 0x5, 0x0, 0x0, 0x4000004}}, {{&(0x7f000000ec80)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f000000ed80)=[{&(0x7f000000ed00)="9557d95f91d384453097268da2e557eb081fadc443dbef8dae50be0eaef9452b0b91dd47539c2a11f982496c95085a5119f86e1f79f3d52dd2776ad3c710e71bf416f3c564d9f07997892c900a45890297d9fabd", 0x54}], 0x1, &(0x7f0000000680)=ANY=[@ANYBLOB="711aa710700b0631f4c3c8ad061862f624b230c0bdaa4dede94dfc3a0aa429e2355cb9856996ad3b9fde90d1fb8869c508c241d20664d4f270cf0c04a5be809b208de546cdc928ab0f7309c29e468055444fe6a04565ec0ed140", @ANYRES32, @ANYRES32=r7], 0x18, 0x400c000}}, {{0x0, 0x0, &(0x7f000000f000)=[{&(0x7f000000ee00)="a22b809a2cbd728f71690bb46ad74cc88330c061dad86c6863f0eabd1ba94714087397d0e85eac5ea0d92f962570ddf929b1fd33864920de8e4a49049cd6499f19ece3494ab9e454fb49db66bca1b0ccc1d8524293e171168897e550d42b283f307d2be00091ca64e90264cdc72ed2023417adf01606abb5e11f628febe2483a", 0x80}, {&(0x7f0000000600)="552ad38f33477f2d6ebc13e37e5d5b755fa6703487690f229301fa829451082e4401fdbb2083edfe6436fc237cbaca83a14daa2ae56c8c697033a8436eba5dbe5a3845ff03dc78a9cdab2879c681f9171e087e6e4dbaf086bc98b8f948f986f32d5cc23352d9ce3787194bf5c2aa74615ce383440d", 0x75}, {&(0x7f000000ef00)="230f1c1e78257b95977ab29e6ab0c371a571eaedc3345ea7cd524ab18aa1c288bfd165fb21ce09ecb23d8b5cd105437b75c834a0ed38875370f12909113041a3e45db02f5497395e5eddfb7d2ab433037b3bb2d1c20f", 0x56}, {&(0x7f000000ef80)="3fad524e29af202870ffee45dfef521d9707bd36dfbe0042e1ee20396389f917c3f71c7c916069f9a90b6998548c4b696ef0c3d20ee4993eb25df715228802da9edca4eb52624c5dd2b6bba355891ef00788db", 0x53}], 0x4, &(0x7f0000004540)=ANY=[@ANYBLOB="20000000000000000100000001000000", @ANYRES32=r0, @ANYRES32, @ANYRES32, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES16=r10, @ANYRES32=r2, @ANYRES32=r7, @ANYRES32, @ANYRES32=r0, @ANYRES32, @ANYBLOB="1c000000000000000100000002000000a1b24a5723d86263f409000000798d4fc025151ee2fc00615c5feff781731df503ccfb", @ANYRES32=r11, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000001c000000000000000100000001000000", @ANYBLOB="73a2ec9302161b8ef80be90c361149a116f6f3d244e408f92c66ce658266041c5a3d9994ada123575e378c546320bd8afa2933fb33279bc40b69422e99de7b7e753d07ed8f2928ced111070b", @ANYRES32=r2, @ANYRES32=r0, @ANYBLOB="0000000028000000000000000100000001000000", @ANYRES32, @ANYRES32, @ANYRES32, @ANYRES32=r0, @ANYBLOB="9565de2e15f0cba6fba036178ad5edb13aedfd90e6400e08949cd0a9a9f8ea18167acf66b6691f4c12d435d7b97da20ade5cc5fadfb12cd5cc83e971c799e0261a3ad109b57c1799aaf24ddb74a2bf78f8a8da5a23a5523318fc12787cd1845efa2c492cc64cee42277e7941f85eb9a32a3c5ce7ddbf4ec0ed39f0d1e5971c80c59ccf109cc0ad19b9858cf0636553646efce7d50d", @ANYRES32=r7, @ANYBLOB="10000000000000000100000001000000"], 0xe0, 0xc009}}, {{&(0x7f000000f2c0)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000010380)=[{&(0x7f0000000300)="6c55846ead2b492636536c817b4d36079c764e151ca0df57c85ba5bcb34d3f8c217e5db728297ade262e940dbe54cec102d9db7be3a2c55648fadc6f", 0x3c}, {&(0x7f000000f380)="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", 0x1000}], 0x2, &(0x7f0000000800)=[@rights={{0x2c, 0x1, 0x1, [r0, 0xffffffffffffffff, r1, r2, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c, 0x1, 0x2, {r11, r3}}}, @rights={{0x28, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x6d, 0x1, 0x2, {r5, 0x0, r4}}}, @cred={{0x1c, 0x1, 0x2, {r11, r3, r10}}}, @rights={{0x2c, 0x1, 0x1, [r0, r7, r7, 0xffffffffffffffff, r7, r7, r0]}}, @cred={{0x1c, 0x1, 0x2, {r11, r6}}}, @rights={{0x24, 0x1, 0x1, [r1, r1, 0xffffffffffffffff, r0, r7]}}, @cred={{0x1c, 0x1, 0x2, {r5, r6, r10}}}], 0x150, 0x884}}, {{&(0x7f00000104c0)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000011540)=[{&(0x7f0000010540)="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", 0x1000}], 0x1, &(0x7f0000004280)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [r0, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r0]}}, @cred={{0x1c, 0x1, 0x2, {0xffffffffffffffff}}}, @rights={{0x10}}, @rights={{0x30, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r1, 0xffffffffffffffff, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x118, 0x20000000}}], 0x7, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) fsopen(0x0, 0x0) sendmsg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) sched_setattr(0xffffffffffffffff, &(0x7f0000000240)={0x38, 0x5, 0x10000001, 0x0, 0x0, 0x2, 0x9, 0x700b86cb, 0x40, 0x83}, 0x0) r12 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r12, &(0x7f0000000580)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x8baa, @dev={0xfe, 0x80, '\x00', 0xe}, 0x5}, 0x1c, &(0x7f0000000b40)=[{&(0x7f0000000340)="f2", 0x1}], 0x1}}, {{&(0x7f0000000180)={0xa, 0x4e24, 0xff, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x1}, 0x1c, &(0x7f00000000c0)=[{&(0x7f00000001c0)="17", 0x1}], 0x1}}], 0x2, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r12, 0x84, 0x22, 0x0, 0x0) io_setup(0xffffff7f, &(0x7f0000000280)) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) setresgid(r4, 0x0, 0x0) 2.092624831s ago: executing program 0 (id=1082): openat$mice(0xffffffffffffff9c, 0x0, 0x500) socket$nl_route(0x10, 0x3, 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x20040, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000000000/0x18000)=nil, 0x0, 0x0, 0x74, 0x0, 0x0) ioctl$KVM_RUN(0xffffffffffffffff, 0xae80, 0x0) syz_open_procfs(0xffffffffffffffff, 0x0) r1 = getpid() prlimit64(r1, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r3, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x20}}}, 0x1c) sendmmsg$inet6(r3, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 2.030370378s ago: executing program 5 (id=1083): syz_emit_vhci(&(0x7f0000000100)=ANY=[@ANYBLOB="040e06"], 0x9) 1.709869403s ago: executing program 3 (id=1084): openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0xe9b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x8, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7030000850000000c000000b7000000000000008520000013000000"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$autofs(0xffffffffffffff9c, &(0x7f0000000100), 0x20180, 0x0) ioctl$AUTOFS_DEV_IOCTL_TIMEOUT(r1, 0xc018937a, 0x0) openat$fuse(0xffffffffffffff9c, 0x0, 0x42, 0x0) openat(0xffffffffffffff9c, 0x0, 0x40042, 0x1) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./bus\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000240)='./file1/file0\x00', 0x0) mount$bind(&(0x7f0000000100)='.\x00', &(0x7f0000000280)='./file1/file0\x00', 0x0, 0x201008, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f0, &(0x7f0000000080)={'bridge0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x9, 0x0, 0x8a, 0x0, 0x0, 0x2000000}}) setsockopt$packet_fanout_data(r2, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x48}, {0x6, 0x37, 0x0, 0x9}]}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0xd50, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608004c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f00000004c0)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file1/file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f0000001180)='./bus\x00') rmdir(&(0x7f0000000440)='./file0\x00') 1.618508077s ago: executing program 5 (id=1085): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x7, 0x100}, 0x0) getrlimit(0x4, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0x4002) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mount$afs(0x0, 0x0, &(0x7f00000002c0), 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$unix(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_open_dev$video(0x0, 0x7, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000001dc76dcd00000000", @ANYRES32=0x0], 0xc3}, 0x1, 0x100000000000000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x4000000000001f2, 0x0) 581.576555ms ago: executing program 0 (id=1086): r0 = socket$kcm(0xa, 0x922000000003, 0x11) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) close(r0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="48000000150081fb7059ae08060c04000aff0f11000000040011018701546fabca1b4e7d06a6bd7c493872f750375ed08a562af5745e17b8c119418f0f000000d6e74703c48f93b8", 0x48}], 0x1}, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010000a8f4dd086d0492082a6d0000000109021b0001000000"], 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x3, 0x5, &(0x7f00000006c0)=ANY=[@ANYBLOB="180200009a00000000000000000000008500000027000000850000000700000095"], &(0x7f0000000680)='GPL\x00'}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_usb_connect$cdc_ncm(0x1, 0xfb, &(0x7f0000002700)=ANY=[@ANYBLOB="12011002020000102505a1a44000010203010902e9000201f830080904000001020d0000072406000177bd0524002cc50d240f0102000000ff01f6000806241a010131052415060007240a040900ff042401020470241303fe4d576699da0ef4b298edc0d1243c9f25cad028d3f74bf7d8f8ac76f1b940ac30d28a1db0f50d2ea6788d40ce0ee9b44e12d4b9ccf2df3257e9d8c0074ad0509b0f67bfe97612921050da66a20d48741e74a81315b3e400ac004e3efc9a6d127eb088d7491405240102800524010180090581030004ec02040904010000020d00000904010102020d000009058202ff0307ef04090503020002098101"], 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) tee(0xffffffffffffffff, r3, 0x6, 0x7) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0xd, &(0x7f0000000040)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a6000000850000005000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x72, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r5, 0x8946, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) read$FUSE(0xffffffffffffffff, &(0x7f0000000500)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000100)={0x3ff8, 0x0, 0x0, 0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffe}, 0x94) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_buf(r7, 0x6, 0xd, 0x0, 0x0) add_key(0x0, &(0x7f0000000100)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffe) getsockopt$inet6_mptcp_buf(r7, 0x11c, 0x2, &(0x7f0000000100)=""/222, &(0x7f0000000000)=0x61637876) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) sendmsg$key(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000029c0)={0x2, 0xf, 0x6, 0x6, 0x23, 0x0, 0x70bd2b, 0x25dfdbfc, [@sadb_lifetime={0x4, 0x2, 0x5, 0x9, 0x226, 0xe537}, @sadb_ident={0x2, 0xa, 0x4, 0x0, 0x6}, @sadb_lifetime={0x4, 0x3, 0xee, 0x1, 0x4, 0xffffffffffffffed}, @sadb_x_nat_t_type={0x1, 0x14, 0xa}, @sadb_x_kmaddress={0x7, 0x19, 0x0, @in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0xe}}, @in6={0xa, 0x4e20, 0x6, @local, 0xe}}, @sadb_lifetime={0x4, 0x3, 0x10001, 0x0, 0x8, 0x7}, @sadb_x_sa2={0x2, 0x13, 0x5, 0x0, 0x0, 0x70bd29, 0x3503}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_x_kmaddress={0x8, 0x19, 0x0, @in6={0xa, 0x4e23, 0xcbe, @mcast2, 0x6}, @in6={0xa, 0x4e21, 0x4, @mcast2, 0x18027df8}}]}, 0x118}}, 0x80) ioctl$UI_GET_SYSNAME(r8, 0x8040552c, 0xfffffffffffffffc) prlimit64(r6, 0x2, &(0x7f0000000000)={0x6a90}, 0x0) add_key(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe) 2.267506ms ago: executing program 3 (id=1087): r0 = openat$nvram(0xffffffffffffff9c, &(0x7f00000000c0), 0x20000, 0x0) ioctl$FIONREAD(r0, 0x7041, 0x0) 0s ago: executing program 4 (id=1088): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r1, 0x400442c8, &(0x7f0000000100)=ANY=[@ANYRES32=r0, @ANYBLOB]) kernel console output (not intermixed with test programs): nverter now disconnected from ttyUSB3 [ 243.497207][ T5966] keyspan 2-1:0.107: device disconnected [ 243.531942][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 243.538621][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.546600][ T10] usb 5-1: no configurations [ 243.551200][ T10] usb 5-1: can't read configurations, error -22 [ 243.559660][ T10] usb usb5-port1: attempt power cycle [ 243.631924][ T5844] usb 4-1: device descriptor read/64, error -32 [ 243.727870][ T30] audit: type=1400 audit(1754157773.419:438): avc: denied { getopt } for pid=8098 comm="syz.0.516" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 243.750260][ T30] audit: type=1400 audit(1754157773.419:439): avc: denied { module_request } for pid=8098 comm="syz.0.516" kmod=6E65746465762D03 scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 243.872129][ T5844] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 243.901850][ T10] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 243.922582][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 243.929409][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 243.939659][ T10] usb 5-1: no configurations [ 243.944453][ T10] usb 5-1: can't read configurations, error -22 [ 244.051810][ T5844] usb 4-1: device descriptor read/64, error -32 [ 244.242991][ T8112] netlink: 8 bytes leftover after parsing attributes in process `syz.1.518'. [ 244.259699][ T8115] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=23 sclass=netlink_audit_socket pid=8115 comm=syz.2.519 [ 244.272189][ T30] audit: type=1400 audit(1754157773.949:440): avc: denied { watch watch_reads } for pid=8107 comm="syz.2.519" path="/100/file1" dev="tmpfs" ino=590 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 244.353209][ T10] usb 5-1: new high-speed USB device number 23 using dummy_hcd [ 244.401852][ T5844] usb 4-1: reset high-speed USB device number 19 using dummy_hcd [ 244.521323][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 244.621841][ T5844] usb 4-1: device not accepting address 19, error -71 [ 244.641199][ T10] usb 5-1: unable to get BOS descriptor or descriptor too short [ 244.648993][ T10] usb 5-1: no configurations [ 244.654193][ T10] usb 5-1: can't read configurations, error -22 [ 244.660868][ T10] usb usb5-port1: unable to enumerate USB device [ 245.608090][ T30] audit: type=1400 audit(1754157774.919:441): avc: denied { mounton } for pid=8119 comm="syz.3.520" path="/98/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 246.062840][ T8133] bridge0: entered promiscuous mode [ 246.068706][ T8133] macvlan2: entered promiscuous mode [ 246.388143][ T30] audit: type=1400 audit(1754157776.079:442): avc: denied { read } for pid=8129 comm="syz.3.523" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 246.424972][ T977] usb 4-1: USB disconnect, device number 19 [ 246.440347][ T30] audit: type=1400 audit(1754157776.079:443): avc: denied { open } for pid=8129 comm="syz.3.523" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 246.467960][ T8135] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 246.470450][ T30] audit: type=1400 audit(1754157776.109:444): avc: denied { ioctl } for pid=8129 comm="syz.3.523" path="/dev/usbmon7" dev="devtmpfs" ino=737 ioctlcmd=0x9207 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 246.823969][ T5844] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 247.235578][ T5844] usb 5-1: device descriptor read/64, error -71 [ 247.284411][ T8147] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=8147 comm=syz.2.526 [ 247.650928][ T8156] macvlan8: entered promiscuous mode [ 247.738853][ T8158] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=15 sclass=netlink_route_socket pid=8158 comm=syz.2.526 [ 247.843145][ T5844] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 247.983775][ T5844] usb 5-1: device descriptor read/64, error -71 [ 247.991022][ T30] audit: type=1400 audit(1754157777.679:445): avc: denied { connect } for pid=8165 comm="syz.3.531" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 248.016985][ T10] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 248.094723][ T977] hid-generic 0000:0000:0000.0009: unknown main item tag 0x0 [ 248.116329][ T977] hid-generic 0000:0000:0000.0009: hidraw0: HID v0.00 Device [syz1] on syz0 [ 248.143692][ T8171] netlink: 'syz.1.534': attribute type 1 has an invalid length. [ 248.172355][ T10] usb 1-1: device descriptor read/64, error -71 [ 248.212032][ T5844] usb usb5-port1: attempt power cycle [ 248.264780][ T8174] fido_id[8174]: Failed to open report descriptor at '/sys/devices/virtual/misc/uhid/report_descriptor': No such file or directory [ 248.439144][ T8181] random: crng reseeded on system resumption [ 248.452192][ T30] audit: type=1400 audit(1754157778.149:446): avc: denied { mounton } for pid=8178 comm="syz.3.536" path="/proc/364/cgroup" dev="proc" ino=17652 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=file permissive=1 [ 248.475228][ T10] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 248.496748][ T30] audit: type=1400 audit(1754157778.169:447): avc: denied { remount } for pid=8178 comm="syz.3.536" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 248.516321][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.557219][ C0] vkms_vblank_simulate: vblank timer overrun [ 248.572119][ T5966] usb 2-1: new high-speed USB device number 16 using dummy_hcd [ 248.631727][ T10] usb 1-1: device descriptor read/64, error -71 [ 248.721923][ T5966] usb 2-1: Using ep0 maxpacket: 32 [ 248.730492][ T5966] usb 2-1: config 0 has an invalid interface number: 89 but max is 0 [ 248.741077][ T5966] usb 2-1: config 0 has no interface number 0 [ 248.748706][ T10] usb usb1-port1: attempt power cycle [ 248.757134][ T5966] usb 2-1: config 0 interface 89 has no altsetting 0 [ 248.768116][ T5966] usb 2-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 248.779774][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 248.795847][ T5966] usb 2-1: Product: syz [ 248.800110][ T5966] usb 2-1: Manufacturer: syz [ 248.811437][ T5966] usb 2-1: SerialNumber: syz [ 248.835140][ T5966] usb 2-1: config 0 descriptor?? [ 248.853257][ T5966] em28xx 2-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 248.863481][ T5966] em28xx 2-1:0.89: Video interface 89 found: bulk [ 248.891816][ T5844] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 248.915907][ T5844] usb 5-1: device descriptor read/8, error -71 [ 249.198910][ T10] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 249.240564][ T8188] FAULT_INJECTION: forcing a failure. [ 249.240564][ T8188] name failslab, interval 1, probability 0, space 0, times 0 [ 249.253634][ T8188] CPU: 0 UID: 0 PID: 8188 Comm: syz.2.538 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 249.253659][ T8188] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 249.253670][ T8188] Call Trace: [ 249.253675][ T8188] [ 249.253682][ T8188] dump_stack_lvl+0x16c/0x1f0 [ 249.253717][ T8188] should_fail_ex+0x512/0x640 [ 249.253746][ T8188] ? do_handle_open+0x545/0xc50 [ 249.253764][ T8188] should_failslab+0xc2/0x120 [ 249.253785][ T8188] __kmalloc_noprof+0xd2/0x510 [ 249.253803][ T8188] ? bpf_lsm_capable+0x9/0x10 [ 249.253833][ T8188] do_handle_open+0x545/0xc50 [ 249.253852][ T8188] ? __pfx_do_handle_open+0x10/0x10 [ 249.253871][ T8188] ? irqentry_exit+0x3b/0x90 [ 249.253908][ T8188] ? do_syscall_64+0xcd/0x4c0 [ 249.253932][ T8188] do_syscall_64+0xcd/0x4c0 [ 249.253958][ T8188] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 249.253976][ T8188] RIP: 0033:0x7fb0b518eb69 [ 249.253990][ T8188] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 249.254007][ T8188] RSP: 002b:00007fb0b5f54038 EFLAGS: 00000246 ORIG_RAX: 0000000000000130 [ 249.254025][ T8188] RAX: ffffffffffffffda RBX: 00007fb0b53b6080 RCX: 00007fb0b518eb69 [ 249.254036][ T8188] RDX: 0000000000000000 RSI: 0000200000000000 RDI: 0000000000000004 [ 249.254047][ T8188] RBP: 00007fb0b5f54090 R08: 0000000000000000 R09: 0000000000000000 [ 249.254057][ T8188] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 249.254068][ T8188] R13: 0000000000000000 R14: 00007fb0b53b6080 R15: 00007ffd71ecdeb8 [ 249.254092][ T8188] [ 249.421965][ C0] vkms_vblank_simulate: vblank timer overrun [ 249.684180][ T8191] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8191 comm=syz.4.539 [ 249.713482][ T10] usb 1-1: device descriptor read/8, error -71 [ 249.971760][ T5966] em28xx 2-1:0.89: unknown em28xx chip ID (0) [ 250.969924][ T10] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 251.167460][ T8201] macvlan9: entered promiscuous mode [ 251.262964][ T10] usb 1-1: device descriptor read/8, error -71 [ 251.394469][ T10] usb usb1-port1: unable to enumerate USB device [ 251.465124][ T5966] em28xx 2-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 251.483204][ T5966] em28xx 2-1:0.89: board has no eeprom [ 251.696225][ T8213] IPv6: Can't replace route, no match found [ 251.757291][ T5966] em28xx 2-1:0.89: Identified as Terratec Grabby (card=67) [ 251.770356][ T5966] em28xx 2-1:0.89: analog set to bulk mode. [ 251.785010][ T10] em28xx 2-1:0.89: Registering V4L2 extension [ 251.802075][ T5966] usb 2-1: USB disconnect, device number 16 [ 251.824393][ T5966] em28xx 2-1:0.89: Disconnecting em28xx [ 252.052536][ T10] em28xx 2-1:0.89: Config register raw data: 0xffffffed [ 252.060365][ T10] em28xx 2-1:0.89: AC97 chip type couldn't be determined [ 252.069888][ T10] em28xx 2-1:0.89: No AC97 audio processor [ 252.080438][ T10] usb 2-1: Decoder not found [ 252.087574][ T10] em28xx 2-1:0.89: failed to create media graph [ 252.092258][ T5844] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 252.653858][ T10] em28xx 2-1:0.89: V4L2 device video103 deregistered [ 252.664771][ T30] audit: type=1400 audit(1754157782.359:448): avc: denied { create } for pid=8223 comm="syz.0.549" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 252.690261][ T10] em28xx 2-1:0.89: Registering snapshot button... [ 252.713790][ T10] input: em28xx snapshot button as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.89/input/input28 [ 252.732822][ T10] em28xx 2-1:0.89: Remote control support is not available for this card. [ 252.748596][ T5966] em28xx 2-1:0.89: Closing input extension [ 252.755225][ T5966] em28xx 2-1:0.89: Deregistering snapshot button [ 252.833170][ T5844] usb 5-1: device descriptor read/64, error -71 [ 252.899033][ T5966] em28xx 2-1:0.89: Freeing device [ 252.948425][ T30] audit: type=1400 audit(1754157782.639:449): avc: denied { ioctl } for pid=8230 comm="syz.3.550" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4605 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 252.973338][ C1] vkms_vblank_simulate: vblank timer overrun [ 253.122020][ T5844] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 253.261767][ T5844] usb 5-1: device descriptor read/64, error -71 [ 253.345771][ T8247] netlink: 80 bytes leftover after parsing attributes in process `syz.0.552'. [ 253.382035][ T5844] usb usb5-port1: attempt power cycle [ 253.674626][ T30] audit: type=1400 audit(1754157783.369:450): avc: denied { map } for pid=8248 comm="syz.3.557" path="socket:[17775]" dev="sockfs" ino=17775 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 253.731732][ T5844] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 253.752168][ T5844] usb 5-1: device descriptor read/8, error -71 [ 253.772080][ T5966] usb 2-1: new full-speed USB device number 17 using dummy_hcd [ 253.972488][ T5966] usb 2-1: too many configurations: 214, using maximum allowed: 8 [ 253.983172][ T5966] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 253.991038][ T5966] usb 2-1: can't read configurations, error -61 [ 254.122554][ T5966] usb 2-1: new full-speed USB device number 18 using dummy_hcd [ 254.130297][ T5844] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 254.183140][ T5844] usb 5-1: device descriptor read/8, error -71 [ 254.292309][ T5966] usb 2-1: too many configurations: 214, using maximum allowed: 8 [ 254.293858][ T30] audit: type=1400 audit(1754157783.989:451): avc: denied { getopt } for pid=8258 comm="syz.3.559" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 254.305003][ T5966] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 254.320566][ C1] vkms_vblank_simulate: vblank timer overrun [ 254.338521][ T5844] usb usb5-port1: unable to enumerate USB device [ 254.471808][ T5966] usb 2-1: can't read configurations, error -61 [ 254.510750][ T5966] usb usb2-port1: attempt power cycle [ 254.769887][ T8263] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 254.813047][ T30] audit: type=1400 audit(1754157784.509:452): avc: denied { connect } for pid=8265 comm="syz.4.561" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.834527][ T30] audit: type=1400 audit(1754157784.539:453): avc: denied { read } for pid=8265 comm="syz.4.561" path="socket:[17860]" dev="sockfs" ino=17860 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 254.881750][ T5966] usb 2-1: new full-speed USB device number 19 using dummy_hcd [ 254.976454][ T5966] usb 2-1: too many configurations: 214, using maximum allowed: 8 [ 254.999849][ T5966] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 255.074370][ T5966] usb 2-1: can't read configurations, error -61 [ 255.174250][ T5959] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 256.021026][ T8274] workqueue: Failed to create a rescuer kthread for wq "ceph-watch-notify": -EINTR [ 256.106300][ T30] audit: type=1400 audit(1754157785.149:454): avc: denied { bind } for pid=8271 comm="syz.3.563" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 256.149911][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.156359][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.165365][ T5966] usb 2-1: new full-speed USB device number 20 using dummy_hcd [ 256.187340][ T10] IPVS: starting estimator thread 0... [ 256.214769][ T5959] usb 5-1: Using ep0 maxpacket: 8 [ 256.225404][ T5959] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 256.249087][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 256.263673][ T5966] usb 2-1: too many configurations: 214, using maximum allowed: 8 [ 256.284872][ T5959] pvrusb2: Hardware description: Terratec Grabster AV400 [ 256.287751][ T5966] usb 2-1: unable to read config index 0 descriptor/start: -61 [ 256.298998][ T30] audit: type=1400 audit(1754157785.989:455): avc: denied { write } for pid=8281 comm="syz.3.564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 256.304958][ T5966] usb 2-1: can't read configurations, error -61 [ 256.318963][ C1] vkms_vblank_simulate: vblank timer overrun [ 256.329212][ T5959] pvrusb2: ********** [ 256.333674][ T8278] IPVS: using max 45 ests per chain, 108000 per kthread [ 256.339309][ T5959] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 256.361116][ T5966] usb usb2-port1: unable to enumerate USB device [ 256.420600][ T5959] pvrusb2: Important functionality might not be entirely working. [ 257.175002][ T5959] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 257.239580][ T5959] pvrusb2: ********** [ 257.255315][ T2326] pvrusb2: Invalid write control endpoint [ 257.539640][ T5959] usb 5-1: USB disconnect, device number 32 [ 257.765856][ T2326] pvrusb2: Invalid write control endpoint [ 257.883334][ T8295] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8295 comm=syz.1.568 [ 257.896152][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 257.905589][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 257.916792][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 257.936920][ T2326] pvrusb2: Device being rendered inoperable [ 257.945628][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 257.956146][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 257.994883][ T2326] pvrusb2: Attached sub-driver cx25840 [ 258.085215][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 258.097152][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 258.716832][ T8328] macvlan10: entered promiscuous mode [ 259.010282][ T8330] netlink: 8 bytes leftover after parsing attributes in process `syz.4.575'. [ 259.021768][ T5966] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 259.465872][ T5966] usb 4-1: device descriptor read/64, error -71 [ 260.211926][ T5966] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 260.529096][ T5966] usb 4-1: device descriptor read/64, error -71 [ 260.717483][ T5966] usb usb4-port1: attempt power cycle [ 260.914750][ T8353] macvlan5: entered promiscuous mode [ 261.822685][ T8364] netlink: 28 bytes leftover after parsing attributes in process `syz.1.584'. [ 261.972220][ T8364] wg1 speed is unknown, defaulting to 1000 [ 263.142447][ T30] audit: type=1400 audit(1754157792.819:456): avc: denied { bind } for pid=8378 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.165008][ T30] audit: type=1400 audit(1754157792.829:457): avc: denied { accept } for pid=8378 comm="syz.1.588" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 263.698013][ T8377] macvlan11: entered promiscuous mode [ 263.779089][ T8386] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 263.892072][ T30] audit: type=1400 audit(1754157793.469:458): avc: denied { ioctl } for pid=8383 comm="syz.0.589" path="socket:[18171]" dev="sockfs" ino=18171 ioctlcmd=0x8990 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 267.181907][ T8416] vhci_hcd vhci_hcd.0: pdev(4) rhport(0) sockfd(3) [ 267.188751][ T8416] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 267.382029][ T8416] vhci_hcd vhci_hcd.0: Device attached [ 267.428407][ T8422] kAFS: unable to lookup cell '' [ 267.641874][ T5966] usb 41-1: new low-speed USB device number 2 using vhci_hcd [ 267.663031][ T10] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 267.914509][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 267.919690][ T30] audit: type=1400 audit(1754157797.609:459): avc: denied { attach_queue } for pid=8420 comm="syz.3.597" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 268.032017][ T10] usb 5-1: config 0 has no interfaces? [ 268.122327][ T10] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 268.331832][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 268.500521][ T10] usb 5-1: config 0 descriptor?? [ 270.191743][ T977] usb 5-1: USB disconnect, device number 33 [ 270.198656][ T8417] vhci_hcd: connection reset by peer [ 270.225594][ T1170] vhci_hcd: stop threads [ 270.237733][ T1170] vhci_hcd: release socket [ 270.253184][ T1170] vhci_hcd: disconnect device [ 270.321771][ T9] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 270.579604][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 270.593505][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 271.006679][ T9] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 271.031811][ T9] usb 4-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 271.041036][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.050636][ T9] usb 4-1: config 0 descriptor?? [ 271.355558][ T8451] tmpfs: Bad value for 'mpol' [ 271.548280][ T8457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8457 comm=syz.4.605 [ 271.621984][ T9] plantronics 0003:047F:FFFF.000A: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.3-1/input0 [ 272.127485][ T5913] usb 4-1: USB disconnect, device number 23 [ 272.808534][ T30] audit: type=1400 audit(1754157802.499:460): avc: denied { append } for pid=8462 comm="syz.2.608" name="001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 272.831254][ C0] vkms_vblank_simulate: vblank timer overrun [ 272.840569][ T5966] vhci_hcd: vhci_device speed not set [ 273.417727][ T8472] bond0: (slave rose0): Error: Device is in use and cannot be enslaved [ 273.772802][ T5913] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 273.887923][ T8481] netlink: 8 bytes leftover after parsing attributes in process `syz.2.613'. [ 273.939257][ T8477] wg1 speed is unknown, defaulting to 1000 [ 274.015274][ T5913] usb 4-1: Using ep0 maxpacket: 8 [ 275.665246][ T5913] usb 4-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 275.763184][ T5913] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 275.772429][ T5913] usb 4-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 275.781548][ T5913] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 275.793022][ T5913] usb 4-1: config 0 descriptor?? [ 276.034787][ T8466] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 276.044708][ T30] audit: type=1400 audit(1754157805.609:461): avc: denied { read } for pid=8484 comm="syz.2.614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 276.063802][ C0] vkms_vblank_simulate: vblank timer overrun [ 276.130766][ T8466] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 276.158088][ T5966] usb 4-1: USB disconnect, device number 24 [ 278.157378][ T30] audit: type=1400 audit(1754157807.849:462): avc: denied { ioctl } for pid=8491 comm="syz.0.616" path="socket:[19014]" dev="sockfs" ino=19014 ioctlcmd=0x941d scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 278.330438][ T8513] macvlan12: entered promiscuous mode [ 278.711786][ T5959] usb 2-1: new full-speed USB device number 21 using dummy_hcd [ 278.983660][ T5959] usb 2-1: unable to get BOS descriptor or descriptor too short [ 279.468597][ T5959] usb 2-1: not running at top speed; connect to a high speed hub [ 279.497210][ T5959] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 279.509478][ T5959] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 279.523795][ T5959] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 279.543797][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.552353][ T5959] usb 2-1: Product: syz [ 279.557073][ T5959] usb 2-1: Manufacturer: syz [ 279.600156][ T5959] usb 2-1: SerialNumber: syz [ 279.708459][ T977] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 279.852656][ T5959] usb 2-1: invalid UAC_HEADER (v1) [ 279.872855][ T977] usb 4-1: Using ep0 maxpacket: 32 [ 279.892122][ T5966] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 279.893768][ T977] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 279.923750][ T5959] snd-usb-audio 2-1:1.0: probe with driver snd-usb-audio failed with error -22 [ 279.933991][ T977] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=40.40 [ 279.949256][ T977] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 279.959569][ T5959] usb 2-1: USB disconnect, device number 21 [ 279.966554][ T977] usb 4-1: Manufacturer: ఄ [ 279.971697][ T977] usb 4-1: SerialNumber: 쾗ᛒ袛牢鸨ꅼ베欿蚝吺듮㞼껼ᓪᗚ鏏ꝇꆖ춞ᶱꨑ촸蟬몀壑ꋚ꫾膇∙蝡屜ᥞ [ 279.993890][ T8521] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 279.996727][ T6629] udevd[6629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 280.053640][ T5966] usb 1-1: Using ep0 maxpacket: 32 [ 280.086603][ T5966] usb 1-1: config 0 has an invalid interface number: 85 but max is 0 [ 280.101771][ T5966] usb 1-1: config 0 has no interface number 0 [ 280.120404][ T5966] usb 1-1: config 0 interface 85 altsetting 7 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 280.135729][ T5966] usb 1-1: config 0 interface 85 has no altsetting 0 [ 280.148213][ T5966] usb 1-1: New USB device found, idVendor=05ac, idProduct=0219, bcdDevice=f0.72 [ 280.159559][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 280.168077][ T5966] usb 1-1: Product: syz [ 280.175503][ T5966] usb 1-1: Manufacturer: syz [ 280.180275][ T5966] usb 1-1: SerialNumber: syz [ 280.197051][ T5966] usb 1-1: config 0 descriptor?? [ 280.238517][ T5850] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 280.849339][ T5966] appletouch 1-1:0.85: Geyser mode initialized. [ 280.858513][ T5966] input: appletouch as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.85/input/input30 [ 281.339835][ T5959] usb 1-1: USB disconnect, device number 20 [ 281.385211][ T5959] appletouch 1-1:0.85: input: appletouch disconnected [ 282.433356][ T977] usb 4-1: USB disconnect, device number 25 [ 282.635962][ T8548] macvlan9: entered promiscuous mode [ 282.933667][ T8557] delete_channel: no stack [ 282.943769][ T30] audit: type=1400 audit(1754157812.629:463): avc: denied { setopt } for pid=8554 comm="syz.2.636" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 282.944677][ T8557] netlink: 'syz.2.636': attribute type 1 has an invalid length. [ 282.984604][ T8557] netlink: 136 bytes leftover after parsing attributes in process `syz.2.636'. [ 283.000559][ T8557] netlink: 'syz.2.636': attribute type 2 has an invalid length. [ 283.049366][ T30] audit: type=1400 audit(1754157812.629:464): avc: denied { ioctl } for pid=8554 comm="syz.2.636" path="socket:[19180]" dev="sockfs" ino=19180 ioctlcmd=0x542a scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 283.055574][ T8557] netlink: 'syz.2.636': attribute type 1 has an invalid length. [ 283.086258][ T30] audit: type=1400 audit(1754157812.679:465): avc: denied { read } for pid=8553 comm="syz.0.635" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 283.183103][ T5966] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 283.425623][ T8569] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 283.833895][ T5966] usb 2-1: Using ep0 maxpacket: 16 [ 283.841773][ T5966] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD7, changing to 0x87 [ 283.853590][ T5966] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 283.868629][ T5966] usb 2-1: New USB device found, idVendor=05ac, idProduct=9226, bcdDevice=b2.89 [ 283.877875][ T5966] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.888427][ T5966] usb 2-1: Product: syz [ 283.893080][ T5966] usb 2-1: Manufacturer: syz [ 283.897675][ T5966] usb 2-1: SerialNumber: syz [ 283.906916][ T5966] usb 2-1: config 0 descriptor?? [ 283.941885][ T977] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 284.101982][ T977] usb 1-1: Using ep0 maxpacket: 8 [ 284.122165][ T977] usb 1-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 284.134304][ T977] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 284.152954][ T977] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 284.172494][ T5966] appledisplay 2-1:0.0: Error while getting initial brightness: -110 [ 284.176441][ T977] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 284.192139][ T5966] appledisplay 2-1:0.0: probe with driver appledisplay failed with error -110 [ 284.196017][ T977] usb 1-1: config 0 descriptor?? [ 284.307424][ T5844] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 284.323197][ T5966] usb 2-1: USB disconnect, device number 22 [ 284.668840][ T8571] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 284.737994][ T8571] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 284.796837][ T977] usb 1-1: USB disconnect, device number 21 [ 284.861748][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 284.868084][ T5844] usb 4-1: config 0 has an invalid interface number: 89 but max is 0 [ 284.876212][ T5844] usb 4-1: config 0 has no interface number 0 [ 284.882529][ T5844] usb 4-1: config 0 interface 89 has no altsetting 0 [ 284.890949][ T5844] usb 4-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 284.901075][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 284.909145][ T5844] usb 4-1: Product: syz [ 284.913432][ T5844] usb 4-1: Manufacturer: syz [ 284.918008][ T5844] usb 4-1: SerialNumber: syz [ 284.925012][ T5844] usb 4-1: config 0 descriptor?? [ 284.933384][ T5844] em28xx 4-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 284.943115][ T5844] em28xx 4-1:0.89: Video interface 89 found: bulk [ 285.131891][ T5857] Bluetooth: hci5: command 0x1003 tx timeout [ 285.142234][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 285.221826][ T5913] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 285.709919][ T5844] em28xx 4-1:0.89: unknown em28xx chip ID (0) [ 285.791843][ T5913] usb 2-1: Using ep0 maxpacket: 8 [ 285.802545][ T5913] usb 2-1: config 252 interface 0 has no altsetting 0 [ 285.809559][ T5913] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 285.821688][ T5913] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 285.843583][ T5913] pvrusb2: Hardware description: Terratec Grabster AV400 [ 285.860886][ T5913] pvrusb2: ********** [ 285.872238][ T5913] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 285.888998][ T5913] pvrusb2: Important functionality might not be entirely working. [ 285.897182][ T5913] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 285.916147][ T5913] pvrusb2: ********** [ 285.937651][ T5913] usb 2-1: selecting invalid altsetting 0 [ 286.451584][ T2326] pvrusb2: Invalid write control endpoint [ 286.536448][ T8597] netlink: 12 bytes leftover after parsing attributes in process `syz.2.647'. [ 286.641234][ T5844] em28xx 4-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 286.828714][ T5844] em28xx 4-1:0.89: board has no eeprom [ 286.905621][ T8584] em28xx 4-1:0.89: reading from i2c device at 0x2 failed (error=-5) [ 286.939580][ T2326] pvrusb2: Invalid write control endpoint [ 286.958959][ T5906] usb 2-1: USB disconnect, device number 23 [ 286.965173][ T5844] em28xx 4-1:0.89: Identified as Terratec Grabby (card=67) [ 286.972415][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 286.972443][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 286.972454][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 286.972463][ T2326] pvrusb2: Device being rendered inoperable [ 286.973380][ T2326] cx25840 2-0044: Unable to detect h/w, assuming cx23887 [ 287.045372][ T5844] em28xx 4-1:0.89: analog set to bulk mode. [ 287.063588][ T2326] cx25840 2-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 287.090507][ T2326] pvrusb2: Attached sub-driver cx25840 [ 287.093313][ T977] em28xx 4-1:0.89: Registering V4L2 extension [ 287.096973][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 287.111505][ T5844] usb 4-1: USB disconnect, device number 26 [ 287.171749][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 287.184885][ T5844] em28xx 4-1:0.89: Disconnecting em28xx [ 287.213168][ T977] em28xx 4-1:0.89: Config register raw data: 0xffffffed [ 287.220169][ T977] em28xx 4-1:0.89: AC97 chip type couldn't be determined [ 287.232795][ T977] em28xx 4-1:0.89: No AC97 audio processor [ 287.239634][ T977] usb 4-1: Decoder not found [ 287.244556][ T977] em28xx 4-1:0.89: failed to create media graph [ 287.250788][ T977] em28xx 4-1:0.89: V4L2 device video103 deregistered [ 287.281420][ T977] em28xx 4-1:0.89: Registering snapshot button... [ 287.359685][ T5913] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 287.400787][ T977] input: em28xx snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.89/input/input32 [ 287.516840][ T5913] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 287.862404][ T977] em28xx 4-1:0.89: Remote control support is not available for this card. [ 287.870994][ T5844] em28xx 4-1:0.89: Closing input extension [ 287.877641][ T5844] em28xx 4-1:0.89: Deregistering snapshot button [ 287.884203][ T8607] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 287.904334][ T5913] usb 5-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 287.928585][ T13] Bluetooth: hci5: Frame reassembly failed (-84) [ 287.938165][ T5844] em28xx 4-1:0.89: Freeing device [ 287.951849][ T5913] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 287.971243][ T5913] usb 5-1: config 0 descriptor?? [ 288.130174][ T8602] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 288.407066][ T5913] lenovo 0003:17EF:6047.000B: hidraw0: USB HID v0.00 Device [HID 17ef:6047] on usb-dummy_hcd.4-1/input0 [ 289.486285][ T5913] lenovo 0003:17EF:6047.000B: Fn-lock setting failed: -71 [ 289.927762][ T5913] lenovo 0003:17EF:6047.000B: Sensitivity setting failed: -71 [ 289.935870][ T5857] Bluetooth: hci5: command 0x1003 tx timeout [ 289.942302][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 290.092351][ T8641] macvlan3: entered promiscuous mode [ 290.425955][ T5913] usb 5-1: USB disconnect, device number 34 [ 291.205256][ T30] audit: type=1400 audit(1754157820.539:466): avc: denied { bind } for pid=8642 comm="syz.1.659" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 291.756288][ T30] audit: type=1326 audit(1754157820.549:467): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8642 comm="syz.1.659" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f6141b8eb69 code=0x0 [ 291.864682][ T8658] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=8658 comm=syz.0.661 [ 291.910959][ T30] audit: type=1400 audit(1754157821.599:468): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 293.212908][ T8670] futex_wake_op: syz.4.665 tries to shift op by -1; fix this program [ 293.971857][ T49] Bluetooth: hci5: Frame reassembly failed (-84) [ 294.527760][ T30] audit: type=1400 audit(1754157824.219:469): avc: denied { read write } for pid=8698 comm="syz.0.674" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 294.551172][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.573104][ T30] audit: type=1400 audit(1754157824.249:470): avc: denied { open } for pid=8698 comm="syz.0.674" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 294.596386][ C1] vkms_vblank_simulate: vblank timer overrun [ 294.942172][ T5966] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 295.000002][ T8714] netlink: 4 bytes leftover after parsing attributes in process `syz.2.677'. [ 295.081754][ T5913] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 295.117815][ T5966] usb 5-1: Using ep0 maxpacket: 8 [ 295.236313][ T5966] usb 5-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 295.248225][ T5913] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 295.292089][ T5966] usb 5-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 295.301346][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 295.314974][ T5966] usb 5-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 295.325122][ T5913] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 295.336293][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 295.731756][ T5850] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 295.748432][ T5913] usb 1-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 295.904227][ T5966] usb 5-1: config 0 descriptor?? [ 296.144868][ T5913] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 296.158558][ T5913] usb 1-1: config 0 descriptor?? [ 296.358792][ T8697] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 296.381990][ T8697] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 296.435447][ T5966] usb 5-1: USB disconnect, device number 35 [ 296.531804][ T5927] usb 3-1: new high-speed USB device number 20 using dummy_hcd [ 297.167884][ T5913] usbhid 1-1:0.0: can't add hid device: -71 [ 297.173909][ T5913] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 297.209679][ T5913] usb 1-1: USB disconnect, device number 22 [ 297.253172][ T5927] usb 3-1: Using ep0 maxpacket: 8 [ 297.266322][ T5927] usb 3-1: config 252 interface 0 has no altsetting 0 [ 297.281387][ T5927] usb 3-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 297.426390][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 297.444772][ T5927] pvrusb2: Hardware description: Terratec Grabster AV400 [ 298.029170][ T5927] pvrusb2: ********** [ 298.153012][ T5927] pvrusb2: ***WARNING*** Support for this device (Terratec Grabster AV400) is experimental. [ 298.177742][ T5927] pvrusb2: Important functionality might not be entirely working. [ 298.732029][ T5927] pvrusb2: Please consider contacting the driver author to help with further stabilization of the driver. [ 298.743504][ T5927] pvrusb2: ********** [ 298.747858][ T5927] usb 3-1: selecting invalid altsetting 0 [ 298.753761][ T2326] pvrusb2: Invalid write control endpoint [ 298.771161][ T5927] usb 3-1: USB disconnect, device number 20 [ 298.819929][ T2326] pvrusb2: Invalid write control endpoint [ 298.828425][ T2326] pvrusb2: ***WARNING*** Detected a wedged cx25840 chip; the device will not work. [ 298.958806][ T2326] pvrusb2: ***WARNING*** Try power cycling the pvrusb2 device. [ 298.972544][ T2326] pvrusb2: ***WARNING*** Disabling further access to the device to prevent other foul-ups. [ 298.985143][ T2326] pvrusb2: Device being rendered inoperable [ 299.561268][ T2326] cx25840 1-0044: Unable to detect h/w, assuming cx23887 [ 299.581595][ T2326] cx25840 1-0044: cx23887 A/V decoder found @ 0x88 (pvrusb2_a) [ 299.592832][ T2326] pvrusb2: Attached sub-driver cx25840 [ 299.599243][ T2326] pvrusb2: ***WARNING*** pvrusb2 device hardware appears to be jammed and I can't clear it. [ 299.618167][ T2326] pvrusb2: You might need to power cycle the pvrusb2 device in order to recover. [ 301.609823][ T30] audit: type=1400 audit(1754157831.299:471): avc: denied { getopt } for pid=8761 comm="syz.4.690" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 301.720153][ T8768] netlink: 76 bytes leftover after parsing attributes in process `syz.0.692'. [ 301.944036][ T30] audit: type=1400 audit(1754157831.339:472): avc: denied { map } for pid=8766 comm="syz.1.691" path="socket:[19954]" dev="sockfs" ino=19954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 302.399958][ T30] audit: type=1400 audit(1754157831.339:473): avc: denied { accept } for pid=8766 comm="syz.1.691" path="socket:[19954]" dev="sockfs" ino=19954 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 302.619212][ T8775] input: syz1 as /devices/virtual/input/input33 [ 303.485622][ T30] audit: type=1400 audit(1754157833.179:474): avc: denied { open } for pid=8778 comm="syz.0.695" path="/dev/ttyq5" dev="devtmpfs" ino=380 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 303.572888][ T30] audit: type=1400 audit(1754157833.179:475): avc: denied { ioctl } for pid=8778 comm="syz.0.695" path="socket:[20040]" dev="sockfs" ino=20040 ioctlcmd=0x8922 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 304.392506][ T977] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 304.873346][ T8801] siw: device registration error -23 [ 305.302944][ T977] usb 5-1: Using ep0 maxpacket: 32 [ 305.315936][ T977] usb 5-1: config 0 has an invalid interface number: 89 but max is 0 [ 305.324629][ T977] usb 5-1: config 0 has no interface number 0 [ 305.330795][ T977] usb 5-1: config 0 interface 89 has no altsetting 0 [ 305.602675][ T8808] bridge_slave_1: left allmulticast mode [ 305.625011][ T8808] bridge_slave_1: left promiscuous mode [ 305.688370][ T8808] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.041487][ T977] usb 5-1: New USB device found, idVendor=0ccd, idProduct=10af, bcdDevice=38.4e [ 306.059352][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 306.067469][ T8811] netlink: 20 bytes leftover after parsing attributes in process `syz.2.703'. [ 306.076630][ T977] usb 5-1: Product: syz [ 306.080808][ T977] usb 5-1: Manufacturer: syz [ 306.085644][ T8808] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 306.094912][ T977] usb 5-1: SerialNumber: syz [ 306.102709][ T977] usb 5-1: config 0 descriptor?? [ 306.117525][ T977] em28xx 5-1:0.89: New device syz syz @ 480 Mbps (0ccd:10af, interface 89, class 89) [ 306.128133][ T977] em28xx 5-1:0.89: Video interface 89 found: bulk [ 306.433943][ T8821] syz.3.708: attempt to access beyond end of device [ 306.433943][ T8821] loop3: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 306.501987][ T5913] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 306.511801][ T5906] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 306.651764][ T5906] usb 2-1: device descriptor read/64, error -71 [ 306.720640][ T977] em28xx 5-1:0.89: unknown em28xx chip ID (0) [ 306.991118][ T5906] usb 2-1: new high-speed USB device number 25 using dummy_hcd [ 307.252969][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 307.261765][ T5913] usb 1-1: config 6 has an invalid interface number: 158 but max is 0 [ 307.273357][ T5913] usb 1-1: config 6 has no interface number 0 [ 307.279465][ T5913] usb 1-1: config 6 interface 158 has no altsetting 0 [ 307.307514][ T5913] usb 1-1: New USB device found, idVendor=0bda, idProduct=0140, bcdDevice=da.29 [ 307.321690][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.340004][ T5913] usb 1-1: Product: syz [ 307.344616][ T5913] usb 1-1: Manufacturer: syz [ 307.418462][ T5913] usb 1-1: SerialNumber: syz [ 307.491732][ T5844] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 307.499490][ T5906] usb 2-1: device descriptor read/64, error -71 [ 307.598601][ T977] em28xx 5-1:0.89: read from i2c device at 0xa0 failed with unknown error (status=64) [ 307.611948][ T5906] usb usb2-port1: attempt power cycle [ 307.624387][ T977] em28xx 5-1:0.89: board has no eeprom [ 307.661729][ T5844] usb 4-1: Using ep0 maxpacket: 32 [ 307.669664][ T5844] usb 4-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 307.682062][ T5844] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=40.40 [ 307.691302][ T5844] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 307.700386][ T5844] usb 4-1: Manufacturer: ఄ [ 307.706185][ T5844] usb 4-1: SerialNumber: 쾗ᛒ袛牢鸨ꅼ베欿蚝吺듮㞼껼ᓪᗚ鏏ꝇꆖ춞ᶱꨑ촸蟬몀壑ꋚ꫾膇∙蝡屜ᥞ [ 307.731220][ T8829] raw-gadget.3 gadget.3: fail, usb_ep_enable returned -22 [ 307.862374][ T977] em28xx 5-1:0.89: Identified as Terratec Grabby (card=67) [ 307.870733][ T977] em28xx 5-1:0.89: analog set to bulk mode. [ 307.877682][ T5959] em28xx 5-1:0.89: Registering V4L2 extension [ 307.908516][ T977] usb 5-1: USB disconnect, device number 36 [ 307.930855][ T5959] em28xx 5-1:0.89: reading from i2c device at 0x4a failed (error=-19) [ 307.974951][ T977] em28xx 5-1:0.89: Disconnecting em28xx [ 307.975574][ T5857] Bluetooth: hci4: unexpected event 0x03 length: 1 < 11 [ 307.980697][ T5906] usb 2-1: new high-speed USB device number 26 using dummy_hcd [ 308.003658][ T5959] em28xx 5-1:0.89: Config register raw data: 0xffffffed [ 308.011126][ T5959] em28xx 5-1:0.89: AC97 chip type couldn't be determined [ 308.018960][ T5959] em28xx 5-1:0.89: No AC97 audio processor [ 308.030233][ T5959] usb 5-1: Decoder not found [ 308.034945][ T5959] em28xx 5-1:0.89: failed to create media graph [ 308.041528][ T5959] em28xx 5-1:0.89: V4L2 device video103 deregistered [ 308.050099][ T5906] usb 2-1: device descriptor read/8, error -71 [ 308.058252][ T5959] em28xx 5-1:0.89: Registering snapshot button... [ 308.066175][ T5959] input: em28xx snapshot button as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.89/input/input34 [ 308.080215][ T5959] em28xx 5-1:0.89: Remote control support is not available for this card. [ 308.088991][ T977] em28xx 5-1:0.89: Closing input extension [ 308.095113][ T977] em28xx 5-1:0.89: Deregistering snapshot button [ 308.122265][ T977] em28xx 5-1:0.89: Freeing device [ 308.164241][ T5927] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 308.359774][ T5906] usb 2-1: new high-speed USB device number 27 using dummy_hcd [ 308.393995][ T5927] usb 3-1: New USB device found, idVendor=09c0, idProduct=0203, bcdDevice=d3.43 [ 308.404112][ T5927] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.412481][ T5906] usb 2-1: device descriptor read/8, error -71 [ 308.438884][ T5927] usb 3-1: config 0 descriptor?? [ 308.465066][ T5927] dvb-usb: found a 'Genpix SkyWalker-1 DVB-S receiver' in warm state. [ 308.542092][ T5906] usb usb2-port1: unable to enumerate USB device [ 308.667330][ T5927] gp8psk: usb in 128 operation failed. [ 308.721742][ T977] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 308.871742][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 308.880140][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 308.880630][ T5927] gp8psk: usb in 146 operation failed. [ 308.897191][ T977] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 308.899819][ T5927] gp8psk: failed to get FW version [ 308.912399][ T977] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 308.916298][ T5927] gp8psk: FPGA Version = 247 [ 308.929969][ T977] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 308.939364][ T977] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 308.949663][ T977] usb 5-1: config 0 descriptor?? [ 309.135582][ T5927] gp8psk: usb in 138 operation failed. [ 309.142095][ T5927] dvb-usb: This USB2.0 device cannot be run on a USB1.1 port. (it lacks a hardware PID filter) [ 309.152854][ T5927] dvb-usb: Genpix SkyWalker-1 DVB-S receiver error while loading driver (-19) [ 309.165866][ T5927] usb 3-1: USB disconnect, device number 21 [ 309.553694][ T8845] siw: device registration error -23 [ 309.559920][ T8845] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 309.603973][ T8844] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 309.864887][ T30] audit: type=1400 audit(1754157839.219:476): avc: denied { mount } for pid=8838 comm="syz.4.712" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 309.908785][ T5844] usb 4-1: USB disconnect, device number 27 [ 309.961503][ T30] audit: type=1400 audit(1754157839.229:477): avc: denied { mounton } for pid=8838 comm="syz.4.712" path="/139/file0" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=dir permissive=1 [ 309.974754][ T5913] rtsx_usb 1-1:6.158: probe with driver rtsx_usb failed with error -71 [ 310.282766][ T977] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 310.291230][ T977] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 310.457517][ T5913] usb 1-1: USB disconnect, device number 23 [ 310.481738][ T977] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 310.620099][ T30] audit: type=1400 audit(1754157840.299:479): avc: denied { getopt } for pid=8852 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 310.666111][ T977] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 310.797555][ T30] audit: type=1400 audit(1754157840.299:478): avc: denied { getopt } for pid=8852 comm="syz.3.715" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 311.238625][ T977] shield 0003:0955:7214.000C: unknown main item tag 0x0 [ 311.249009][ T977] input: HID 0955:7214 Haptics as /devices/virtual/input/input35 [ 311.296176][ T30] audit: type=1400 audit(1754157840.989:480): avc: denied { write } for pid=8859 comm="syz.2.717" name="autofs" dev="devtmpfs" ino=98 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_device_t tclass=chr_file permissive=1 [ 311.491027][ T977] shield 0003:0955:7214.000C: Registered Thunderstrike controller [ 311.673607][ T977] shield 0003:0955:7214.000C: : USB HID v0.00 Device [HID 0955:7214] on usb-dummy_hcd.4-1/input0 [ 312.153431][ T5906] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 312.187686][ T5906] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -EPROTO [ 312.203072][ T977] usb 5-1: USB disconnect, device number 37 [ 312.250893][ T5906] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 312.403229][ T5906] shield 0003:0955:7214.000C: Failed to output Thunderstrike HOSTCMD request HID report due to -ENODEV [ 312.754475][ T30] audit: type=1400 audit(1754157842.439:481): avc: denied { unmount } for pid=5841 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 313.222102][ T30] audit: type=1400 audit(1754157842.919:482): avc: denied { ioctl } for pid=8896 comm="syz.4.727" path="/141/file0" dev="tmpfs" ino=826 ioctlcmd=0x4c08 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 313.393891][ T5927] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 313.565011][ T5927] usb 4-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 313.584204][ T5927] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 313.590948][ T8905] loop8: detected capacity change from 0 to 8 [ 313.608460][ T5927] usb 4-1: Product: syz [ 313.616151][ T8905] Dev loop8: unable to read RDB block 8 [ 313.625860][ T5927] usb 4-1: Manufacturer: syz [ 313.630485][ T5927] usb 4-1: SerialNumber: syz [ 313.631862][ T8905] loop8: unable to read partition table [ 313.641005][ T8905] loop8: partition table beyond EOD, truncated [ 313.653450][ T8905] loop_reread_partitions: partition scan of loop8 (被x^> ) failed (rc=-5) [ 313.673840][ T5927] usb 4-1: config 0 descriptor?? [ 313.684096][ T5927] ch341 4-1:0.0: ch341-uart converter detected [ 313.950214][ T30] audit: type=1400 audit(1754157843.639:483): avc: denied { read } for pid=8909 comm="syz.4.733" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 314.031416][ T30] audit: type=1400 audit(1754157843.639:484): avc: denied { open } for pid=8909 comm="syz.4.733" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 314.155940][ T30] audit: type=1400 audit(1754157843.849:485): avc: denied { unmount } for pid=5849 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 314.192290][ T10] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 314.377989][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 314.412675][ T10] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF6, changing to 0x86 [ 314.459196][ T10] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 255 [ 314.480428][ T10] usb 5-1: New USB device found, idVendor=abcd, idProduct=cdee, bcdDevice= 5.b9 [ 314.500878][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 314.602825][ T10] usb 5-1: config 0 descriptor?? [ 314.614850][ T8910] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 314.636692][ T10] gspca_main: spca561-2.14.0 probing abcd:cdee [ 314.860631][ T10] spca561 5-1:0.0: probe with driver spca561 failed with error -22 [ 314.880099][ T10] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 314.901798][ T10] usb 5-1: MIDIStreaming interface descriptor not found [ 314.922715][ T8937] netlink: 56 bytes leftover after parsing attributes in process `syz.1.745'. [ 314.961681][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.011781][ T8937] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.013797][ T10] usb 5-1: USB disconnect, device number 38 [ 315.066130][ T8937] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.077201][ T8937] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 315.108321][ T30] kauditd_printk_skb: 1 callbacks suppressed [ 315.108338][ T30] audit: type=1400 audit(1754157844.799:487): avc: denied { read write } for pid=8938 comm="syz.3.746" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 315.166999][ T5927] usb 4-1: failed to send control message: -110 [ 315.187068][ T5927] ch341-uart ttyUSB0: probe with driver ch341-uart failed with error -110 [ 315.206795][ T30] audit: type=1400 audit(1754157844.799:488): avc: denied { open } for pid=8938 comm="syz.3.746" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 315.229675][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.241462][ T30] audit: type=1400 audit(1754157844.839:489): avc: denied { map } for pid=8938 comm="syz.3.746" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 315.264279][ C0] vkms_vblank_simulate: vblank timer overrun [ 315.277584][ T30] audit: type=1400 audit(1754157844.839:490): avc: denied { execute } for pid=8938 comm="syz.3.746" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 315.751447][ T30] audit: type=1400 audit(1754157845.439:491): avc: denied { append } for pid=8955 comm="syz.1.753" name="loop6" dev="devtmpfs" ino=653 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fixed_disk_device_t tclass=blk_file permissive=1 [ 315.754128][ T8956] loop6: detected capacity change from 0 to 524287999 [ 315.855998][ T8956] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.895107][ T8956] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.907285][ T8956] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.919299][ T8956] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.935632][ T8956] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.945443][ T8956] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.955343][ T8956] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.964663][ T8956] Buffer I/O error on dev loop6, logical block 0, async page read [ 315.990953][ T8956] ldm_validate_partition_table(): Disk read failed. [ 315.998156][ T8956] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.009730][ T8956] Buffer I/O error on dev loop6, logical block 0, async page read [ 316.029677][ T30] audit: type=1326 audit(1754157845.719:492): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654578eb69 code=0x7ffc0000 [ 316.056773][ T8956] Dev loop6: unable to read RDB block 0 [ 316.063395][ T8956] loop6: unable to read partition table [ 316.069151][ T30] audit: type=1326 audit(1754157845.719:493): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654578eb69 code=0x7ffc0000 [ 316.094945][ T8956] loop_reread_partitions: partition scan of loop6 ($) failed (rc=-5) [ 316.114353][ T30] audit: type=1326 audit(1754157845.759:494): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=290 compat=0 ip=0x7f654578eb69 code=0x7ffc0000 [ 316.147088][ T30] audit: type=1326 audit(1754157845.759:495): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654578eb69 code=0x7ffc0000 [ 316.178084][ T30] audit: type=1326 audit(1754157845.759:496): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8965 comm="syz.4.757" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f654578eb69 code=0x7ffc0000 [ 316.540263][ T8977] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 316.549042][ T5927] usb 2-1: new high-speed USB device number 28 using dummy_hcd [ 316.657479][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 316.664070][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 316.705283][ T5927] usb 2-1: config 195 has an invalid interface number: 1 but max is 0 [ 316.727526][ T5927] usb 2-1: config 195 has no interface number 0 [ 316.751717][ T5927] usb 2-1: config 195 interface 1 has no altsetting 0 [ 316.774182][ T5927] usb 2-1: New USB device found, idVendor=1235, idProduct=0018, bcdDevice=60.f9 [ 316.789593][ T5927] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.799806][ T5927] usb 2-1: Product: syz [ 316.804713][ T5927] usb 2-1: Manufacturer: syz [ 316.809733][ T5927] usb 2-1: SerialNumber: syz [ 317.062804][ T5927] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 317.104130][ T8996] A link change request failed with some changes committed already. Interface ip6gre0 may have been left with an inconsistent configuration, please check. [ 317.134531][ T5927] snd-usb-audio 2-1:195.1: probe with driver snd-usb-audio failed with error -2 [ 317.174519][ T5927] usb 2-1: USB disconnect, device number 28 [ 317.227724][ T6629] udevd[6629]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:195.1/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 317.305445][ T6629] udevd[6629]: failed to send result of seq 15326 to main daemon: Connection refused [ 317.623709][ T9012] sctp: [Deprecated]: syz.3.777 (pid 9012) Use of int in max_burst socket option deprecated. [ 317.623709][ T9012] Use struct sctp_assoc_value instead [ 317.728193][ T9018] kAFS: No cell specified [ 317.831215][ T9018] wg1 speed is unknown, defaulting to 1000 [ 317.922018][ T5913] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 318.081684][ T5913] usb 5-1: Using ep0 maxpacket: 16 [ 318.088527][ T9031] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 318.092675][ T5913] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 318.117388][ T5913] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 318.118668][ T9031] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 318.142552][ T5913] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 318.155093][ T5913] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 318.165459][ T5913] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 318.173922][ T5913] usb 5-1: Product: syz [ 318.178284][ T5913] usb 5-1: Manufacturer: syz [ 318.183294][ T5913] usb 5-1: SerialNumber: syz [ 318.601445][ T5913] usb 5-1: 0:2 : does not exist [ 318.714918][ T9034] evm: overlay not supported [ 318.941777][ T5850] Bluetooth: hci4: Controller not accepting commands anymore: ncmd = 0 [ 318.953736][ T5850] Bluetooth: hci4: Injecting HCI hardware error event [ 318.964787][ T5859] Bluetooth: hci4: hardware error 0x00 [ 319.625229][ T5913] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 319.650725][ T5913] usb 5-1: USB disconnect, device number 39 [ 319.818673][ T9042] wg1 speed is unknown, defaulting to 1000 [ 320.088067][ T9050] netlink: 16 bytes leftover after parsing attributes in process `syz.1.792'. [ 320.097107][ T5850] Bluetooth: hci5: command 0x1003 tx timeout [ 320.098486][ T5857] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 320.381912][ T5959] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 320.547543][ T5959] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 320.557567][ T5959] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.566897][ T5959] usb 2-1: Product: syz [ 320.571253][ T5959] usb 2-1: Manufacturer: syz [ 320.578198][ T977] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 320.586233][ T5959] usb 2-1: SerialNumber: syz [ 320.597023][ T5959] usb 2-1: config 0 descriptor?? [ 320.606108][ T5959] ch341 2-1:0.0: ch341-uart converter detected [ 320.741792][ T977] usb 5-1: Using ep0 maxpacket: 16 [ 320.755002][ T977] usb 5-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 320.763906][ T977] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 320.774642][ T977] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 320.785860][ T977] usb 5-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 320.795528][ T977] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.811168][ T977] usb 5-1: Product: syz [ 320.816221][ T977] usb 5-1: Manufacturer: syz [ 320.820921][ T977] usb 5-1: SerialNumber: syz [ 321.132571][ T5859] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 321.248402][ T30] kauditd_printk_skb: 6 callbacks suppressed [ 321.248417][ T30] audit: type=1400 audit(1754157850.939:503): avc: denied { bind } for pid=9065 comm="syz.0.799" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 321.248836][ T977] usb 5-1: 0:2 : does not exist [ 321.821265][ T5959] ch341-uart ttyUSB1: failed to read break control: -71 [ 321.837793][ T5959] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 321.865954][ T5959] usb 2-1: USB disconnect, device number 29 [ 321.885139][ T5959] ch341 2-1:0.0: device disconnected [ 321.891728][ T5913] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 322.062347][ T5913] usb 1-1: Using ep0 maxpacket: 16 [ 322.074516][ T5913] usb 1-1: unable to get BOS descriptor or descriptor too short [ 322.093443][ T5913] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 322.111945][ T5913] usb 1-1: config 1 interface 0 altsetting 127 endpoint 0x81 has invalid maxpacket 1536, setting to 1024 [ 322.127418][ T5913] usb 1-1: config 1 interface 0 altsetting 127 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 322.142600][ T5913] usb 1-1: config 1 interface 0 has no altsetting 0 [ 322.152065][ T5913] usb 1-1: New USB device found, idVendor=05ac, idProduct=0242, bcdDevice= 0.40 [ 322.163099][ T5913] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.171136][ T5913] usb 1-1: Product: syz [ 322.176555][ T30] audit: type=1400 audit(1754157851.869:504): avc: denied { getopt } for pid=9080 comm="syz.3.806" lport=48157 faddr=::ffff:100.1.1.0 fport=20003 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 322.213267][ T5913] usb 1-1: Manufacturer: syz [ 322.217967][ T5913] usb 1-1: SerialNumber: syz [ 322.245438][ T9076] raw-gadget.2 gadget.0: fail, usb_ep_enable returned -22 [ 322.264413][ T977] usb 5-1: 1:0: failed to get current value for ch 0 (-22) [ 322.312098][ T977] usb 5-1: USB disconnect, device number 40 [ 322.466480][ T9085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.472089][ T5913] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:1.0/input/input36 [ 322.475165][ T9085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.498054][ T9085] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 322.509740][ T9085] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 322.548122][ T9087] netlink: 4 bytes leftover after parsing attributes in process `syz.1.809'. [ 322.997749][ T1170] Bluetooth: hci5: Frame reassembly failed (-84) [ 323.395605][ T977] usb 1-1: USB disconnect, device number 24 [ 323.395625][ C0] bcm5974 1-1:1.0: trackpad urb failed: -19 [ 323.408490][ T977] bcm5974 1-1:1.0: could not read from device [ 323.707784][ T9108] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 323.719146][ T9108] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 324.669166][ T9113] sch_tbf: burst 480 is lower than device lo mtu (65550) ! [ 324.680920][ T30] audit: type=1400 audit(1754157854.189:505): avc: denied { block_suspend } for pid=9111 comm="syz.0.814" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 325.051975][ T5857] Bluetooth: hci5: command 0x1003 tx timeout [ 325.054022][ T5859] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 326.250867][ T9109] syz.4.813 (9109): drop_caches: 1 [ 326.286202][ T9106] syz.4.813 (9106): drop_caches: 1 [ 326.487163][ T30] audit: type=1400 audit(1754157856.169:506): avc: denied { setopt } for pid=9127 comm="syz.1.818" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 327.506650][ T9140] netlink: 68 bytes leftover after parsing attributes in process `syz.3.820'. [ 327.921850][ T5959] usb 5-1: new high-speed USB device number 41 using dummy_hcd [ 328.693320][ T5959] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 328.732007][ T5959] usb 5-1: New USB device found, idVendor=056a, idProduct=0331, bcdDevice= 0.00 [ 328.776704][ T5959] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.794270][ T5959] usb 5-1: config 0 descriptor?? [ 329.008696][ T9146] netlink: 36 bytes leftover after parsing attributes in process `syz.4.823'. [ 329.061751][ T10] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 329.230672][ T5959] wacom 0003:056A:0331.000D: unknown main item tag 0x2 [ 329.242153][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 329.248668][ T5959] wacom 0003:056A:0331.000D: item fetching failed at offset 9/11 [ 329.256127][ T10] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 329.268706][ T5959] wacom 0003:056A:0331.000D: parse failed [ 329.270918][ T10] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 329.285404][ T5959] wacom 0003:056A:0331.000D: probe with driver wacom failed with error -22 [ 329.307467][ T10] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 329.330937][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.346209][ T10] usb 1-1: Product: syz [ 329.350523][ T10] usb 1-1: Manufacturer: syz [ 329.355346][ T10] usb 1-1: SerialNumber: syz [ 329.371504][ T49] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.433038][ T9146] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.455232][ T9146] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.481388][ T49] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.500775][ T5959] usb 5-1: USB disconnect, device number 41 [ 329.551870][ T5857] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 329.561421][ T5857] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 329.575934][ T5857] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 329.579364][ T10] usb 1-1: 0:2 : does not exist [ 329.588720][ T5857] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 329.593605][ T10] usb 1-1: 5:0: failed to get current value for ch 0 (-22) [ 329.605642][ T5857] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 329.637638][ T30] audit: type=1400 audit(1754157859.319:507): avc: denied { mounton } for pid=9166 comm="syz-executor" path="/" dev="sda1" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:root_t tclass=dir permissive=1 [ 329.664376][ T49] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.677122][ T10] usb 1-1: USB disconnect, device number 25 [ 329.732910][ T9166] wg1 speed is unknown, defaulting to 1000 [ 329.799322][ T49] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.930187][ T9176] FAULT_INJECTION: forcing a failure. [ 329.930187][ T9176] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 329.954957][ T9176] CPU: 1 UID: 0 PID: 9176 Comm: syz.1.832 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 329.954980][ T9176] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 329.954988][ T9176] Call Trace: [ 329.954993][ T9176] [ 329.954999][ T9176] dump_stack_lvl+0x16c/0x1f0 [ 329.955026][ T9176] should_fail_ex+0x512/0x640 [ 329.955052][ T9176] _copy_to_user+0x32/0xd0 [ 329.955073][ T9176] simple_read_from_buffer+0xcb/0x170 [ 329.955100][ T9176] proc_fail_nth_read+0x197/0x240 [ 329.955118][ T9176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.955136][ T9176] ? rw_verify_area+0xcf/0x6c0 [ 329.955158][ T9176] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 329.955174][ T9176] vfs_read+0x1e4/0xc60 [ 329.955190][ T9176] ? __pfx___mutex_lock+0x10/0x10 [ 329.955212][ T9176] ? __pfx_vfs_read+0x10/0x10 [ 329.955232][ T9176] ? __fget_files+0x20e/0x3c0 [ 329.955253][ T9176] ksys_read+0x12a/0x250 [ 329.955266][ T9176] ? __pfx_ksys_read+0x10/0x10 [ 329.955280][ T9176] ? fput+0x9b/0xd0 [ 329.955302][ T9176] do_syscall_64+0xcd/0x4c0 [ 329.955325][ T9176] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 329.955340][ T9176] RIP: 0033:0x7f6141b8d57c [ 329.955352][ T9176] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 329.955365][ T9176] RSP: 002b:00007f6142ac9030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 329.955379][ T9176] RAX: ffffffffffffffda RBX: 00007f6141db5fa0 RCX: 00007f6141b8d57c [ 329.955388][ T9176] RDX: 000000000000000f RSI: 00007f6142ac90a0 RDI: 000000000000000a [ 329.955397][ T9176] RBP: 00007f6142ac9090 R08: 0000000000000000 R09: 0000000000000000 [ 329.955405][ T9176] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 329.955413][ T9176] R13: 0000000000000000 R14: 00007f6141db5fa0 R15: 00007ffed6f81ba8 [ 329.955433][ T9176] [ 329.973837][ T9166] chnl_net:caif_netlink_parms(): no params data found [ 330.164929][ T49] bridge_slave_1: left allmulticast mode [ 330.175968][ T49] bridge_slave_1: left promiscuous mode [ 330.183470][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 330.232964][ T49] bridge_slave_0: left allmulticast mode [ 330.242050][ T49] bridge_slave_0: left promiscuous mode [ 330.319344][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 331.704513][ T5857] Bluetooth: hci1: command tx timeout [ 332.100377][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 332.110960][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 332.124376][ T49] bond0 (unregistering): Released all slaves [ 332.143180][ T49] bond1 (unregistering): Released all slaves [ 332.161521][ T49] bond2 (unregistering): Released all slaves [ 332.203785][ T49] bond3 (unregistering): Released all slaves [ 332.235721][ T49] bond4 (unregistering): Released all slaves [ 332.268935][ T49] bond5 (unregistering): Released all slaves [ 332.280685][ T49] bond6 (unregistering): Released all slaves [ 332.528827][ T30] audit: type=1400 audit(1754157862.219:508): avc: denied { bind } for pid=9237 comm="syz.0.847" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 332.641937][ T5959] usb 2-1: new high-speed USB device number 30 using dummy_hcd [ 333.591779][ T5959] usb 2-1: Using ep0 maxpacket: 8 [ 333.598693][ T5959] usb 2-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 333.609563][ T5959] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 333.661557][ T5959] usb 2-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 333.708919][ T5959] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 333.773506][ T5857] Bluetooth: hci1: command tx timeout [ 333.806688][ T5959] usb 2-1: config 0 descriptor?? [ 333.938074][ T9248] macvlan6: entered promiscuous mode [ 333.948447][ T9166] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.956259][ T9166] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.963716][ T9166] bridge_slave_0: entered allmulticast mode [ 333.970929][ T9166] bridge_slave_0: entered promiscuous mode [ 333.980142][ T9166] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.987526][ T9166] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.994980][ T9166] bridge_slave_1: entered allmulticast mode [ 334.002550][ T9166] bridge_slave_1: entered promiscuous mode [ 334.090305][ T9228] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 334.126339][ T9228] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 334.138306][ T9166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.182134][ T9166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.194202][ T5927] usb 2-1: USB disconnect, device number 30 [ 334.271815][ T9166] team0: Port device team_slave_0 added [ 334.303928][ T9166] team0: Port device team_slave_1 added [ 334.398702][ T30] audit: type=1400 audit(1754157864.079:509): avc: denied { getopt } for pid=9259 comm="syz.0.854" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 334.452829][ T49] hsr_slave_0: left promiscuous mode [ 334.460987][ T49] hsr_slave_1: left promiscuous mode [ 334.483178][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 334.520050][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.532919][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.547425][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.591778][ T49] team_slave_0: left promiscuous mode [ 334.597421][ T49] team_slave_1: left promiscuous mode [ 334.604650][ T49] veth1_macvtap: left promiscuous mode [ 334.611349][ T49] veth0_macvtap: left promiscuous mode [ 334.617598][ T49] veth1_vlan: left promiscuous mode [ 334.623374][ T49] veth0_vlan: left promiscuous mode [ 334.632049][ T5927] usb 1-1: new full-speed USB device number 26 using dummy_hcd [ 334.804291][ T5927] usb 1-1: config 0 has an invalid interface number: 235 but max is 0 [ 334.820910][ T5927] usb 1-1: config 0 has no interface number 0 [ 334.835408][ T5927] usb 1-1: config 0 interface 235 altsetting 16 endpoint 0x5 has invalid maxpacket 45875, setting to 64 [ 334.861327][ T5927] usb 1-1: config 0 interface 235 has no altsetting 0 [ 334.890246][ T5927] usb 1-1: New USB device found, idVendor=06cd, idProduct=0112, bcdDevice=3e.18 [ 334.899744][ T5927] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 334.911124][ T5927] usb 1-1: Product: syz [ 334.916193][ T5927] usb 1-1: Manufacturer: syz [ 334.920978][ T5927] usb 1-1: SerialNumber: syz [ 334.936682][ T5927] usb 1-1: config 0 descriptor?? [ 334.959532][ T9260] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 334.969701][ T5927] keyspan 1-1:0.235: Keyspan 1 port adapter converter detected [ 335.017482][ T5927] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 87 [ 335.074549][ T5927] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 7 [ 335.093822][ T5927] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 81 [ 335.115855][ T5927] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 1 [ 335.150991][ T5927] keyspan 1-1:0.235: found no endpoint descriptor for endpoint 85 [ 335.216931][ T5927] usb 1-1: Keyspan 1 port adapter converter now attached to ttyUSB1 [ 335.249730][ T5927] usb 1-1: USB disconnect, device number 26 [ 335.299514][ T5927] keyspan_1 ttyUSB1: Keyspan 1 port adapter converter now disconnected from ttyUSB1 [ 335.343170][ T5927] keyspan 1-1:0.235: device disconnected [ 335.592898][ T30] audit: type=1400 audit(1754157865.249:510): avc: denied { create } for pid=9282 comm="syz.3.861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 335.821713][ T5844] usb 2-1: new full-speed USB device number 31 using dummy_hcd [ 335.858566][ T5857] Bluetooth: hci1: command tx timeout [ 336.163999][ T5844] usb 2-1: unable to get BOS descriptor or descriptor too short [ 336.204276][ T5844] usb 2-1: not running at top speed; connect to a high speed hub [ 336.230733][ T5844] usb 2-1: config 129 has an invalid interface number: 135 but max is 0 [ 336.239617][ T5844] usb 2-1: config 129 has an invalid interface number: 5 but max is 0 [ 336.249945][ T5844] usb 2-1: config 129 descriptor has 1 excess byte, ignoring [ 336.257972][ T5844] usb 2-1: config 129 has 2 interfaces, different from the descriptor's value: 1 [ 336.268618][ T5844] usb 2-1: config 129 has no interface number 0 [ 336.275015][ T5844] usb 2-1: config 129 has no interface number 1 [ 336.281421][ T5844] usb 2-1: config 129 interface 135 altsetting 6 has 0 endpoint descriptors, different from the interface descriptor's value: 9 [ 336.296549][ T5844] usb 2-1: too many endpoints for config 129 interface 5 altsetting 7: 37, using maximum allowed: 30 [ 336.307928][ T5844] usb 2-1: config 129 interface 5 altsetting 7 has 0 endpoint descriptors, different from the interface descriptor's value: 37 [ 336.322686][ T5844] usb 2-1: config 129 interface 135 has no altsetting 0 [ 336.329618][ T5844] usb 2-1: config 129 interface 5 has no altsetting 0 [ 336.352269][ T5844] usb 2-1: string descriptor 0 read error: -22 [ 336.358476][ T5844] usb 2-1: New USB device found, idVendor=2040, idProduct=721f, bcdDevice=f2.62 [ 336.361747][ T5966] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 336.371561][ T49] team0 (unregistering): Port device team_slave_1 removed [ 336.399879][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.438456][ T5844] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 336.445736][ T5844] usb 2-1: MIDIStreaming interface descriptor not found [ 336.455684][ T49] team0 (unregistering): Port device team_slave_0 removed [ 336.531780][ T5966] usb 1-1: Using ep0 maxpacket: 16 [ 336.545169][ T5966] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 336.556775][ T5966] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 336.572801][ T5966] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 336.582750][ T5966] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 336.590788][ T5966] usb 1-1: Product: syz [ 336.595326][ T5966] usb 1-1: Manufacturer: syz [ 336.599940][ T5966] usb 1-1: SerialNumber: syz [ 336.607051][ T5966] usb 1-1: config 0 descriptor?? [ 336.627181][ T5966] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 336.636482][ T5966] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 336.651101][ T5959] usb 2-1: USB disconnect, device number 31 [ 336.860005][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 336.867089][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.894996][ T9166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.945107][ T9166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.954859][ T9166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.985515][ T9166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.802611][ T5966] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 337.941771][ T5857] Bluetooth: hci1: command tx timeout [ 338.060299][ T5966] em28xx 1-1:0.0: Config register raw data: 0xa6 [ 338.118630][ T5966] em28xx 1-1:0.0: I2S Audio (1 sample rate(s)) [ 338.187549][ T9304] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 338.199774][ T5966] em28xx 1-1:0.0: No AC97 audio processor [ 338.213545][ T30] audit: type=1400 audit(1754157867.909:511): avc: denied { write } for pid=9306 comm="syz.1.865" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 338.238416][ T9304] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 338.276458][ T9166] hsr_slave_0: entered promiscuous mode [ 338.298861][ T9166] hsr_slave_1: entered promiscuous mode [ 338.538365][ T5966] usb 1-1: USB disconnect, device number 27 [ 338.954715][ T9166] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 338.987014][ T9166] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 339.005738][ T9166] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 339.024319][ T9166] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 339.138185][ T9166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.155254][ T9166] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.190615][ T9166] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 339.201175][ T9166] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 339.223833][ T1170] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.230956][ T1170] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.240437][ T1170] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.247616][ T1170] bridge0: port 2(bridge_slave_1) entered forwarding state [ 339.259487][ T10] usb 5-1: new high-speed USB device number 42 using dummy_hcd [ 339.357347][ T9339] netlink: 8 bytes leftover after parsing attributes in process `syz.3.875'. [ 339.841887][ T10] usb 5-1: Using ep0 maxpacket: 32 [ 339.881954][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 339.913467][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 339.948947][ T10] usb 5-1: config 0 interface 0 altsetting 16 endpoint 0x81 has invalid wMaxPacketSize 0 [ 339.967159][ T9350] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 339.991696][ T10] usb 5-1: config 0 interface 0 altsetting 16 has 1 endpoint descriptor, different from the interface descriptor's value: 5 [ 340.004987][ T9350] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 340.041363][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 340.163833][ T10] usb 5-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 340.321697][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 340.397420][ T9166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 340.419889][ T10] usb 5-1: config 0 descriptor?? [ 341.576168][ T9372] input: syz0 as /devices/virtual/input/input37 [ 341.930233][ T10] hid-thrustmaster 0003:044F:B65D.000E: invalid report_count 29987 [ 341.931136][ T9374] overlayfs: failed to resolve './file1': -2 [ 342.278778][ T10] hid-thrustmaster 0003:044F:B65D.000E: item 0 2 1 9 parsing failed [ 342.301069][ T10] hid-thrustmaster 0003:044F:B65D.000E: parse failed with error -22 [ 342.313253][ T10] hid-thrustmaster 0003:044F:B65D.000E: probe with driver hid-thrustmaster failed with error -22 [ 342.319973][ T30] audit: type=1400 audit(1754157871.989:512): avc: denied { watch_sb } for pid=9373 comm="syz.1.884" path="/186/bus/file1" dev="tmpfs" ino=1095 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 342.326095][ T10] usb 5-1: USB disconnect, device number 42 [ 343.217093][ T9166] veth0_vlan: entered promiscuous mode [ 343.241064][ T9166] veth1_vlan: entered promiscuous mode [ 343.314674][ T9166] veth0_macvtap: entered promiscuous mode [ 343.361492][ T9166] veth1_macvtap: entered promiscuous mode [ 343.387915][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.399788][ T9166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.439059][ T1101] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.473309][ T1101] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.516682][ T1101] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.539015][ T3012] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.632897][ T9390] FAULT_INJECTION: forcing a failure. [ 343.632897][ T9390] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 343.652079][ T9390] CPU: 1 UID: 0 PID: 9390 Comm: syz.4.888 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 343.652106][ T9390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 343.652117][ T9390] Call Trace: [ 343.652122][ T9390] [ 343.652129][ T9390] dump_stack_lvl+0x16c/0x1f0 [ 343.652159][ T9390] should_fail_ex+0x512/0x640 [ 343.652191][ T9390] _copy_from_user+0x2e/0xd0 [ 343.652212][ T9390] copy_msghdr_from_user+0x98/0x160 [ 343.652238][ T9390] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 343.652271][ T9390] ___sys_sendmsg+0xfe/0x1d0 [ 343.652296][ T9390] ? __pfx____sys_sendmsg+0x10/0x10 [ 343.652341][ T9390] ? __mutex_unlock_slowpath+0x80/0x800 [ 343.652373][ T9390] __sys_sendmsg+0x16d/0x220 [ 343.652398][ T9390] ? __pfx___sys_sendmsg+0x10/0x10 [ 343.652437][ T9390] do_syscall_64+0xcd/0x4c0 [ 343.652466][ T9390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 343.652483][ T9390] RIP: 0033:0x7f654578eb69 [ 343.652499][ T9390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 343.652516][ T9390] RSP: 002b:00007f654658e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 343.652534][ T9390] RAX: ffffffffffffffda RBX: 00007f65459b6080 RCX: 00007f654578eb69 [ 343.652546][ T9390] RDX: 0000000000000000 RSI: 00002000000002c0 RDI: 0000000000000003 [ 343.652557][ T9390] RBP: 00007f654658e090 R08: 0000000000000000 R09: 0000000000000000 [ 343.652574][ T9390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 343.652584][ T9390] R13: 0000000000000001 R14: 00007f65459b6080 R15: 00007ffd40d663a8 [ 343.652608][ T9390] [ 344.079213][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.097002][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.114888][ T9393] netlink: 16 bytes leftover after parsing attributes in process `syz.3.889'. [ 344.127023][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.145032][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.501574][ T30] audit: type=1400 audit(1754157873.949:513): avc: denied { mounton } for pid=9166 comm="syz-executor" path="/root/syzkaller.3eQDEk/syz-tmp/newroot/sys/kernel/debug" dev="debugfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:debugfs_t tclass=dir permissive=1 [ 344.663998][ T30] audit: type=1400 audit(1754157873.999:514): avc: denied { accept } for pid=9394 comm="syz.4.891" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=key_socket permissive=1 [ 344.831067][ T30] audit: type=1400 audit(1754157874.169:515): avc: denied { mounton } for pid=9166 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 345.063027][ T30] audit: type=1400 audit(1754157874.409:516): avc: denied { listen } for pid=9398 comm="syz.0.890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 345.396398][ T9410] tipc: Started in network mode [ 345.422448][ T9410] tipc: Node identity b29e83826467, cluster identity 4711 [ 345.431360][ T9410] tipc: Enabled bearer , priority 0 [ 345.459407][ T9410] syzkaller0: entered promiscuous mode [ 345.471289][ T9410] syzkaller0: entered allmulticast mode [ 345.501805][ T5966] usb 6-1: new high-speed USB device number 2 using dummy_hcd [ 345.603766][ T9410] tipc: Resetting bearer [ 345.637197][ T9407] tipc: Resetting bearer [ 345.661799][ T5966] usb 6-1: Using ep0 maxpacket: 8 [ 345.671065][ T5966] usb 6-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 345.714554][ T9407] tipc: Disabling bearer [ 345.729580][ T5966] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 346.213337][ T5966] usb 6-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 346.223389][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 346.234851][ T5966] usb 6-1: config 0 descriptor?? [ 346.293994][ T9422] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 65447, id = 0 [ 346.462136][ T9424] siw: device registration error -23 [ 346.468089][ T9424] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 346.484811][ T9404] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 346.493519][ T9404] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 346.558710][ T5966] usb 6-1: USB disconnect, device number 2 [ 349.419020][ T9438] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 349.438410][ T9440] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 349.913141][ T9446] FAULT_INJECTION: forcing a failure. [ 349.913141][ T9446] name failslab, interval 1, probability 0, space 0, times 0 [ 349.926002][ T9446] CPU: 0 UID: 0 PID: 9446 Comm: syz.0.901 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 349.926027][ T9446] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 349.926037][ T9446] Call Trace: [ 349.926044][ T9446] [ 349.926050][ T9446] dump_stack_lvl+0x16c/0x1f0 [ 349.926080][ T9446] should_fail_ex+0x512/0x640 [ 349.926106][ T9446] ? fs_reclaim_acquire+0xae/0x150 [ 349.926132][ T9446] ? tomoyo_encode2+0x100/0x3e0 [ 349.926155][ T9446] should_failslab+0xc2/0x120 [ 349.926175][ T9446] __kmalloc_noprof+0xd2/0x510 [ 349.926199][ T9446] tomoyo_encode2+0x100/0x3e0 [ 349.926224][ T9446] tomoyo_encode+0x29/0x50 [ 349.926244][ T9446] tomoyo_realpath_from_path+0x18f/0x6e0 [ 349.926270][ T9446] ? tomoyo_profile+0x47/0x60 [ 349.926297][ T9446] tomoyo_path_number_perm+0x245/0x580 [ 349.926314][ T9446] ? tomoyo_path_number_perm+0x237/0x580 [ 349.926336][ T9446] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 349.926355][ T9446] ? lockdep_hardirqs_on+0x7c/0x110 [ 349.926404][ T9446] ? find_held_lock+0x2b/0x80 [ 349.926424][ T9446] ? hook_file_ioctl_common+0x145/0x410 [ 349.926455][ T9446] ? __fget_files+0x20e/0x3c0 [ 349.926479][ T9446] security_file_ioctl+0x9b/0x240 [ 349.926502][ T9446] __x64_sys_ioctl+0xb7/0x210 [ 349.926529][ T9446] do_syscall_64+0xcd/0x4c0 [ 349.926562][ T9446] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 349.926580][ T9446] RIP: 0033:0x7f2d6478eb69 [ 349.926594][ T9446] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 349.926610][ T9446] RSP: 002b:00007f2d625f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 349.926628][ T9446] RAX: ffffffffffffffda RBX: 00007f2d649b6160 RCX: 00007f2d6478eb69 [ 349.926639][ T9446] RDX: 0000200000000580 RSI: 000000004048aecb RDI: 0000000000000007 [ 349.926650][ T9446] RBP: 00007f2d625f6090 R08: 0000000000000000 R09: 0000000000000000 [ 349.926660][ T9446] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 349.926670][ T9446] R13: 0000000000000000 R14: 00007f2d649b6160 R15: 00007ffe7431c518 [ 349.926695][ T9446] [ 349.926791][ T9446] ERROR: Out of memory at tomoyo_realpath_from_path. [ 351.227184][ T30] audit: type=1400 audit(1754157880.859:517): avc: denied { create } for pid=9456 comm="syz.0.907" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 351.423698][ T30] audit: type=1400 audit(1754157880.869:518): avc: denied { ioctl } for pid=9456 comm="syz.0.907" path="socket:[25080]" dev="sockfs" ino=25080 ioctlcmd=0x8914 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 351.467939][ T9465] netlink: 4 bytes leftover after parsing attributes in process `syz.1.905'. [ 352.312689][ T5906] usb 5-1: new high-speed USB device number 43 using dummy_hcd [ 352.374741][ T30] audit: type=1400 audit(1754157882.069:519): avc: denied { ioctl } for pid=9468 comm="syz.5.911" path="/dev/ptyqf" dev="devtmpfs" ino=134 ioctlcmd=0x541c scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 352.402875][ T9469] fuse: Unknown parameter '0x0000000000000010' [ 352.591999][ T5906] usb 5-1: Using ep0 maxpacket: 8 [ 352.604380][ T5906] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 352.627598][ T5906] usb 5-1: New USB device found, idVendor=0867, idProduct=9812, bcdDevice=46.08 [ 352.638738][ T5906] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 352.649115][ T5906] usb 5-1: Product: syz [ 352.653699][ T5906] usb 5-1: Manufacturer: syz [ 352.658369][ T5906] usb 5-1: SerialNumber: syz [ 352.667854][ T5906] usb 5-1: config 0 descriptor?? [ 352.683952][ T5906] comedi comedi5: Wrong number of endpoints [ 352.839126][ T5906] dt9812 5-1:0.0: driver 'dt9812' failed to auto-configure device. [ 352.858076][ T9484] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9484 comm=syz.5.914 [ 354.315495][ T10] usb 5-1: USB disconnect, device number 43 [ 354.683144][ T9503] trusted_key: encrypted_key: master key parameter '(@V/k' is invalid [ 354.781853][ T10] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 354.832205][ T9508] FAULT_INJECTION: forcing a failure. [ 354.832205][ T9508] name failslab, interval 1, probability 0, space 0, times 0 [ 354.845650][ T9508] CPU: 0 UID: 0 PID: 9508 Comm: syz.3.925 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 354.845677][ T9508] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 354.845686][ T9508] Call Trace: [ 354.845691][ T9508] [ 354.845697][ T9508] dump_stack_lvl+0x16c/0x1f0 [ 354.845727][ T9508] should_fail_ex+0x512/0x640 [ 354.845746][ T9508] ? fs_reclaim_acquire+0xae/0x150 [ 354.845762][ T9508] ? tomoyo_encode2+0x100/0x3e0 [ 354.845776][ T9508] should_failslab+0xc2/0x120 [ 354.845788][ T9508] __kmalloc_noprof+0xd2/0x510 [ 354.845800][ T9508] ? d_absolute_path+0x136/0x1a0 [ 354.845820][ T9508] tomoyo_encode2+0x100/0x3e0 [ 354.845836][ T9508] tomoyo_encode+0x29/0x50 [ 354.845849][ T9508] tomoyo_realpath_from_path+0x18f/0x6e0 [ 354.845868][ T9508] tomoyo_path_number_perm+0x245/0x580 [ 354.845879][ T9508] ? tomoyo_path_number_perm+0x237/0x580 [ 354.845892][ T9508] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 354.845918][ T9508] ? find_held_lock+0x2b/0x80 [ 354.845932][ T9508] ? hook_file_ioctl_common+0x145/0x410 [ 354.845952][ T9508] ? __fget_files+0x20e/0x3c0 [ 354.845964][ T9508] ? update_triggers+0x540/0x5a0 [ 354.845982][ T9508] security_file_ioctl+0x9b/0x240 [ 354.845998][ T9508] __x64_sys_ioctl+0xb7/0x210 [ 354.846015][ T9508] do_syscall_64+0xcd/0x4c0 [ 354.846033][ T9508] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.846045][ T9508] RIP: 0033:0x7f7d9598eb69 [ 354.846054][ T9508] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.846065][ T9508] RSP: 002b:00007f7d9679d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 354.846077][ T9508] RAX: ffffffffffffffda RBX: 00007f7d95bb6080 RCX: 00007f7d9598eb69 [ 354.846084][ T9508] RDX: 0000000000000000 RSI: 0000000040046208 RDI: 0000000000000004 [ 354.846090][ T9508] RBP: 00007f7d9679d090 R08: 0000000000000000 R09: 0000000000000000 [ 354.846096][ T9508] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 354.846102][ T9508] R13: 0000000000000000 R14: 00007f7d95bb6080 R15: 00007fffa1c692a8 [ 354.846116][ T9508] [ 354.921880][ T9508] ERROR: Out of memory at tomoyo_realpath_from_path. [ 355.143561][ T10] usb 5-1: config 0 has an invalid interface number: 171 but max is 0 [ 355.152067][ T10] usb 5-1: config 0 has no interface number 0 [ 355.158234][ T10] usb 5-1: config 0 interface 171 has no altsetting 0 [ 355.167137][ T10] usb 5-1: New USB device found, idVendor=13d3, idProduct=3219, bcdDevice=7a.67 [ 355.176717][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 355.197065][ T10] usb 5-1: Product: syz [ 355.218381][ T10] usb 5-1: Manufacturer: syz [ 355.231251][ T10] usb 5-1: SerialNumber: syz [ 355.244600][ T10] usb 5-1: config 0 descriptor?? [ 355.750267][ T5966] usb 5-1: USB disconnect, device number 44 [ 355.762627][ T5966] dvb-usb: generic DVB-USB module successfully deinitialized and disconnected. [ 355.856898][ T9522] delete_channel: no stack [ 355.895873][ T30] audit: type=1400 audit(1754157885.589:520): avc: denied { read } for pid=9524 comm="syz.0.930" name="btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 356.036559][ T30] audit: type=1400 audit(1754157885.619:521): avc: denied { open } for pid=9524 comm="syz.0.930" path="/dev/btrfs-control" dev="devtmpfs" ino=1316 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 356.086519][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.5.931'. [ 356.104630][ T9528] bridge0: port 3(macvlan2) entered blocking state [ 356.111515][ T9528] bridge0: port 3(macvlan2) entered disabled state [ 356.119679][ T9528] macvlan2: entered allmulticast mode [ 356.134594][ T9528] bridge0: entered allmulticast mode [ 356.143420][ T9528] macvlan2: left allmulticast mode [ 356.626724][ T9528] bridge0: left allmulticast mode [ 357.101104][ T9542] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9542 comm=syz.0.935 [ 358.379188][ T1090] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.385657][ T9548] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 358.398399][ T9548] F2FS-fs (loop4): Can't find valid F2FS filesystem in 1th superblock [ 358.410076][ T9548] F2FS-fs (loop4): Magic Mismatch, valid(0xf2f52010) - read(0x0) [ 358.418162][ T9548] F2FS-fs (loop4): Can't find valid F2FS filesystem in 2th superblock [ 358.524788][ T1090] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.535189][ T1090] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 358.553732][ T1090] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 359.678915][ T9567] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 359.786122][ T30] audit: type=1400 audit(1754157889.479:522): avc: denied { read write } for pid=9569 comm="syz.4.943" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 359.932284][ T30] audit: type=1400 audit(1754157889.479:523): avc: denied { open } for pid=9569 comm="syz.4.943" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 360.640083][ T9575] FAULT_INJECTION: forcing a failure. [ 360.640083][ T9575] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 360.672795][ T9575] CPU: 1 UID: 0 PID: 9575 Comm: syz.4.944 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 360.672822][ T9575] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 360.672832][ T9575] Call Trace: [ 360.672837][ T9575] [ 360.672844][ T9575] dump_stack_lvl+0x16c/0x1f0 [ 360.672875][ T9575] should_fail_ex+0x512/0x640 [ 360.672910][ T9575] _copy_from_iter+0x29f/0x16f0 [ 360.672932][ T9575] ? __alloc_skb+0x200/0x380 [ 360.672955][ T9575] ? __pfx__copy_from_iter+0x10/0x10 [ 360.672975][ T9575] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 360.673009][ T9575] netlink_sendmsg+0x829/0xdd0 [ 360.673038][ T9575] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.673074][ T9575] ____sys_sendmsg+0xa98/0xc70 [ 360.673094][ T9575] ? copy_msghdr_from_user+0x10a/0x160 [ 360.673118][ T9575] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.673152][ T9575] ___sys_sendmsg+0x134/0x1d0 [ 360.673177][ T9575] ? __pfx____sys_sendmsg+0x10/0x10 [ 360.673223][ T9575] ? __mutex_unlock_slowpath+0x80/0x800 [ 360.673257][ T9575] __sys_sendmsg+0x16d/0x220 [ 360.673282][ T9575] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.673322][ T9575] do_syscall_64+0xcd/0x4c0 [ 360.673350][ T9575] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.673367][ T9575] RIP: 0033:0x7f654578eb69 [ 360.673381][ T9575] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.673397][ T9575] RSP: 002b:00007f65465af038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.673414][ T9575] RAX: ffffffffffffffda RBX: 00007f65459b5fa0 RCX: 00007f654578eb69 [ 360.673425][ T9575] RDX: 0000000020004010 RSI: 0000200000000280 RDI: 0000000000000003 [ 360.673435][ T9575] RBP: 00007f65465af090 R08: 0000000000000000 R09: 0000000000000000 [ 360.673446][ T9575] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 360.673456][ T9575] R13: 0000000000000000 R14: 00007f65459b5fa0 R15: 00007ffd40d663a8 [ 360.673479][ T9575] [ 360.874764][ C1] vkms_vblank_simulate: vblank timer overrun [ 360.983409][ T9580] netlink: 20 bytes leftover after parsing attributes in process `syz.0.946'. [ 362.124600][ T9595] cgroup: Unknown subsys name 'cpuset' [ 362.130174][ T30] audit: type=1400 audit(1754157891.809:524): avc: denied { append } for pid=9594 comm="syz.5.952" name="binder0" dev="binder" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=chr_file permissive=1 [ 362.255642][ T9602] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 362.495719][ T9608] netlink: 64 bytes leftover after parsing attributes in process `syz.5.952'. [ 363.206713][ T9609] sd 0:0:1:0: device reset [ 363.273025][ T9608] binder: 9594:9608 unknown command 0 [ 363.278606][ T9608] binder: 9594:9608 ioctl c0306201 2000000003c0 returned -22 [ 364.805150][ T9632] loop2: detected capacity change from 0 to 7 [ 364.831090][ T9632] Dev loop2: unable to read RDB block 7 [ 364.851713][ T9632] loop2: unable to read partition table [ 364.862979][ T9632] loop2: partition table beyond EOD, truncated [ 364.894724][ T9632] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 365.213518][ T9643] siw: device registration error -23 [ 365.474958][ T9648] af_packet: tpacket_rcv: packet too big, clamped from 56 to 4294967272. macoff=96 [ 366.010292][ T5966] usb 6-1: new high-speed USB device number 3 using dummy_hcd [ 366.173853][ T5966] usb 6-1: Using ep0 maxpacket: 16 [ 366.186524][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 366.347766][ T5966] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 366.358043][ T5966] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 366.372211][ T5966] usb 6-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 366.381261][ T5966] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 366.399632][ T5966] usb 6-1: config 0 descriptor?? [ 367.249887][ T9678] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 367.269378][ T9677] [U] 1WT`8H$09\ [ 367.325907][ T9677] [U] ;2}UGVĥ#O9ե>-ߴSݢP [ 367.481049][ T9677] [U] 4XZ^Y)MC. OȞPOW [ 367.522694][ T30] audit: type=1400 audit(1754157897.189:525): avc: denied { map } for pid=9679 comm="syz.3.977" path="/dev/ptmx" dev="devtmpfs" ino=615 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ptmx_t tclass=chr_file permissive=1 [ 367.638368][ T9677] [U] ä%Z [ 367.724270][ T9677] [U] 8`}[TJ#Z~3µݥI~D%8@7J|{9DCE+OK?%6 [ 368.107729][ T9677] netlink: 8 bytes leftover after parsing attributes in process `syz.0.976'. [ 368.505680][ T9676] [U] P>BЍ̖Z% [ 368.512273][ T5966] usbhid 6-1:0.0: can't add hid device: -71 [ 368.519934][ T5966] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 368.531046][ T5966] usb 6-1: USB disconnect, device number 3 [ 368.659750][ T9673] syz.1.975 (9673): drop_caches: 1 [ 368.721511][ T9675] syz.1.975 (9675): drop_caches: 1 [ 371.449589][ T9742] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 371.460666][ T9742] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 371.604053][ T9746] misc userio: Invalid payload size [ 371.824022][ T30] audit: type=1400 audit(1754157901.519:526): avc: denied { relabelfrom } for pid=9747 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 371.990348][ T30] audit: type=1400 audit(1754157901.519:527): avc: denied { relabelto } for pid=9747 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 372.070810][ T30] audit: type=1400 audit(1754157901.659:528): avc: denied { kexec_image_load } for pid=9747 comm="syz.1.995" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 375.375679][ T30] audit: type=1400 audit(1754157905.059:529): avc: denied { setopt } for pid=9754 comm="syz.5.997" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 375.459831][ T9770] veth3: entered promiscuous mode [ 375.485845][ T9777] FAULT_INJECTION: forcing a failure. [ 375.485845][ T9777] name failslab, interval 1, probability 0, space 0, times 0 [ 375.550734][ T9777] CPU: 1 UID: 0 PID: 9777 Comm: syz.4.1005 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 375.550763][ T9777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 375.550773][ T9777] Call Trace: [ 375.550779][ T9777] [ 375.550785][ T9777] dump_stack_lvl+0x16c/0x1f0 [ 375.550816][ T9777] should_fail_ex+0x512/0x640 [ 375.550849][ T9777] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 375.550879][ T9777] should_failslab+0xc2/0x120 [ 375.550899][ T9777] __kmalloc_cache_noprof+0x6a/0x3e0 [ 375.550925][ T9777] ? alloc_mnt_ns+0xd2/0x520 [ 375.550946][ T9777] alloc_mnt_ns+0xd2/0x520 [ 375.550964][ T9777] copy_mnt_ns+0x112/0xac0 [ 375.550984][ T9777] ? trace_kmem_cache_alloc+0x28/0xc0 [ 375.551005][ T9777] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 375.551023][ T9777] ? create_new_namespaces+0x30/0xa90 [ 375.551052][ T9777] create_new_namespaces+0xd3/0xa90 [ 375.551074][ T9777] ? bpf_lsm_capable+0x9/0x10 [ 375.551097][ T9777] ? security_capable+0x7e/0x260 [ 375.551118][ T9777] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 375.551144][ T9777] ksys_unshare+0x45b/0xa40 [ 375.551170][ T9777] ? __pfx_ksys_unshare+0x10/0x10 [ 375.551194][ T9777] ? ksys_write+0x1ac/0x250 [ 375.551220][ T9777] __x64_sys_unshare+0x31/0x40 [ 375.551244][ T9777] do_syscall_64+0xcd/0x4c0 [ 375.551271][ T9777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.551289][ T9777] RIP: 0033:0x7f654578eb69 [ 375.551304][ T9777] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.551319][ T9777] RSP: 002b:00007f65465af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 375.551336][ T9777] RAX: ffffffffffffffda RBX: 00007f65459b5fa0 RCX: 00007f654578eb69 [ 375.551347][ T9777] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480 [ 375.551358][ T9777] RBP: 00007f65465af090 R08: 0000000000000000 R09: 0000000000000000 [ 375.551368][ T9777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 375.551378][ T9777] R13: 0000000000000000 R14: 00007f65459b5fa0 R15: 00007ffd40d663a8 [ 375.551401][ T9777] [ 375.806593][ T9781] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 376.170630][ T9781] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 376.418767][ T9785] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(14) [ 376.425393][ T9785] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 376.453105][ T9785] vhci_hcd vhci_hcd.0: Device attached [ 376.477680][ T9790] vhci_hcd: connection closed [ 376.479950][ T1090] vhci_hcd: stop threads [ 376.490950][ T1090] vhci_hcd: release socket [ 376.501241][ T1090] vhci_hcd: disconnect device [ 376.577219][ T9797] pim6reg1: entered allmulticast mode [ 376.681711][ T5966] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 376.841784][ T5966] usb 5-1: Using ep0 maxpacket: 16 [ 376.851083][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 376.869415][ T5966] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 376.889764][ T5966] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 376.916071][ T5966] usb 5-1: New USB device found, idVendor=0955, idProduct=7214, bcdDevice=ed.00 [ 376.935609][ T5966] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.956141][ T5966] usb 5-1: config 0 descriptor?? [ 377.551050][ T12] Bluetooth: hci5: Frame reassembly failed (-84) [ 377.657947][ T9810] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 378.094017][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.172533][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.541828][ T5857] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 379.612799][ T5859] Bluetooth: hci5: command 0x1003 tx timeout [ 381.258101][ T5966] usbhid 5-1:0.0: can't add hid device: -71 [ 381.583702][ T5966] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 381.791230][ T5966] usb 5-1: USB disconnect, device number 45 [ 382.063444][ T9837] pci 0000:00:05.0: vgaarb: VGA decodes changed: olddecodes=io+mem,decodes=none:owns=io+mem [ 382.140477][ T30] audit: type=1400 audit(1754157911.819:530): avc: denied { append } for pid=9825 comm="syz.0.1015" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 383.538854][ T30] audit: type=1800 audit(1754157913.219:531): pid=9848 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.4.1022" name="/" dev="fuse" ino=1 res=0 errno=0 [ 384.541254][ T30] audit: type=1400 audit(1754157913.319:532): avc: denied { create } for pid=9860 comm="syz.3.1025" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_connector_socket permissive=1 [ 384.591656][ T30] audit: type=1400 audit(1754157913.379:533): avc: denied { mounton } for pid=9860 comm="syz.3.1025" path="/proc/695/task" dev="proc" ino=26905 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 386.672425][ T9872] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 386.915640][ T30] audit: type=1400 audit(1754157916.609:534): avc: denied { map } for pid=9875 comm="syz.4.1030" path="/dev/usbmon8" dev="devtmpfs" ino=740 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 386.917028][ T9879] loop6: detected capacity change from 0 to 524287999 [ 388.758727][ T9905] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1538 sclass=netlink_route_socket pid=9905 comm=syz.4.1035 [ 388.926061][ T9906] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 388.937329][ T9906] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 390.656554][ T30] audit: type=1400 audit(1754157920.349:535): avc: denied { ioctl } for pid=9917 comm="syz.0.1041" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x7041 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 390.681396][ C1] vkms_vblank_simulate: vblank timer overrun [ 391.891852][ T30] audit: type=1400 audit(1754157921.509:536): avc: denied { bind } for pid=9926 comm="syz.3.1044" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 392.222627][ T9934] siw: device registration error -23 [ 392.237212][ T9934] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x5 [ 393.012055][ T10] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 393.181797][ T10] usb 1-1: Using ep0 maxpacket: 8 [ 393.878053][ T10] usb 1-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 393.903487][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 393.911507][ T10] usb 1-1: Product: syz [ 393.930882][ T10] usb 1-1: Manufacturer: syz [ 393.944509][ T10] usb 1-1: SerialNumber: syz [ 393.976119][ T10] usb 1-1: config 0 descriptor?? [ 393.988478][ T10] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 394.709454][ T9964] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 394.719485][ T9964] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 394.823015][ T5844] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 394.912560][ T9980] FAULT_INJECTION: forcing a failure. [ 394.912560][ T9980] name failslab, interval 1, probability 0, space 0, times 0 [ 394.925491][ T9980] CPU: 1 UID: 0 PID: 9980 Comm: syz.4.1058 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 394.925546][ T9980] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 394.925562][ T9980] Call Trace: [ 394.925568][ T9980] [ 394.925574][ T9980] dump_stack_lvl+0x16c/0x1f0 [ 394.925600][ T9980] should_fail_ex+0x512/0x640 [ 394.925650][ T9980] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 394.925677][ T9980] should_failslab+0xc2/0x120 [ 394.925695][ T9980] __kmalloc_cache_noprof+0x6a/0x3e0 [ 394.925717][ T9980] ? alloc_mnt_ns+0xd2/0x520 [ 394.925730][ T9980] alloc_mnt_ns+0xd2/0x520 [ 394.925742][ T9980] copy_mnt_ns+0x112/0xac0 [ 394.925755][ T9980] ? trace_kmem_cache_alloc+0x28/0xc0 [ 394.925771][ T9980] ? kmem_cache_alloc_noprof+0x21e/0x3b0 [ 394.925790][ T9980] ? create_new_namespaces+0x30/0xa90 [ 394.925816][ T9980] create_new_namespaces+0xd3/0xa90 [ 394.925836][ T9980] ? bpf_lsm_capable+0x9/0x10 [ 394.925858][ T9980] ? security_capable+0x7e/0x260 [ 394.925872][ T9980] unshare_nsproxy_namespaces+0xc0/0x1f0 [ 394.925888][ T9980] ksys_unshare+0x45b/0xa40 [ 394.925906][ T9980] ? __pfx_ksys_unshare+0x10/0x10 [ 394.925925][ T9980] ? ksys_write+0x1ac/0x250 [ 394.925948][ T9980] __x64_sys_unshare+0x31/0x40 [ 394.925971][ T9980] do_syscall_64+0xcd/0x4c0 [ 394.926002][ T9980] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 394.926019][ T9980] RIP: 0033:0x7f654578eb69 [ 394.926029][ T9980] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 394.926040][ T9980] RSP: 002b:00007f65465af038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 394.926052][ T9980] RAX: ffffffffffffffda RBX: 00007f65459b5fa0 RCX: 00007f654578eb69 [ 394.926059][ T9980] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000002a020480 [ 394.926065][ T9980] RBP: 00007f65465af090 R08: 0000000000000000 R09: 0000000000000000 [ 394.926072][ T9980] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 394.926079][ T9980] R13: 0000000000000000 R14: 00007f65459b5fa0 R15: 00007ffd40d663a8 [ 394.926101][ T9980] [ 395.133712][ C1] vkms_vblank_simulate: vblank timer overrun [ 395.141209][ T5959] usb 6-1: new high-speed USB device number 4 using dummy_hcd [ 395.169141][ T5844] usb 2-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 395.178407][ T5844] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.186547][ T5844] usb 2-1: Product: syz [ 395.190711][ T5844] usb 2-1: Manufacturer: syz [ 395.195369][ T5844] usb 2-1: SerialNumber: syz [ 395.201512][ T5844] usb 2-1: config 0 descriptor?? [ 395.208238][ T5844] ch341 2-1:0.0: ch341-uart converter detected [ 395.291653][ T5959] usb 6-1: Using ep0 maxpacket: 32 [ 395.303654][ T5959] usb 6-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 8 [ 395.316466][ T5959] usb 6-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice=40.40 [ 395.325819][ T5959] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 395.334684][ T5959] usb 6-1: Manufacturer: ఄ [ 395.339701][ T5959] usb 6-1: SerialNumber: 쾗ᛒ袛牢鸨ꅼ베欿蚝吺듮㞼껼ᓪᗚ鏏ꝇꆖ춞ᶱꨑ촸蟬몀壑ꋚ꫾膇∙蝡屜ᥞ [ 395.368366][ T9969] raw-gadget.4 gadget.5: fail, usb_ep_enable returned -22 [ 395.394790][ T5857] Bluetooth: hci0: unexpected event for opcode 0x0000 [ 395.585379][ T5857] Bluetooth: hci1: unexpected event 0x03 length: 1 < 11 [ 395.716931][ T9993] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 395.734513][ T9993] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 395.785431][ T10] gspca_sonixj: reg_w1 err -71 [ 395.862133][ T10] sonixj 1-1:0.0: probe with driver sonixj failed with error -71 [ 395.881867][ T10] usb 1-1: USB disconnect, device number 28 [ 396.254196][ T5844] usb 2-1: failed to send control message: -71 [ 396.272158][ T5844] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 396.275709][T10001] macvlan7: entered promiscuous mode [ 396.308406][ T5844] usb 2-1: USB disconnect, device number 32 [ 396.325029][ T5844] ch341 2-1:0.0: device disconnected [ 397.076330][ T5959] usb 6-1: USB disconnect, device number 4 [ 397.911657][ T5844] usb 2-1: new high-speed USB device number 33 using dummy_hcd [ 398.031688][ T5906] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 398.064789][ T5844] usb 2-1: config 0 interface 0 has no altsetting 0 [ 398.074388][ T5844] usb 2-1: New USB device found, idVendor=046d, idProduct=c29c, bcdDevice= 0.00 [ 398.086385][ T5844] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.098695][ T5844] usb 2-1: config 0 descriptor?? [ 398.147916][T10018] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 398.201836][ T5906] usb 1-1: Using ep0 maxpacket: 8 [ 398.209448][ T5906] usb 1-1: config 0 has an invalid descriptor of length 135, skipping remainder of the config [ 398.219909][ T5906] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 398.228957][ T5906] usb 1-1: New USB device found, idVendor=046d, idProduct=0892, bcdDevice=6d.2a [ 398.238077][ T5906] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 398.247520][ T5906] usb 1-1: config 0 descriptor?? [ 398.458567][T10007] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 398.467627][T10007] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 398.484208][ T5906] usb 1-1: USB disconnect, device number 29 [ 398.517154][ T5844] logitech 0003:046D:C29C.000F: hidraw0: USB HID v1.01 Device [HID 046d:c29c] on usb-dummy_hcd.1-1/input0 [ 398.711467][ T5844] logitech 0003:046D:C29C.000F: no inputs found [ 398.723798][ T5844] usb 2-1: USB disconnect, device number 33 [ 398.771648][ T5927] usb 6-1: new high-speed USB device number 5 using dummy_hcd [ 398.916398][ T5927] usb 6-1: device descriptor read/64, error -71 [ 399.214072][ T5927] usb 6-1: new high-speed USB device number 6 using dummy_hcd [ 399.451669][ T5927] usb 6-1: device descriptor read/64, error -71 [ 399.451783][ T5857] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 399.469168][ T5857] Bluetooth: hci0: Injecting HCI hardware error event [ 399.478331][ T5859] Bluetooth: hci0: hardware error 0x00 [ 399.569755][T10043] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 399.611932][T10043] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 399.626817][ T5927] usb usb6-port1: attempt power cycle [ 401.151656][ T10] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 401.304947][ T10] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 401.314114][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 401.333611][ T10] usb 5-1: Product: syz [ 401.337781][ T10] usb 5-1: Manufacturer: syz [ 401.344908][ T10] usb 5-1: SerialNumber: syz [ 401.351502][ T10] usb 5-1: config 0 descriptor?? [ 401.358725][ T10] ch341 5-1:0.0: ch341-uart converter detected [ 401.365184][ T5927] usb 6-1: new high-speed USB device number 7 using dummy_hcd [ 401.381840][ T5906] usb 2-1: new high-speed USB device number 34 using dummy_hcd [ 401.392057][ T5927] usb 6-1: device descriptor read/8, error -71 [ 401.533904][ T5906] usb 2-1: Using ep0 maxpacket: 8 [ 401.534033][ T5859] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 401.541298][ T5906] usb 2-1: config index 0 descriptor too short (expected 301, got 45) [ 401.821294][ T5906] usb 2-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 401.868863][ T5906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 401.889365][ T5906] usb 2-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 401.931911][ T5906] usb 2-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 401.955353][ T5906] usb 2-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 401.967300][ T5906] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 402.426200][ T10] usb 5-1: failed to send control message: -71 [ 402.432999][ T10] ch341-uart ttyUSB1: probe with driver ch341-uart failed with error -71 [ 402.536489][ T5859] Bluetooth: hci1: Controller not accepting commands anymore: ncmd = 0 [ 402.546008][ T5859] Bluetooth: hci1: Injecting HCI hardware error event [ 402.555947][ T5859] Bluetooth: hci1: hardware error 0x00 [ 402.989643][ T10] usb 5-1: USB disconnect, device number 46 [ 403.028469][T10065] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1085'. [ 403.173493][ T5906] usb 2-1: GET_CAPABILITIES returned 0 [ 403.174289][ T10] ch341 5-1:0.0: device disconnected [ 403.180118][ T5906] usbtmc 2-1:16.0: can't read capabilities [ 403.584457][ T9997] Oops: general protection fault, probably for non-canonical address 0xdffffc000000000b: 0000 [#1] SMP KASAN NOPTI [ 403.596549][ T9997] KASAN: null-ptr-deref in range [0x0000000000000058-0x000000000000005f] [ 403.604945][ T9997] CPU: 1 UID: 0 PID: 9997 Comm: kbnepd bnep0 Not tainted 6.16.0-syzkaller-11105-ga6923c06a3b2 #0 PREEMPT(full) [ 403.616725][ T9997] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 403.626756][ T9997] RIP: 0010:klist_put+0x4d/0x1b0 [ 403.631684][ T9997] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 ac 39 0d [ 403.651272][ T9997] RSP: 0018:ffffc90003f1f9b0 EFLAGS: 00010202 [ 403.657321][ T9997] RAX: dffffc0000000000 RBX: ffff888056990460 RCX: ffffffff8260ce7d [ 403.665271][ T9997] RDX: 000000000000000b RSI: ffffffff8b87e035 RDI: 0000000000000058 [ 403.673217][ T9997] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 403.681164][ T9997] R10: 0000000000000000 R11: ffffffff81a1eea5 R12: 0000000000000000 [ 403.689108][ T9997] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 403.697053][ T9997] FS: 0000000000000000(0000) GS:ffff8881247c8000(0000) knlGS:0000000000000000 [ 403.705969][ T9997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.712559][ T9997] CR2: 00007ffd40d64e88 CR3: 000000005d165000 CR4: 00000000003526f0 [ 403.720521][ T9997] Call Trace: [ 403.723781][ T9997] [ 403.726704][ T9997] device_del+0x1d8/0x9f0 [ 403.731030][ T9997] ? __pfx_device_del+0x10/0x10 [ 403.735863][ T9997] ? netdev_unregister_kobject+0x2da/0x540 [ 403.741646][ T9997] unregister_netdevice_many_notify+0x14f0/0x24c0 [ 403.748048][ T9997] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 403.754792][ T9997] ? __pfx___mutex_lock+0x10/0x10 [ 403.759806][ T9997] unregister_netdevice_queue+0x305/0x3f0 [ 403.765510][ T9997] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 403.771759][ T9997] ? rtnl_net_dev_lock+0x28/0x360 [ 403.776776][ T9997] ? rtnl_net_dev_lock+0x146/0x360 [ 403.781875][ T9997] ? rtnl_lock+0x9/0x20 [ 403.786017][ T9997] ? rtnl_net_dev_lock+0x146/0x360 [ 403.791115][ T9997] unregister_netdev+0x1f/0x60 [ 403.795867][ T9997] bnep_session+0x224e/0x2d80 [ 403.800563][ T9997] ? __pfx_bnep_session+0x10/0x10 [ 403.805575][ T9997] ? do_raw_spin_lock+0x12c/0x2b0 [ 403.810578][ T9997] ? __pfx_woken_wake_function+0x10/0x10 [ 403.816189][ T9997] ? rcu_is_watching+0x12/0xc0 [ 403.820939][ T9997] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 403.826726][ T9997] ? lockdep_hardirqs_on+0x7c/0x110 [ 403.831914][ T9997] ? __kthread_parkme+0x19e/0x250 [ 403.836922][ T9997] ? __pfx_bnep_session+0x10/0x10 [ 403.841936][ T9997] kthread+0x3c5/0x780 [ 403.845982][ T9997] ? __pfx_kthread+0x10/0x10 [ 403.850557][ T9997] ? rcu_is_watching+0x12/0xc0 [ 403.855300][ T9997] ? __pfx_kthread+0x10/0x10 [ 403.859869][ T9997] ret_from_fork+0x5d7/0x6f0 [ 403.864439][ T9997] ? __pfx_kthread+0x10/0x10 [ 403.869005][ T9997] ret_from_fork_asm+0x1a/0x30 [ 403.873751][ T9997] [ 403.876745][ T9997] Modules linked in: [ 403.881038][ T9997] ---[ end trace 0000000000000000 ]--- [ 403.888664][ T5906] usb 2-1: USB disconnect, device number 34 [ 403.895435][ T9997] RIP: 0010:klist_put+0x4d/0x1b0 [ 403.900462][ T9997] Code: c1 ea 03 80 3c 02 00 0f 85 5f 01 00 00 48 b8 00 00 00 00 00 fc ff df 4c 8b 23 49 83 e4 fe 49 8d 7c 24 58 48 89 fa 48 c1 ea 03 <80> 3c 02 00 0f 85 2e 01 00 00 4c 89 e7 4d 8b 74 24 58 e8 ac 39 0d [ 403.921138][ T9997] RSP: 0018:ffffc90003f1f9b0 EFLAGS: 00010202 [ 403.927902][ T9997] RAX: dffffc0000000000 RBX: ffff888056990460 RCX: ffffffff8260ce7d [ 403.937700][ T9997] RDX: 000000000000000b RSI: ffffffff8b87e035 RDI: 0000000000000058 [ 403.947079][ T9997] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000000 [ 403.955594][ T9997] R10: 0000000000000000 R11: ffffffff81a1eea5 R12: 0000000000000000 [ 403.963839][ T9997] R13: 0000000000000001 R14: 0000000000000001 R15: 0000000000000000 [ 403.972168][ T9997] FS: 0000000000000000(0000) GS:ffff8881246c8000(0000) knlGS:0000000000000000 [ 403.981213][ T9997] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 403.988074][ T9997] CR2: 00007f654658ed58 CR3: 0000000032407000 CR4: 00000000003526f0 [ 403.996357][ T9997] Kernel panic - not syncing: Fatal exception [ 404.002608][ T9997] Kernel Offset: disabled [ 404.006915][ T9997] Rebooting in 86400 seconds..