last executing test programs: 9.958733379s ago: executing program 3 (id=1502): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0405626, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 9.067989271s ago: executing program 4 (id=1507): syz_open_dev$mouse(&(0x7f00000000c0), 0x0, 0x82042) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000180)=0x1400200bce) sched_setscheduler(0x0, 0x1, &(0x7f0000002200)=0x1) r0 = syz_open_dev$MSR(&(0x7f0000000240), 0x0, 0x0) read$msr(r0, &(0x7f0000002700)=""/102392, 0x18ff8) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) syz_emit_ethernet(0x5e, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x8, 0x6, "4b38c3", 0x28, 0x29, 0x1, @local, @mcast2, {[], "59132926ac841b11e80c0220c53c3f58b562ec28bf6593d32e44221b2e45a61804272e23415ce8aa"}}}}}, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000010000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r3}, 0xc) openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x103042, 0x0) mount$nfs(0x0, &(0x7f0000000180)='./file1\x00', &(0x7f00000001c0), 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB='ac,,']) mount$fuse(0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYRESHEX]) syz_open_procfs(0x0, &(0x7f00000042c0)='mounts\x00') ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'ip_vti0\x00'}) request_key(&(0x7f0000000200)='rxrpc\x00', &(0x7f0000000280)={'syz', 0x2}, &(0x7f00000002c0)='//+%\xda\\[}]]\x00', 0x0) 7.917652562s ago: executing program 4 (id=1509): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/consoles\x00', 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e20}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x218, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) close(0xffffffffffffffff) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$dsp1(0xffffffffffffff9c, 0x0, 0x361082, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x100000f, 0x810, 0xffffffffffffffff, 0x57c68000) sched_setattr(0x0, &(0x7f0000000100)={0x38, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) memfd_create(&(0x7f0000000d00)='Y\xff\xff\x00\x00\x00\x00\x00K\xb2\x02\x80B\xe9\xe8\xcc\xde\x06\x00l\xa8\x1aJ\xaf\xb2M\xba\xb8_\x05U\xcd<|>\x9e\xec^\x0e\xbe\x18+-\x9b\x893\x02\x00\xa6\x1f+\xb3\xc5\x90z5\xe0\xdfi\xb7\x9f\xb4QW\xc9\xc9\x92\x03\t\x00\x00\x00\x00\x00\xb2\x0f\xee\xbe\f8\xcc\x7f\x00\x00\x00Z\x81\x00\x00\x00\x00\x18I\x13\xf1\xa2x\x04\x81R\xd45R\xae\x05\x00\x00\x00\x00\x00\x00\x00_M^dQ:\xbc\xafq\x88\x19nSF|;]\xe1A\x8c\x8a\x98\xd7|\xdcLF\r\xb1\xfd\xbf!\xc7u\xccP\xdd\x13~\x89\xcf\x85\xca\xa0%\xc6\xc7\x11\x00\x00\x00\x00\x00\x00\x00?M9\\\av~\'\xd9\xb0\xacdya]8\x9d\xb7\v\xf39\xc5{\x9c!\x0f/\xb8o8\xb9\x8d\x19\xe2\xca\x01y\x83\xe7\ng\x87\xd93\xf0y\xd6\xb0\xf2\x9f\xa7\xcf\xad\x86\\\xec\xec\xd6\x9d\bT\xcd\xa2\xea', 0xe) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) write$RDMA_USER_CM_CMD_DESTROY_ID(0xffffffffffffffff, &(0x7f0000000040)={0x1, 0x10, 0xfa00, {0x0}}, 0x68) connect$inet(r5, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r5, &(0x7f0000000200)=[{0x0}], 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) 7.757977827s ago: executing program 3 (id=1510): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000300)=""/3, 0x46, 0x3, 0x1, 0x0, 0x0, @void, @value}, 0x28) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r1 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r0, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r1, &(0x7f00000000c0)="01", 0x24}]) 7.057186275s ago: executing program 2 (id=1512): prlimit64(0x0, 0xe, &(0x7f0000000180)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='ramfs\x00', 0x0, 0x0) madvise(&(0x7f0000000000/0x800000)=nil, 0x800000, 0xe) r1 = userfaultfd(0x801) r2 = socket$inet6(0xa, 0x3, 0x0) getsockopt$inet_sctp6_SCTP_NODELAY(r2, 0x84, 0x3, &(0x7f00000001c0), &(0x7f0000000280)=0x4) r3 = getpid() process_vm_readv(r3, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) ioctl$UFFDIO_WRITEPROTECT(r1, 0xc018aa06, &(0x7f00000000c0)={{&(0x7f000040a000/0x800000)=nil, 0x800000}, 0x1}) madvise(&(0x7f0000000000/0x600000)=nil, 0x600000, 0x8) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x15) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r4, 0x6, 0x25, 0x0, &(0x7f00000000c0)) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}, {@metacopy_on}]}) 7.056778105s ago: executing program 3 (id=1513): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/13], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0405626, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 6.862666908s ago: executing program 4 (id=1516): socket$inet6(0xa, 0x80002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r1 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r1, @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) write$FUSE_NOTIFY_RETRIEVE(r1, &(0x7f0000000100)={0x30, 0x5, 0x0, {0x0, 0x1}}, 0x30) read$FUSE(r1, &(0x7f0000004180)={0x2020}, 0x2020) r2 = openat$binfmt_register(0xffffff9c, &(0x7f0000000040), 0x1, 0x0) writev(r2, &(0x7f0000001f00)=[{&(0x7f0000001ac0)="4df069d64970996b9472d4", 0xb}], 0x1) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000000c0)={0x10000001}) epoll_pwait(0xffffffffffffffff, &(0x7f0000000080), 0x0, 0x80000000, 0x0, 0x0) 6.066567703s ago: executing program 4 (id=1517): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = add_key$keyring(&(0x7f0000000300), &(0x7f0000000380)={'syz', 0x1}, 0x0, 0x0, 0xffffffffffffffff) syz_open_dev$vim2m(&(0x7f00000002c0), 0x9, 0x2) keyctl$setperm(0x5, r2, 0x52b242d) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_io_uring_setup(0x497, &(0x7f0000000200)={0x0, 0x707b, 0x0, 0x4, 0x288}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) unshare(0x28000600) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x2000, 0x0) syz_io_uring_submit(r6, r7, &(0x7f00000002c0)=@IORING_OP_TEE={0x21, 0x2, 0x0, @fd_index=0x3, 0x0, 0x0, 0x7, 0x9, 0x1, {0x0, 0x0, r8}}) io_uring_enter(r5, 0x3516, 0x100000, 0x0, 0x0, 0x0) keyctl$join(0x1, &(0x7f0000000100)={'syz', 0x3}) keyctl$join(0x1, &(0x7f0000000140)={'syz', 0x3}) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x20000090) syz_io_uring_setup(0x4d6d, &(0x7f0000000000)={0x0, 0x7322, 0x20, 0x3, 0xbc}, &(0x7f0000000080), &(0x7f00000000c0)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x0, 0x1}, {0xffff, 0xffff}, {0xffff, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x4000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@newtfilter={0x4c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {}, {0x7, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa, 0x6, @broadcast}, @TCA_FLOWER_KEY_ETH_SRC_MASK={0xa, 0x7, [0xff, 0x0, 0xff]}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000090}, 0x20084084) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newlink={0x44, 0x10, 0x403, 0x70bd28, 0x300, {0x0, 0x0, 0x4, 0x0, 0x3ff, 0xc8df8ae552dcbaf7}, [@IFLA_LINK={0x8, 0x5, r10}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_TXQLEN={0x8, 0xd, 0x5677f557}]}, 0x44}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000c00)={0x1, 0x58, &(0x7f0000000b80)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000cc0)={'ip6gre0\x00', &(0x7f0000000c40)={'ip6tnl0\x00', 0x0, 0x4, 0x5, 0x8, 0x101, 0xa, @local, @mcast1, 0x8, 0x7800, 0x0, 0xfff}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f0000001000)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000d00)={0x290, 0x0, 0x800, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x5c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x17}, 0x40841) 6.047459184s ago: executing program 0 (id=1518): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = socket$netlink(0x10, 0x3, 0x4) write(r1, &(0x7f0000005c00)="2700000014000707030e0000120f0a0011000100f5fe0012ff000000078a151f75080039000500", 0x27) ioprio_set$pid(0x1, 0x0, 0x4007) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001480), 0x42002, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ptrace(0x10, 0x1) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000003400), 0x12) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) connect$inet6(0xffffffffffffffff, &(0x7f0000000100)={0xa, 0x0, 0x0, @private1, 0x200000}, 0x1c) openat2$dir(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup\x00', &(0x7f00000000c0)={0x0, 0x0, 0x3}, 0x65) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x25c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0xc000}, 0x4000000) r5 = syz_open_dev$dri(&(0x7f0000000080), 0x1, 0x0) ioctl$DRM_IOCTL_SET_CLIENT_CAP(r5, 0x4010640d, &(0x7f0000000000)={0x3, 0x2}) ioctl$DRM_IOCTL_MODE_GETPLANERESOURCES(r5, 0xc01064b5, &(0x7f0000000140)={&(0x7f0000000100)=[0x0], 0x1}) ioctl$DRM_IOCTL_MODE_OBJ_GETPROPERTIES(r5, 0xc02064b9, &(0x7f0000000dc0)={&(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000200), 0x4, r6}) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r5, 0xc04064a0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)=[0x0], 0x0, 0x0, 0x0, 0x1}) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$DRM_IOCTL_MODE_ATOMIC(r5, 0xc03864bc, &(0x7f0000000500)={0x200, 0x1, &(0x7f0000000180)=[r8], &(0x7f00000000c0), &(0x7f0000000580)=[r7], &(0x7f0000000040)}) ioctl$TIOCVHANGUP(r2, 0x5437, 0x0) 4.785753046s ago: executing program 0 (id=1520): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x9, &(0x7f00000000c0)=0xfff, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000000500010006000000050004000000000009"], 0x4c}}, 0x2) sendmsg$IPSET_CMD_ADD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e22000006000540"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) dup2(r2, 0xffffffffffffffff) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) sigaltstack(0x0, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) r5 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r5, 0x40405514, &(0x7f0000000540)={{0x0, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe01, 0x7aa, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0xfffffffffffffbff, 0x0, 0x9, 0x0, 0x0, 0x0, 0x5bb, 0x0, 0x0, 0x7, 0x0, 0x0, 0x45e3, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x101, 0x40003, 0xf43, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0xffff7ffc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2]}) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r4, 0x0, 0x0, 0x8000, 0x0, 0x0) fsopen(&(0x7f0000000080)='rpc_pipefs\x00', 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x3, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x1, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x7e67, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x6, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x10000005, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0x1000, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac8, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x80a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x200000, 0xb9, 0xce7, 0x8, 0x2, 0x57, 0x5, 0x3, 0x1ff, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0xa0000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x400002, 0x0) 4.672182924s ago: executing program 2 (id=1521): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000580)=ANY=[@ANYBLOB="1800"/15], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r0}, 0x10) r1 = syz_open_dev$vim2m(&(0x7f00000003c0), 0x1, 0x2) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f00000000c0)={0x10002, 0x1, 0x1}) r2 = gettid() ioctl$vim2m_VIDIOC_STREAMOFF(r1, 0xc0405626, &(0x7f0000000040)) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) 4.246642905s ago: executing program 2 (id=1522): r0 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000080)=@req3={0x8000, 0x200, 0x80, 0x20000, 0x0, 0x0, 0x8}, 0x1c) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000000), 0x2, 0x141102) writev(r1, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) syz_io_uring_submit(0x0, 0x0, 0x0) io_setup(0x8, 0x0) mmap(&(0x7f0000568000/0x2000)=nil, 0x1000000, 0x0, 0x11, r0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(0xffffffffffffffff, &(0x7f00000000c0)={0x1d, r2}, 0x10) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)={0x1, 0x0, 0x0, {0x0, 0x2710}, {0x77359400}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "a5976ac6acd41fd8"}}, 0x48}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000003f40)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001840)=ANY=[@ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0], 0x80}}, 0x20008800) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) 4.243471102s ago: executing program 0 (id=1524): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x10, 0xffffffffffffffff, 0xbbbd3000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000780)=@mangle={'mangle\x00', 0x1f, 0x6, 0x5e8, 0x140, 0x230, 0x140, 0x300, 0x230, 0x518, 0x518, 0x518, 0x518, 0x518, 0x6, &(0x7f0000000180), {[{{@ipv6={@empty, @private0, [0x0, 0x14602a3be8c04a21, 0xffffffff, 0xffffffff], [0xffffff, 0xff000000, 0xff, 0xffffff], 'bridge_slave_0\x00', 'virt_wifi0\x00', {0xff}, {}, 0x0, 0x6, 0x1, 0x2a}, 0x0, 0xf8, 0x140, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x6}}, @inet=@rpfilter={{0x28}, {0x5}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@remote, @ipv4=@broadcast, 0x32, 0x1b, 0x9}}}, {{@ipv6={@local, @mcast2, [0xffffffff, 0xffffff00, 0xffffff00, 0xffffff00], [0x0, 0x0, 0xff000000, 0xffffffff], 'geneve1\x00', 'syz_tun\x00', {0xff}, {0xff}, 0xbb, 0x5, 0x3, 0x6}, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@private=0xa010102, @ipv4=@multicast2, 0x1a, 0xa, 0x5}}}, {{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0x0, 0xff000000, 0xffffff00, 0xff000000], [0x0, 0xff000000, 0x0, 0xffffffff], 'batadv_slave_1\x00', 'hsr0\x00', {0xff}, {0xff}, 0x5e, 0x9f, 0x2, 0x10}, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x2, 0x6}}}, {{@ipv6={@mcast1, @local, [0xff000000, 0x0, 0x0, 0xffffff00], [0xffffffff, 0xffffff00, 0xffffffff], 'bond_slave_0\x00', '\x00', {}, {0xff}, 0x88, 0x3, 0x6, 0x48}, 0x0, 0x100, 0x148, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}, @common=@ah={{0x30}, {[0xffffffff, 0x4d6], 0x33, 0xd, 0x2}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@local, @ipv6=@remote, 0x3, 0xb, 0x1ff}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x648) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000580)='kmem_cache_free\x00'}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="0900010017f4d6f3030000000000000000c338d573fcf77e700000000000000000006291af028ecf9739f4f1b8a79f742e48a23a397a2b387b10b32049013f2c1d1a01fd1362a28e276c87257c482f92ad8d9b2df5d1335712dd32f843175ffb7616bda4d902c846f6d20e780c41bd4fdf98", @ANYBLOB="f43fb84dabc030c3265435c28096056ac988d6521102e5d30ad1b660b99ab728c3cb57b3b23e7a9b5922b5724eb4d14c2c1a4f7aa34aca35518107d739659bc975d20cd47142aea23f023f84d91697afc42b150bc647f27940a0a986aaf77d5515587eb229e6d08a7bd45624a1f77c3f3535c26612903d560fa509d76215952d12e94e5eef9de6391935bdf51218e9f3ef5c338d941f7d9283f48e9cc4265a18a60fb10f827cb1cddf505cd6cb0357fe27be242a63c61d473dbd4073af1d796beafaa618710f8e448c84bf47319de37df4c5157a1c83c7c8dda49a87c540", @ANYBLOB="00e30000007206db45a5a40bf35790449a004519a40000a7d41412b409c239ffff00000000000000094809000000000000abdf42eb4b06017a17", @ANYRES32=r4, @ANYRES32, @ANYRES64=r3], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100), &(0x7f0000000580), 0x1000, r5}, 0x38) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000001600)={r5, &(0x7f0000000580), &(0x7f0000001580)=""/92}, 0x20) syz_open_dev$vbi(&(0x7f0000000000), 0x0, 0x2) r6 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r6, &(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x42, 0x1}}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r7 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r8 = dup(r7) write$6lowpan_enable(r8, &(0x7f0000000000)='0', 0xfffffd2c) socket(0x10, 0x803, 0x0) r9 = socket$netlink(0x10, 0x3, 0x15) writev(r9, &(0x7f0000000000)=[{&(0x7f0000000200)="480000001400190d7ebdeb75fd0d8c562c84d8c033ed7a80fae0090f000000000000a2bc5603ca00000f7f89000000200000004a2471083ec6811778581acb6c0101ff0000000309", 0x48}], 0x1) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000400)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 4.066817361s ago: executing program 3 (id=1525): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000040), 0x12) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x46a643, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') keyctl$get_keyring_id(0x0, 0x0, 0xefca115) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000840)={0x3, 0x0, @pic={0x1, 0x2e, 0x4, 0x1, 0x5, 0xf5, 0x2, 0x5, 0x9, 0x8, 0x8, 0x2, 0x12, 0x1, 0x5, 0x7}}) openat$cgroup_ro(r3, &(0x7f0000000500)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) lchown(&(0x7f0000000000)='./file0\x00', r7, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 3.264084976s ago: executing program 0 (id=1526): socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000300)='consume_skb\x00', 0xffffffffffffffff, 0x0, 0x1ffffffffffffffe}, 0xfffffffffffffe6d) r0 = syz_io_uring_setup(0x231, &(0x7f0000000080)={0x0, 0x0, 0x10100, 0x0, 0xffffffff}, &(0x7f0000000540)=0x0, &(0x7f0000000100)=0x0) io_uring_register$IORING_REGISTER_PERSONALITY(r0, 0x9, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x5) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) syz_io_uring_submit(r1, r2, 0x0) io_uring_enter(r0, 0x7a98, 0x0, 0x0, 0x0, 0x0) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18eeff00000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000008385000000710000009500000100000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000140)={0x28, 0x0, 0x0, @my=0x1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r6}, 0x10) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r7, 0x28, 0x1, &(0x7f0000000100)=0xfffffffffffffffe, 0x112) r8 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101301) ioctl$USBDEVFS_DISCONNECT_CLAIM(r8, 0x8108551b, &(0x7f0000000380)={0x0, 0x0, "5a77bd318786aeb879ca62cdab2a0000000086d85b25a5665a3247e500f61681905db88235f8a5447dd2a2ed6e91626f068881e50f6853772b21a100efb76cba37ff3111d6847e8b9398a646717af75fc008daefba68e6222103472bc55704cdb72b4b996ed831f3b802549db3a8ffff7d34171113d806726615380fe65a6a0a72e1ac2b60bd6276fd8bb6363d10f70da60fd53ded22c87eb2be010e4a62fb73c33424b437bb192c9d06ea6ed04983fe5c5ca033dfce0a82575ef14eee686be0fc58e384f93a13f4e8bbf599394baea3a9ca1864f0a35d6cc38fca32ad6b39905a9727d2001457df7be7e1aefe363590d1f600"}) mq_unlink(&(0x7f0000000140)='(\x00') ioctl$USBDEVFS_CLEAR_HALT(r8, 0xc0105502, &(0x7f0000000300)={0x1, 0x1}) mkdir(&(0x7f0000000180)='./file1\x00', 0x49) userfaultfd(0x801) openat$uinput(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) 3.188623762s ago: executing program 2 (id=1527): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) socket$inet6(0xa, 0x2b3569ffd483801c, 0xfffffff8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000300000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/13], 0x50) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0040000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000058bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000240)=@newqdisc={0x9c, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x6c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x8d21, 0x0, 0x8, 0xfffe, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x2000005}]}}]}, 0x9c}}, 0x0) 3.17196499s ago: executing program 4 (id=1528): syz_io_uring_setup(0x10c, &(0x7f0000000380)={0x0, 0x5885, 0x10, 0x1}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r0, r1, &(0x7f00000002c0)=@IORING_OP_TIMEOUT={0xb, 0x1, 0x0, 0x0, 0x7, &(0x7f0000000100)={0x0, 0x989680}, 0x1, 0x4, 0x1}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000280)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000680)=ANY=[@ANYRES32, @ANYRESHEX=r1, @ANYBLOB='/\x00'/12, @ANYRESHEX, @ANYBLOB="1b46dc4b4a446f16a937e67e22053541a70ab335447202450412030a678a0df8235834bf76ffcb23b88c29f54558725329f13a7c54f5593443b664f772cd9f34987f61f9b67f8ac95b16f40d35eaeff8f57282624fa0e64bb43a5a7315e0957c0c9f4820f57655a8708656d507d6a902f8f0dcff82e69dea851244a161d079cd085abebaebadb63f7ad5897aaa624012cfccc855dddea4d4195c798dd6e1dc550f94615727e2ff5fb428dbbad63ca5021e06003075bcd649902bf92a27b991cba9b7ed05bcae2f82eb43a0ff9b72df6ae17ad4d6", @ANYRES64=0x0], 0x20) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r4, @ANYRES32, @ANYBLOB="000000000032e63c3126f921abc94d57c88d00"/35], 0x50) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r5, &(0x7f00000005c0)="f5", 0x1, 0x80c0, &(0x7f0000000240)={0xa, 0x4e20, 0xffbffffc, @rand_addr=' \x01\x00'}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r5, 0x84, 0x7c, &(0x7f0000000040)={0x0, 0xfffd, 0x4}, 0x8) 2.647581859s ago: executing program 3 (id=1529): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) writev(0xffffffffffffffff, &(0x7f0000000000)=[{&(0x7f00000001c0)="47e881b4290945898b0a6a499c26ed27cce4fdfe381555113e31991782cfd809a25439a9fda8679100966e30cb512190521b942396b38150c34516a95a54612080fd9a3ee1524b8eec6d6669f4aaf6575c1b26231b28135884d32764527f94b6d97315ab8b7248cdcfd143a374b7c69f1b4c89aa8b16c6edca362aba9c15fe60a0f792bc9e16adbbba224b40c34ab954f90bd9a26c66abb4a7da324e2b5847864da18060a5635fe8c3587085e17ac586ff67ddae2cec291bb7414c59ef0908dfeaf86b2e73993bd87bb017035024f191af957cde643ed2f24117552d4d3fc3f2d3fc", 0xe2}], 0x1) socket$inet6(0xa, 0x80000, 0x40) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000380)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000034000)=""/102400, 0x19000) r1 = openat(0xffffffffffffff9c, 0x0, 0x2, 0x0) mmap$binder(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x1, 0x11, r1, 0x2000004) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1a}, 0x10}, 0x1c) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000003c0)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xbe}, 0x1c) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)=ANY=[], 0x0) syz_open_dev$I2C(&(0x7f0000000240), 0x800000000, 0x0) r2 = socket(0x1e, 0x1, 0x0) connect$tipc(r2, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) write$binfmt_misc(r2, &(0x7f0000000080), 0x2000011a) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x1d, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x2, 0x0, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x1, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x20000}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@dev={0xac, 0x14, 0x14, 0x2c}, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3, 0x0, 0x3fc}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000700)=ANY=[@ANYBLOB="a00000002100010000cc2c5881756575c900000000060000fffffdff000000000000000000000000fc0200000000000000000000ecff000000000000000000000a0000000000000064ba3379323a2a83d9e83621870bba394cd2e46cb86eed0559e350f41272fa6e501e8c578ebe8f37a11b136a7fe8cd62632b1269dc415554fb5f5f80bcf0803c3a4977ecfd04ebe42328ba0ea04351ab2ba0a7a64c874b9f02ebf26a70ccece86434f3b2cc53db2a", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000005000110000000000000000000000ffff7f000001e000000100000000000000000000000064010102000000000000000000000000200100000000000000000000000000003c0000000000000208000200"], 0xa0}}, 0x0) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r4, 0x29, 0x20, &(0x7f0000000100)={@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x0, 0xff, 0xe, 0x7fff, 0x2}, 0x20) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) 2.265950371s ago: executing program 2 (id=1530): socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="000000004ef47ed683a2d3e7a481bd4d51000000000003000000000004000000000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ecbc61c, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r0}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000480)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000005000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x2c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0x28, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0xc8}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x20008145, &(0x7f0000000040)={0xa, 0x4e23, 0x10, @local, 0xf5}, 0x18) getsockopt$inet6_int(r3, 0x29, 0x18, 0x0, &(0x7f0000000080)) syz_emit_ethernet(0x7a, &(0x7f00000009c0)={@random="856b1200ff00", @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "381f34", 0x44, 0x2f, 0x0, @private0, @mcast2, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x88a8}}}}}}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x80489439, &(0x7f0000000900)={'batadv_slave_1\x00'}) ioctl$USBDEVFS_BULK(0xffffffffffffffff, 0xc0185502, &(0x7f0000000000)={{{0xb}}, 0xfa, 0x1000, &(0x7f0000000300)="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"}) syz_usb_control_io(0xffffffffffffffff, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400010bce) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) setsockopt$packet_add_memb(r6, 0x107, 0x1, &(0x7f0000000080)={r7, 0x3, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000002c0)='mmap_lock_acquire_returned\x00', r1}, 0x10) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) mremap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x4000, 0x3, &(0x7f0000005000/0x4000)=nil) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) 1.895456393s ago: executing program 4 (id=1531): syz_open_dev$dri(&(0x7f0000000040), 0x2, 0x1) syz_usb_connect(0x0, 0x2d, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x1b, 0x61, 0xe3, 0x8, 0x16d0, 0x10a9, 0x3052, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x1b, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0xff, 0x7f, 0x88, 0x0, [], [{{0x9, 0x5, 0x3, 0x2}}]}}]}}]}}, 0x0) 970.246735ms ago: executing program 1 (id=1532): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) accept$nfc_llcp(0xffffffffffffffff, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) getsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) getpid() fsopen(&(0x7f00000000c0)='nilfs2\x00', 0x0) bpf$BPF_PROG_DETACH(0x8, 0x0, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f0000000300)=""/3, 0x46, 0x3, 0x1, 0x0, 0x0, @void, @value}, 0x28) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat2(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', &(0x7f0000000040)={0x20000, 0x1, 0x8}, 0x18) sendmsg$key(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="020800000100000000000001000000000100140003"], 0x18}}, 0x0) io_setup(0x30, &(0x7f0000000600)=0x0) r2 = openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000002740), 0x101002) io_submit(r1, 0x1, &(0x7f0000000180)=[&(0x7f0000000140)={0x0, 0x0, 0x0, 0x1, 0x0, r2, &(0x7f00000000c0)="01", 0x24}]) 594.563931ms ago: executing program 1 (id=1533): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000004c0)='dctcp\x00', 0x6) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback, 0x7}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='cdg\x00', 0x4) shutdown(r0, 0x1) 536.818333ms ago: executing program 1 (id=1534): prctl$PR_GET_TSC(0x43, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'stdrng\x00'}, 0x58) r1 = syz_io_uring_setup(0x10f, &(0x7f00000000c0)={0x0, 0x211a, 0x0, 0x4, 0x306}, &(0x7f0000000340)=0x0, &(0x7f0000000280)=0x0) r4 = mq_open(&(0x7f00000005c0)='eth0\x00#\x13\xaeu\xe0\xfb\x050*\xf3\x11i\xdd\xd9\xc6\x87\xde\xbf_\xa0\xf6\xdfk\xbf.\"\xa6\xc0#p\xcd\x1c/\xa6\xf2\xbcyL\x85a\xb5\xbb~+>\xbc\x93\xf8\xab\x9a3\x85l\x1d\x15\x11\x1a{@!2\xb6!\x19\xf1\xcce\xab\x80M\xc9\xcf\xaeR\xb69k\x90\x88\v8I$\xfdQ\x1d\x90=r\xd8\xc0\xd8\t/\x8dv\xb8\x93\xc3\xff\a\x00\x00\xd1T\xdd\x14\xd3\xe1\xbe_$A=z\xee\xbd/X\xbemOX)s\x94\xde\xbe_\v\x01\xbe\xeb\xbb\x91\x11z\xc2|d\x1b\x04\xd2\xf9yx\xb2\x1b\bLTrw\x88\x9e0\t\xc6\xe2\x9c\xed\\\xd8[\xc8\x04 \xf3\xac]V\x1d:\xfc\xc3\x9e\x02\aY\xef\xfe\x1c.TT\xcf\xbf\xf5\x80a%\xdcQ\xb3Cs\xb2\a\xfe\xb3j*\xad\x18I\xcc\xe9\x96{]\xef\xb7\xf2\xee*\xf95\bJt\xd0s\xc4\xaa\xc8\x13~\xb2\xf20\xbdf\xdb\xaeG\xe3\xfb\xef\x94\xef:Q\x1b\xe3\xa3\xa4}\xef`e\xcdL\x03\x00\x00\x00y\x9fg1\xf4\t\x18i/!\x13\xf1,\x8cu\xaa\xbf~)\x94\x1b2\x93\x86\xe7\x9a\xf2j\xa8\x96\xa6\x8e\xfcN\x81\xafTh\xb3\x1bo:\xe8\vq7S\xe4H\xf3L\xa0\x9c\x97B\x12\x10\x9d\xaa\x7fq\x06\xb9\xb3\x83\x1c\x83\xb1J\xec\x926\xb5a0\xa0B\xae|c\xf3\x8b\xc2E\x00\x00\x00\x00\x00\x00', 0x42, 0x0, 0x0) r5 = syz_io_uring_setup(0xd2, &(0x7f0000000880)={0x0, 0xdff9, 0x800, 0x1000, 0x0, 0x0, r1}, &(0x7f0000000000)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_CLOSE={0x13, 0x4e3b947d338dce40, 0x0, r4, 0x0, 0x0, 0x0, 0x0, 0x1}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r2, 0x4, &(0x7f0000000040)=0xffefffdc, 0x0, 0x4) syz_io_uring_submit(r2, r3, &(0x7f00000002c0)=@IORING_OP_ACCEPT={0xd, 0x0, 0x1, r0, 0x0}) io_uring_enter(r1, 0x3516, 0xc2de, 0x8, 0x0, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(0xffffffffffffffff, 0xc0502100, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x8) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r8 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) openat$sysctl(0xffffffffffffff9c, 0x0, 0x1, 0x0) read$msr(r8, &(0x7f0000019680)=""/102392, 0x18ff8) r9 = openat$dlm_plock(0xffffffffffffff9c, &(0x7f0000000080), 0x2000, 0x0) r10 = inotify_add_watch(r9, &(0x7f0000000040)='./file0\x00', 0x0) r11 = inotify_init() creat(&(0x7f0000000100)='./file0\x00', 0xd931d3864d39dcca) inotify_rm_watch(r11, r10) socket$inet6(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x38}}, 0x0) 401.698613ms ago: executing program 3 (id=1535): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x925, 0x8866, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_connect(0x0, 0x3b, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000ec13b2106d04d308280b0102030109022900010000000009046900000e01000008240501020205050764f7edb276"], 0x0) socket$pppoe(0x2d, 0x1, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0xffffffffffffff5b, {[@global=@item_4={0x3, 0x1, 0x9, "f3af50ea"}]}}, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 396.652026ms ago: executing program 1 (id=1536): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_socket_connect_nvme_tcp() sendto$inet_nvme_pdu(r1, &(0x7f00000001c0)=@data_h2c={{}, 0x0, 0x0, 0x1, 0x0, "cfbf3586"}, 0x80, 0x0, 0x0, 0x0) close(r1) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x201, 0x0, 0x0, {0xa}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_USERDATA={0x12, 0x3, "91abc12404cf378042f26c43f91f"}]}], {0x14}}, 0x5c}}, 0x0) 288.809928ms ago: executing program 1 (id=1537): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000280)='./file0\x00', 0x10) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000003c0)='cpuacct.usage_sys\x00', 0x275a, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000140)='./file1\x00', 0x0) madvise(&(0x7f0000864000/0x2000)=nil, 0x2000, 0xe) mkdir(&(0x7f0000000300)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) ioctl$BTRFS_IOC_GET_DEV_STATS(0xffffffffffffffff, 0xc4089434, &(0x7f0000000900)={0x0, 0x2, 0x1, [0xffff, 0x13a0000000000, 0x0, 0x88, 0x5], [0xffffffffffffff63, 0x8, 0xffffffffffffff4a, 0xfffffffffffffff8, 0x10000, 0x2, 0x2d9, 0x4, 0x3, 0xc7, 0x8001, 0x9, 0x4, 0x7e, 0x7d, 0x3ae7, 0x8, 0x101, 0x6, 0xffffffffffff8000, 0x3, 0x9, 0x7f, 0x6, 0x1, 0xc, 0x5, 0xff800000000000, 0x401, 0x7fffffff, 0xc333, 0x9, 0x6, 0x8001, 0x1, 0xd5d, 0x8, 0x1, 0x2, 0x5, 0x6cf2, 0x2, 0x9, 0xa, 0x0, 0xffffffff00000001, 0x7fffffffffffffff, 0x2, 0x5, 0x4cc2, 0xfffffffffffffff7, 0x6, 0x0, 0x3a67, 0x7f, 0x0, 0xfff, 0x8, 0x8, 0x3, 0x706, 0x2, 0x5b4, 0x8, 0xfffffffffffffffb, 0xb, 0xb88a, 0x6, 0x3, 0x6, 0x2, 0x77, 0x8, 0x346, 0x0, 0xfffffffffffffff9, 0x8, 0xffff800000000000, 0x7, 0x6, 0x7, 0x935, 0x7, 0x5, 0xe36, 0x3, 0x9, 0x5, 0x8, 0x6, 0x40000000000000, 0x6, 0x684, 0x2, 0x401, 0x34, 0x6fc, 0xc90, 0xfff, 0xfffffffffffffeff, 0x72, 0x3, 0x6, 0x28, 0x3, 0x1, 0x8d45, 0x100000000, 0x3ff, 0xf2, 0x800, 0x8, 0x8, 0x8001, 0x5, 0x9, 0xa, 0x1fb, 0x2, 0x6b, 0x334]}) mmap$snddsp_control(&(0x7f0000698000/0x400000)=nil, 0x1000, 0x1000000, 0x2010, r2, 0x83000000) chdir(&(0x7f0000000140)='./bus\x00') mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) chdir(&(0x7f00000000c0)='./bus\x00') openat(0xffffffffffffff9c, &(0x7f0000002600)='./file1\x00', 0x105042, 0x0) r3 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x2000, 0x0) ioctl$EXT4_IOC_GET_ES_CACHE(r3, 0xc020660b, &(0x7f0000000040)={0x3000000, 0x10000002000003, 0x1}) clock_nanosleep(0x3, 0x0, &(0x7f0000000240)={0x0, 0x989680}, &(0x7f00000002c0)) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000280), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000003, 0x28011, r4, 0x0) ioctl$INCFS_IOC_CREATE_FILE(r4, 0xc058671e, &(0x7f0000000640)={{}, {0x3}, 0x40, 0x0, 0x0, &(0x7f0000000100)='./bus\x00', &(0x7f00000001c0)='./bus\x00', &(0x7f0000000200)="1915aa31455afcef1e72f8d69160e0c7fcbf53dc21786b3b", 0x18, 0x0, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], 0x20e}) sendmsg$key(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0, 0xfed3}}, 0x200280c4) ioctl$FS_IOC_SETFLAGS(r4, 0xc0189436, &(0x7f0000000140)) 224.124689ms ago: executing program 2 (id=1538): r0 = socket$inet6(0xa, 0x80002, 0x0) r1 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sched_setscheduler(0x0, 0x2, 0x0) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) r3 = syz_open_dev$loop(&(0x7f0000000040), 0x50, 0x980) ioctl$AUTOFS_DEV_IOCTL_PROTOVER(r1, 0xc0189372, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {0x400}}, './file0\x00'}) ioctl$LOOP_CONFIGURE(r3, 0x4c0a, &(0x7f00000000c0)={r4, 0x0, {0x0, 0x0, 0x0, 0x8, 0x4, 0x0, 0x9, 0x20, 0x4, "777b8882abbb2657c068f683c733d876785631bc8ad7226ecdbc16671ad560fb18bf3f5dee5f4ec9d469d2d40450caa24a1c946d055173572bc813abe66d5a21", "61ed5be2a00b71e70963133ccba9ad53c1cf2a374bfc18d69eac01d475f8dc60de3b795234150609e4dc3230102b4d4ddbd2a6d76121392bc3dfb0fe40f37c9f", "663c8c03347acd05dc80787bd5015bccde3f2a743470ea23ffda03c9d6e329d2", [0x50, 0x4]}}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) openat$fuse(0xffffffffffffff9c, &(0x7f00000009c0), 0x2, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r6, &(0x7f0000000000)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, 0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}}, 0x1c) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000180)=@get={0x1, &(0x7f0000000340)=""/210, 0x9}) umount2(&(0x7f0000000000)='./file0\x00', 0x8) rseq(&(0x7f00000003c0), 0x20, 0x0, 0x0) r7 = memfd_create(&(0x7f0000000540)='y\x105\xfb\xf7u\x83%\x1f\xe09@:r\xc2\xb9x0\x90P\x03\x00\x00\x00\x00\x00\x00\x00\xfe,\x1c\xf1\xdd\xcf]\xac\xbc\t\xbb\xfc\xa4j\x9f\xceX\x8f5=\xaa\xd5\xe9n\xab s\xa5\x00\x8d\tV\t\x91\x18\x06O\xb0=D\xda\xb6F\x1a\xc82\x8b\xc0l\xd0\x89d\xe6\xb7\xd8\x97\xb8\xde\xa3\x89\"%/u\x17\xda\xd0\xc3p\xca\xf0#m\x8d\x01Lh\x1e^\x9ej\x1c\xc5\xf0\xf6\x92\x05\x9aH\x00\'\xd4\x94d[\v\xfc\xad\x0f\xa8\xc5\xad\x001\x8b%\xaa?\x00\x00\x00\x00\x00\x00\x00\nj\x8c\xef\x90\xc0Z\xfa\x1a\xb3\xf0wVq\xe9d\xf8N\x80\xd1g\xd8e\xc8\x16\xad1\x02\xab\xce3\xb2\xb0\xd1\x03\x00', 0x3) ftruncate(r7, 0xffff) 188.513263ms ago: executing program 0 (id=1539): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r0, &(0x7f0000000040), 0x12) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) bind$x25(r1, &(0x7f0000000080), 0x12) close(r1) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x46a643, 0x0) r3 = syz_open_procfs(0x0, &(0x7f0000000400)='fdinfo/3\x00') keyctl$get_keyring_id(0x0, 0x0, 0xefca115) openat$nullb(0xffffffffffffff9c, &(0x7f0000000080), 0x4000000004002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8d}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r4 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r6 = ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r6, 0xae60) ioctl$KVM_SET_IRQCHIP(r6, 0x8208ae63, &(0x7f0000000840)={0x3, 0x0, @pic={0x1, 0x2e, 0x4, 0x1, 0x5, 0xf5, 0x2, 0x5, 0x9, 0x8, 0x8, 0x2, 0x12, 0x1, 0x5, 0x7}}) openat$cgroup_ro(r3, &(0x7f0000000500)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000640)={{{@in6=@dev, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@empty}, 0x0, @in=@remote}}, &(0x7f0000000300)=0xe8) newfstatat(0xffffffffffffff9c, &(0x7f0000000440)='./file0\x00', &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x100) lchown(&(0x7f0000000000)='./file0\x00', r7, r8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='smbus_result\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) r9 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_SMBUS(r9, 0x720, &(0x7f00000000c0)={0x0, 0x2, 0x5, &(0x7f0000000080)={0x8, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) r10 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r10, 0xae60) 742.55µs ago: executing program 1 (id=1540): fsopen(&(0x7f0000000240)='virtiofs\x00', 0x1) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x41}, 0x809d) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)=ANY=[@ANYBLOB="000002f0d31209000000bc2e79e995"], 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) preadv(r2, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0xffffff23}], 0x3e, 0x0, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) fcntl$lock(r1, 0x7, &(0x7f0000000140)={0x2, 0x1, 0x2, 0xb}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000fe6000/0x18000)=nil, &(0x7f0000000040)=[@text16={0x10, &(0x7f0000000180)="66b9800000c00f326635000800000f300f0f1c9a65660ff3b20618baa000ec672e660f38803d004000000f285473f61366b9800000c00f326635004000000f300f20e06635800000000f22e0f30fa6c8", 0x50}], 0x1, 0x0, 0x0, 0x0) r3 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004000}, 0x14) prlimit64(0x0, 0x7, &(0x7f0000000180)={0x2, 0x3}, 0x0) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r3, &(0x7f0000000000/0x18000)=nil, &(0x7f00000004c0)=[@text32={0x20, 0x0}], 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0}, 0x10) ioctl$KVM_RUN(r3, 0xae80, 0x0) 0s ago: executing program 0 (id=1541): ioperm(0x6, 0x6, 0x8) clock_settime(0x0, &(0x7f0000000240)={0x77359400}) r0 = syz_io_uring_setup(0x33ab, &(0x7f00000005c0)={0x0, 0xe459, 0x2000, 0x2, 0x8002ae}, &(0x7f00000000c0), &(0x7f0000000140)) r1 = syz_open_dev$usbfs(&(0x7f0000000100), 0x76, 0x101801) ioctl$USBDEVFS_GET_SPEED(r1, 0x551f) io_uring_enter(r0, 0x3516, 0x0, 0x0, 0x0, 0xfffffdcf) ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000040)=0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x271a, 0x0, &(0x7f0000000040)) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(r0, 0xc0c89425, &(0x7f0000000440)={"19e47149c6dc721dee045241e133cae7", r2, 0x0, {0x3, 0x8}, {0x9}, 0xffffffffffffffff, [0x1, 0x6, 0x2, 0x4, 0x2, 0x10000, 0xd36, 0x10000000335, 0x6ae, 0x0, 0x7ff, 0x7fff, 0xfffffffffffffff9, 0x9, 0x5, 0x7ff]}) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = socket(0x2c, 0x803, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0xfb, 0x323, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1600000000000000040000000100000006600000", @ANYRES32=0x1, @ANYBLOB="00ff0000ed5c43776dffffffffffffff", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000300)={'ip6tnl0\x00', 0x4000}) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x300, 0x0) close(r6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_devices(0xffffffffffffffff, &(0x7f00000002c0)=ANY=[@ANYRESDEC=r0], 0xffdd) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) sendmsg$RDMA_NLDEV_CMD_RES_QP_GET(r5, &(0x7f00000001c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000000a14000128bd7000fedbdf25080000000000000008001500010000000800030001000000"], 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$IPVS_CMD_SET_INFO(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000ac0)={0x0}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r7, @ANYBLOB="01000000020000001c0012000c000100626f6e64"], 0x3c}}, 0x0) socket(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): 0x680 [ 308.676776][ T8819] ? __pfx_rng_dev_read+0x10/0x10 [ 308.676797][ T8819] vfs_read+0x1de/0xc70 [ 308.676827][ T8819] ? __pfx_vfs_read+0x10/0x10 [ 308.676848][ T8819] ? find_held_lock+0x2b/0x80 [ 308.676872][ T8819] ? __fget_files+0x204/0x3c0 [ 308.676902][ T8819] ? __fget_files+0x20e/0x3c0 [ 308.676934][ T8819] ksys_read+0x12a/0x240 [ 308.676957][ T8819] ? __pfx_ksys_read+0x10/0x10 [ 308.676979][ T8819] ? xfd_validate_state+0x5d/0x180 [ 308.677007][ T8819] do_syscall_64+0xcd/0x260 [ 308.677030][ T8819] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.677050][ T8819] RIP: 0033:0x7fd72b38e969 [ 308.677065][ T8819] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.677083][ T8819] RSP: 002b:00007fd72c150038 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 308.677102][ T8819] RAX: ffffffffffffffda RBX: 00007fd72b5b6080 RCX: 00007fd72b38e969 [ 308.677114][ T8819] RDX: 000000000000fdbb RSI: 0000200000001300 RDI: 0000000000000003 [ 308.677125][ T8819] RBP: 00007fd72c150090 R08: 0000000000000000 R09: 0000000000000000 [ 308.677135][ T8819] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 308.677146][ T8819] R13: 0000000000000001 R14: 00007fd72b5b6080 R15: 00007ffdbde702e8 [ 308.677169][ T8819] [ 310.495222][ T8853] netlink: 40 bytes leftover after parsing attributes in process `syz.4.760'. [ 310.505131][ T8853] netlink: 12 bytes leftover after parsing attributes in process `syz.4.760'. [ 310.539917][ T30] kauditd_printk_skb: 20 callbacks suppressed [ 310.539964][ T30] audit: type=1400 audit(1745841692.549:518): avc: denied { ioctl } for pid=8840 comm="syz.1.759" path="socket:[20735]" dev="sockfs" ino=20735 ioctlcmd=0x5411 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 310.814480][ T8856] team0: No ports can be present during mode change [ 312.885340][ T8879] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 313.836796][ T8887] macvtap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 313.895784][ T8887] macvtap2: entered allmulticast mode [ 313.905430][ T8887] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 315.355623][ T5864] usb 2-1: new high-speed USB device number 18 using dummy_hcd [ 315.645313][ T5864] usb 2-1: Using ep0 maxpacket: 8 [ 315.679250][ T5864] usb 2-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 316.118237][ T8914] SELinux: Context system_u:object_r:auditd_log_t:s0 is not valid (left unmapped). [ 316.130026][ T30] audit: type=1400 audit(1745841698.398:519): avc: denied { relabelfrom } for pid=8913 comm="syz.0.779" name="UNIX" dev="sockfs" ino=20886 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 316.173557][ T30] audit: type=1400 audit(1745841698.429:520): avc: denied { relabelto } for pid=8913 comm="syz.0.779" name="UNIX" dev="sockfs" ino=20886 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=unix_dgram_socket permissive=1 trawcon="system_u:object_r:auditd_log_t:s0" [ 316.203454][ T5864] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.223148][ T5864] usb 2-1: Product: syz [ 316.232060][ T5864] usb 2-1: Manufacturer: syz [ 316.318445][ T5864] usb 2-1: SerialNumber: syz [ 316.326888][ T5864] usb 2-1: config 0 descriptor?? [ 316.600650][ T5864] usb 2-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 317.332220][ T8917] overlayfs: failed to clone upperpath [ 317.616094][ T8936] netlink: 28 bytes leftover after parsing attributes in process `syz.4.784'. [ 317.665428][ T8941] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 317.685824][ T8941] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 317.956410][ T5874] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 318.221580][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.271792][ T5864] dvb_usb_rtl28xxu 2-1:0.0: probe with driver dvb_usb_rtl28xxu failed with error -71 [ 318.289032][ T5864] usb 2-1: USB disconnect, device number 18 [ 318.426797][ T5874] usb 1-1: Using ep0 maxpacket: 8 [ 318.437580][ T5874] usb 1-1: config index 0 descriptor too short (expected 301, got 45) [ 318.447140][ T5874] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 318.459109][ T5874] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 318.470441][ T5874] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 318.564275][ T5874] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 318.578375][ T5874] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1e, bcdDevice=61.23 [ 318.588566][ T5874] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 318.698927][ T8963] netlink: 80 bytes leftover after parsing attributes in process `syz.4.794'. [ 318.713919][ T8963] netlink: 12 bytes leftover after parsing attributes in process `syz.4.794'. [ 318.820738][ T5874] usb 1-1: usb_control_msg returned -71 [ 318.826951][ T5874] usbtmc 1-1:16.0: can't read capabilities [ 319.080760][ T5874] usb 1-1: USB disconnect, device number 16 [ 319.286105][ T30] audit: type=1400 audit(1745841701.626:521): avc: denied { read } for pid=8974 comm="syz.1.797" path="socket:[19688]" dev="sockfs" ino=19688 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 319.327846][ T30] audit: type=1400 audit(1745841701.666:522): avc: denied { bind } for pid=8974 comm="syz.1.797" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 319.350509][ T8979] gfs2: path_lookup on c::: returned error -2 [ 319.364402][ T8979] netlink: 64 bytes leftover after parsing attributes in process `syz.4.798'. [ 319.443928][ T30] audit: type=1400 audit(1745841701.788:523): avc: denied { name_connect } for pid=8981 comm="syz.0.800" dest=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 319.457395][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.527551][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 319.697712][ T5874] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 319.837176][ T30] audit: type=1400 audit(1745841701.880:524): avc: denied { module_request } for pid=8980 comm="syz.3.799" kmod="net-pf-10-proto-0-type-3" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=system permissive=1 [ 319.883904][ T8983] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 319.892516][ T8983] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 320.460370][ T5874] usb 1-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 320.492579][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.538253][ T5874] usb 1-1: Product: syz [ 320.569582][ T5874] usb 1-1: Manufacturer: syz [ 320.590198][ T5874] usb 1-1: SerialNumber: syz [ 320.632457][ T5874] usb 1-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 320.655918][ T5864] usb 1-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 320.827084][ T30] audit: type=1804 audit(1745841703.179:525): pid=9007 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.806" name="/newroot/166/file0" dev="tmpfs" ino=942 res=1 errno=0 [ 320.871835][ T5874] usb 1-1: USB disconnect, device number 17 [ 321.486348][ T9005] uprobe: syz.3.806:9005 failed to unregister, leaking uprobe [ 321.849708][ T5864] ath9k_htc 1-1:1.0: ath9k_htc: Target is unresponsive [ 321.871663][ T5864] ath9k_htc: Failed to initialize the device [ 321.879448][ T5874] usb 1-1: ath9k_htc: USB layer deinitialized [ 322.518075][ T30] audit: type=1400 audit(1745841704.903:526): avc: denied { open } for pid=9053 comm="syz.1.820" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 322.592054][ T9035] overlayfs: failed to clone upperpath [ 322.714502][ T30] audit: type=1400 audit(1745841704.903:527): avc: denied { ioctl } for pid=9053 comm="syz.1.820" path="/dev/ptyq6" dev="devtmpfs" ino=125 ioctlcmd=0x5414 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 322.831071][ T92] usb 2-1: new high-speed USB device number 19 using dummy_hcd [ 322.986894][ T92] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 322.987764][ T9071] netlink: 92 bytes leftover after parsing attributes in process `syz.0.825'. [ 323.007125][ T92] usb 2-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 323.029158][ T92] usb 2-1: New USB device found, idVendor=0afa, idProduct=03e8, bcdDevice=99.d0 [ 323.048266][ T92] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 323.056350][ T92] usb 2-1: Product: syz [ 323.068017][ T92] usb 2-1: Manufacturer: syz [ 323.072677][ T92] usb 2-1: SerialNumber: syz [ 323.092241][ T92] usb 2-1: config 0 descriptor?? [ 323.689689][ T5893] usb 2-1: USB disconnect, device number 19 [ 323.801246][ T5864] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 324.569808][ T5864] usb 1-1: Using ep0 maxpacket: 8 [ 324.576605][ T5864] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 324.586896][ T5864] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 324.596888][ T5864] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 324.606897][ T5864] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 324.620023][ T5864] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 324.629144][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 324.861732][ T5864] usb 1-1: usb_control_msg returned -32 [ 324.871472][ T5864] usbtmc 1-1:16.0: can't read capabilities [ 325.024773][ T9103] netlink: 8 bytes leftover after parsing attributes in process `syz.3.834'. [ 325.174018][ T30] audit: type=1400 audit(1745841707.595:528): avc: denied { bind } for pid=9104 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.203333][ T30] audit: type=1400 audit(1745841707.615:529): avc: denied { listen } for pid=9104 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.223961][ T30] audit: type=1400 audit(1745841707.615:530): avc: denied { accept } for pid=9104 comm="syz.1.835" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 325.875231][ T30] audit: type=1400 audit(1745841708.293:531): avc: denied { map } for pid=9115 comm="syz.3.839" path="/dev/bus/usb/006/001" dev="devtmpfs" ino=736 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 326.206626][ T9116] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 326.243259][ T9116] iommufd_mock iommufd_mock1: Adding to iommu group 1 [ 326.275622][ T9116] netlink: 8 bytes leftover after parsing attributes in process `syz.3.839'. [ 326.411356][ T9116] virtio-fs: tag not found [ 326.769549][ T5864] usb 1-1: USB disconnect, device number 18 [ 326.824441][ T30] audit: type=1400 audit(1745841709.252:532): avc: denied { setopt } for pid=9115 comm="syz.3.839" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 326.899219][ T30] audit: type=1400 audit(1745841709.333:533): avc: denied { mounton } for pid=9129 comm="syz.2.843" path="/file0" dev="ramfs" ino=19948 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 326.988900][ T30] audit: type=1400 audit(1745841709.424:534): avc: denied { create } for pid=9128 comm="syz.0.842" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 327.039121][ T9132] /dev/nullb0: Can't open blockdev [ 327.069257][ T30] audit: type=1400 audit(1745841709.464:535): avc: denied { mounton } for pid=9128 comm="syz.0.842" path="/168/file0" dev="tmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 327.932000][ T9156] netlink: 12 bytes leftover after parsing attributes in process `syz.2.849'. [ 328.034870][ T9160] netlink: 12 bytes leftover after parsing attributes in process `syz.3.851'. [ 328.936088][ T9166] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 329.788878][ T9171] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 329.914681][ T30] audit: type=1400 audit(1745841712.360:536): avc: denied { write } for pid=9169 comm="syz.1.854" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 330.570633][ T30] audit: type=1400 audit(1745841713.035:537): avc: denied { name_bind } for pid=9177 comm="syz.2.856" src=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 330.657143][ T30] audit: type=1400 audit(1745841713.126:538): avc: denied { unlink } for pid=5809 comm="syz-executor" name="file0" dev="tmpfs" ino=957 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 332.390659][ T5820] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 332.539928][ T5820] usb 1-1: device descriptor read/64, error -71 [ 332.623090][ T9224] netlink: 4 bytes leftover after parsing attributes in process `syz.2.870'. [ 332.652045][ T9228] bridge0: port 1(bridge_slave_0) entered disabled state [ 332.686255][ T9231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.873'. [ 332.707846][ T9231] netlink: 8 bytes leftover after parsing attributes in process `syz.1.873'. [ 332.729046][ T9228] bridge0: entered allmulticast mode [ 332.776699][ T5820] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 332.909962][ T9224] tipc: Started in network mode [ 332.914866][ T9224] tipc: Node identity ac14140f, cluster identity 4711 [ 332.922133][ T9224] tipc: New replicast peer: 255.255.255.255 [ 332.928586][ T9224] tipc: Enabled bearer , priority 10 [ 333.074677][ T5820] usb 1-1: device descriptor read/64, error -71 [ 333.204225][ T5820] usb usb1-port1: attempt power cycle [ 333.611143][ T5820] usb 1-1: new high-speed USB device number 21 using dummy_hcd [ 333.654570][ T5820] usb 1-1: device descriptor read/8, error -71 [ 334.061314][ T5820] usb 1-1: new high-speed USB device number 22 using dummy_hcd [ 334.303304][ T5820] usb 1-1: device descriptor read/8, error -71 [ 334.404655][ T92] tipc: Node number set to 2886997007 [ 334.458089][ T5820] usb usb1-port1: unable to enumerate USB device [ 334.543659][ T9260] overlayfs: failed to resolve './file0': -2 [ 334.803985][ T5820] usb 2-1: new high-speed USB device number 20 using dummy_hcd [ 334.992835][ T5820] usb 2-1: Using ep0 maxpacket: 16 [ 335.008800][ T5820] usb 2-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 335.026029][ T5820] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 335.046068][ T5820] usb 2-1: Product: syz [ 335.058490][ T5820] usb 2-1: Manufacturer: syz [ 335.097891][ T5820] usb 2-1: SerialNumber: syz [ 335.105683][ T5820] usb 2-1: config 0 descriptor?? [ 335.135265][ T5820] as10x_usb: device has been detected [ 335.141388][ T5820] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 335.165063][ T5820] usb 2-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 335.204891][ T30] audit: type=1400 audit(1745841717.707:539): avc: denied { name_bind } for pid=9282 comm="syz.3.886" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 335.225584][ C1] vkms_vblank_simulate: vblank timer overrun [ 335.251643][ T92] usb 5-1: new high-speed USB device number 25 using dummy_hcd [ 335.283622][ T5820] as10x_usb: error during firmware upload part1 [ 335.341357][ T5820] Registered device Sky IT Digital Key (green led) [ 335.410247][ T92] usb 5-1: Using ep0 maxpacket: 32 [ 335.432258][ T9287] syz.3.886: attempt to access beyond end of device [ 335.432258][ T9287] nbd3: rw=0, sector=64, nr_sectors = 8 limit=0 [ 335.454712][ T9287] syz.3.886: attempt to access beyond end of device [ 335.454712][ T9287] nbd3: rw=0, sector=120, nr_sectors = 8 limit=0 [ 335.476362][ T92] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 335.487468][ T92] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 335.503044][ T9287] Mount JFS Failure: -5 [ 335.507301][ T9287] jfs_mount failed w/return code = -5 [ 335.514071][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 335.539001][ T92] usb 5-1: config 0 descriptor?? [ 335.559137][ T92] hub 5-1:0.0: bad descriptor, ignoring hub [ 335.571595][ T92] hub 5-1:0.0: probe with driver hub failed with error -5 [ 335.597139][ T92] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 336.033176][ T9268] random: crng reseeded on system resumption [ 336.046174][ T30] audit: type=1400 audit(1745841718.531:540): avc: denied { write } for pid=9267 comm="syz.1.882" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 336.249664][ T5820] usb 2-1: USB disconnect, device number 20 [ 336.892052][ T5820] Unregistered device Sky IT Digital Key (green led) [ 336.894999][ T5820] as10x_usb: device has been disconnected [ 337.031857][ T5928] usb 4-1: new low-speed USB device number 9 using dummy_hcd [ 337.208776][ T5928] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 337.221218][ T5928] usb 4-1: config 0 interface 0 altsetting 9 endpoint 0x81 has invalid maxpacket 1023, setting to 8 [ 337.240071][ T5928] usb 4-1: config 0 interface 0 altsetting 9 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 337.356179][ T5928] usb 4-1: config 0 interface 0 has no altsetting 0 [ 337.370332][ T5928] usb 4-1: New USB device found, idVendor=28bd, idProduct=0094, bcdDevice= 0.00 [ 337.407115][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 337.451356][ T5928] usb 4-1: config 0 descriptor?? [ 337.465819][ T9293] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 337.508458][ T9310] hsr0 speed is unknown, defaulting to 1000 [ 337.798812][ T9293] block nbd0: server does not support multiple connections per device. [ 337.834883][ T9293] block nbd0: shutting down sockets [ 338.041729][ T5928] hid (null): invalid report_size 828493934 [ 338.097281][ T5820] usb 5-1: USB disconnect, device number 25 [ 338.383891][ T5928] uclogic 0003:28BD:0094.0004: interface is invalid, ignoring [ 338.668449][ T5928] usb 4-1: USB disconnect, device number 9 [ 338.904989][ T9324] netlink: 96 bytes leftover after parsing attributes in process `syz.2.895'. [ 339.153182][ T30] audit: type=1400 audit(1745841721.667:541): avc: denied { write } for pid=9322 comm="syz.4.897" name="file0" dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 339.206892][ T30] audit: type=1400 audit(1745841721.667:542): avc: denied { open } for pid=9322 comm="syz.4.897" path="/158/file0" dev="tmpfs" ino=876 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 339.397791][ T9320] overlayfs: failed to resolve './file0': -2 [ 339.656064][ T30] audit: type=1400 audit(1745841721.697:543): avc: denied { ioctl } for pid=9322 comm="syz.4.897" path="/158/file0" dev="tmpfs" ino=876 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 340.544160][ T9341] overlayfs: failed to resolve './file1': -2 [ 341.198187][ T9348] SELinux: policydb version 51618937 does not match my version range 15-34 [ 341.222823][ T9348] SELinux: failed to load policy [ 341.317204][ T9353] veth0_vlan: entered allmulticast mode [ 341.372705][ T9353] veth0_vlan: left promiscuous mode [ 341.385973][ T9353] veth0_vlan: entered promiscuous mode [ 342.086351][ T9362] syz.3.908: attempt to access beyond end of device [ 342.086351][ T9362] loop3: rw=0, sector=2, nr_sectors = 1 limit=0 [ 342.100111][ T9362] hfs: can't find a HFS filesystem on dev loop3 [ 342.700105][ T9379] MTD: Attempt to mount non-MTD device "/dev/loop4" [ 342.716238][ T9379] syz.4.904: attempt to access beyond end of device [ 342.716238][ T9379] loop4: rw=0, sector=0, nr_sectors = 2 limit=0 [ 342.899520][ T30] audit: type=1400 audit(1745841725.281:544): avc: denied { write } for pid=5168 comm="syslogd" name="/" dev="tmpfs" ino=1 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.328303][ T30] audit: type=1400 audit(1745841725.281:545): avc: denied { remove_name } for pid=5168 comm="syslogd" name="messages" dev="tmpfs" ino=7 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 343.604457][ T30] audit: type=1400 audit(1745841725.281:546): avc: denied { add_name } for pid=5168 comm="syslogd" name="messages.0" dev="tmpfs" ino=3 scontext=system_u:system_r:syslogd_t tcontext=system_u:object_r:tmpfs_t tclass=dir permissive=1 [ 344.203865][ T9395] netlink: 76 bytes leftover after parsing attributes in process `syz.4.915'. [ 344.395761][ T9402] usb usb1: usbfs: interface 0 claimed by hub while 'syz.0.913' sets config #0 [ 346.409437][ T9409] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 347.325878][ T9424] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 347.353389][ T24] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 347.632732][ T24] usb 1-1: Using ep0 maxpacket: 8 [ 348.000893][ T30] audit: type=1400 audit(1745841730.236:547): avc: denied { getopt } for pid=9432 comm="syz.4.925" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 348.022574][ T24] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 348.050546][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 348.078599][ T24] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 348.113388][ T24] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 348.146798][ T24] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 348.193329][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 348.400517][ T9451] netlink: 'syz.3.928': attribute type 7 has an invalid length. [ 348.432603][ T9451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.928'. [ 348.724319][ T5893] usb 4-1: new full-speed USB device number 10 using dummy_hcd [ 349.338174][ T24] usb 1-1: GET_CAPABILITIES returned 0 [ 349.348139][ T24] usbtmc 1-1:16.0: can't read capabilities [ 349.374328][ T30] audit: type=1400 audit(1745841731.920:548): avc: denied { setattr } for pid=9422 comm="syz.0.921" name="/" dev="configfs" ino=1195 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=dir permissive=1 [ 349.448194][ T24] usb 1-1: USB disconnect, device number 23 [ 350.027891][ T30] audit: type=1400 audit(1745841732.571:549): avc: denied { unmount } for pid=5809 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 350.250240][ T30] audit: type=1400 audit(1745841732.802:550): avc: denied { mount } for pid=9469 comm="syz.3.934" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 350.289172][ T30] audit: type=1400 audit(1745841732.802:551): avc: denied { mounton } for pid=9469 comm="syz.3.934" path="/198/file0" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=dir permissive=1 [ 350.317554][ T30] audit: type=1400 audit(1745841732.802:552): avc: denied { ioctl } for pid=9469 comm="syz.3.934" path="socket:[22424]" dev="sockfs" ino=22424 ioctlcmd=0x894b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 350.344918][ T30] audit: type=1400 audit(1745841732.872:553): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 350.685639][ T5893] usb 4-1: new high-speed USB device number 11 using dummy_hcd [ 350.905968][ T5893] usb 4-1: Using ep0 maxpacket: 32 [ 350.930280][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 351.005809][ T5893] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 351.160905][ T5893] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 351.181043][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 351.209625][ T5893] usb 4-1: config 0 descriptor?? [ 351.504933][ T9489] vlan2: entered promiscuous mode [ 351.510092][ T9489] veth0_virt_wifi: entered promiscuous mode [ 351.517129][ T9489] vlan2: entered allmulticast mode [ 351.522319][ T9489] veth0_virt_wifi: entered allmulticast mode [ 351.718715][ T5893] hub 4-1:0.0: USB hub found [ 351.920880][ T5893] hub 4-1:0.0: config failed, can't read hub descriptor (err -22) [ 352.032453][ T5820] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 352.048198][ T9499] overlayfs: missing 'lowerdir' [ 352.152184][ T5893] usbhid 4-1:0.0: can't add hid device: -71 [ 352.170873][ T5893] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 352.212109][ T5820] usb 1-1: device descriptor read/64, error -71 [ 352.225144][ T5893] usb 4-1: USB disconnect, device number 11 [ 352.461723][ T5820] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 352.474190][ T9505] netlink: 'syz.2.945': attribute type 11 has an invalid length. [ 352.534738][ T30] audit: type=1400 audit(1745841735.097:554): avc: denied { getopt } for pid=9504 comm="syz.2.945" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 352.557479][ T9506] sctp: [Deprecated]: }\+ (pid 9506) Use of int in max_burst socket option. [ 352.557479][ T9506] Use struct sctp_assoc_value instead [ 352.653713][ T5820] usb 1-1: device descriptor read/64, error -71 [ 352.951288][ T5820] usb usb1-port1: attempt power cycle [ 353.459786][ T5820] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 353.672213][ T5820] usb 1-1: device descriptor read/8, error -71 [ 353.939734][ T5820] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 353.999652][ T5820] usb 1-1: device descriptor read/8, error -71 [ 354.123759][ T5874] usb 2-1: new high-speed USB device number 21 using dummy_hcd [ 354.135391][ T5820] usb usb1-port1: unable to enumerate USB device [ 354.279768][ T5874] usb 2-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 354.298979][ T5874] usb 2-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 354.316918][ T5874] usb 2-1: New USB device found, idVendor=1223, idProduct=3f07, bcdDevice= 0.00 [ 354.329231][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 354.365175][ T5874] usb 2-1: config 0 descriptor?? [ 354.404813][ T5874] usbhid 2-1:0.0: couldn't find an input interrupt endpoint [ 355.287225][ T30] audit: type=1400 audit(1745841737.851:555): avc: denied { read write } for pid=9544 comm="syz.0.956" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 355.337148][ T9547] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 355.366144][ T9547] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 355.367135][ T30] audit: type=1400 audit(1745841737.851:556): avc: denied { open } for pid=9544 comm="syz.0.956" path="/dev/vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 355.522793][ T30] audit: type=1400 audit(1745841738.082:557): avc: denied { read write } for pid=9519 comm="syz.1.949" name="file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 355.527092][ T9547] netlink: 4 bytes leftover after parsing attributes in process `syz.1.949'. [ 355.545239][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.605686][ T30] audit: type=1400 audit(1745841738.082:558): avc: denied { open } for pid=9519 comm="syz.1.949" path="/181/file0/file0" dev="fuse" ino=5 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 355.628547][ C0] vkms_vblank_simulate: vblank timer overrun [ 355.673492][ T9553] FAULT_INJECTION: forcing a failure. [ 355.673492][ T9553] name failslab, interval 1, probability 0, space 0, times 0 [ 355.686619][ T9553] CPU: 1 UID: 0 PID: 9553 Comm: syz.4.958 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 355.686642][ T9553] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 355.686652][ T9553] Call Trace: [ 355.686659][ T9553] [ 355.686665][ T9553] dump_stack_lvl+0x16c/0x1f0 [ 355.686698][ T9553] should_fail_ex+0x512/0x640 [ 355.686723][ T9553] ? fs_reclaim_acquire+0xae/0x150 [ 355.686749][ T9553] ? tomoyo_encode2+0x100/0x3e0 [ 355.686773][ T9553] should_failslab+0xc2/0x120 [ 355.686791][ T9553] __kmalloc_noprof+0xd2/0x510 [ 355.686823][ T9553] tomoyo_encode2+0x100/0x3e0 [ 355.686847][ T9553] tomoyo_encode+0x29/0x50 [ 355.686867][ T9553] tomoyo_realpath_from_path+0x18f/0x6e0 [ 355.686890][ T9553] ? tomoyo_profile+0x47/0x60 [ 355.686918][ T9553] tomoyo_path_number_perm+0x245/0x580 [ 355.686935][ T9553] ? tomoyo_path_number_perm+0x237/0x580 [ 355.686955][ T9553] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 355.686976][ T9553] ? find_held_lock+0x2b/0x80 [ 355.687019][ T9553] ? find_held_lock+0x2b/0x80 [ 355.687036][ T9553] ? hook_file_ioctl_common+0x145/0x410 [ 355.687068][ T9553] ? __fget_files+0x20e/0x3c0 [ 355.687097][ T9553] security_file_ioctl+0x9b/0x240 [ 355.687122][ T9553] __x64_sys_ioctl+0xb7/0x200 [ 355.687156][ T9553] do_syscall_64+0xcd/0x260 [ 355.687179][ T9553] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.687199][ T9553] RIP: 0033:0x7fd72b38e969 [ 355.687212][ T9553] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 355.687229][ T9553] RSP: 002b:00007fd72c171038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 355.687246][ T9553] RAX: ffffffffffffffda RBX: 00007fd72b5b5fa0 RCX: 00007fd72b38e969 [ 355.687256][ T9553] RDX: 0000200000000180 RSI: 00000000000089e3 RDI: 0000000000000007 [ 355.687266][ T9553] RBP: 00007fd72c171090 R08: 0000000000000000 R09: 0000000000000000 [ 355.687276][ T9553] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 355.687285][ T9553] R13: 0000000000000000 R14: 00007fd72b5b5fa0 R15: 00007ffdbde702e8 [ 355.687307][ T9553] [ 355.687331][ T9553] ERROR: Out of memory at tomoyo_realpath_from_path. [ 355.920205][ T30] audit: type=1400 audit(1745841738.482:559): avc: denied { ioctl } for pid=9519 comm="syz.1.949" path="/181/file0/file0" dev="fuse" ino=5 ioctlcmd=0x545d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=chr_file permissive=1 [ 356.182807][ T9567] hsr0 speed is unknown, defaulting to 1000 [ 356.801143][ T30] audit: type=1400 audit(1745841738.367:560): avc: denied { map } for pid=9575 comm="syz.3.965" path="/dev/video4" dev="devtmpfs" ino=938 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:v4l_device_t tclass=chr_file permissive=1 [ 356.923873][ T9578] hsr0 speed is unknown, defaulting to 1000 [ 357.191212][ T5893] usb 2-1: USB disconnect, device number 21 [ 357.542058][ T9595] batadv0: entered promiscuous mode [ 358.029020][ T9595] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 358.077466][ T9595] macvtap1: entered allmulticast mode [ 358.108865][ T9595] batadv0: entered allmulticast mode [ 358.146670][ T9595] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 359.864517][ T5127] block nbd0: Receive control failed (result -32) [ 359.867986][ T30] audit: type=1400 audit(1745841741.437:561): avc: denied { ioctl } for pid=9626 comm="syz.4.979" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x5878 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 360.924205][ T30] audit: type=1400 audit(1745841742.467:562): avc: denied { create } for pid=9634 comm="syz.2.982" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmpvc_socket permissive=1 [ 361.002474][ T30] audit: type=1400 audit(1745841742.567:563): avc: denied { allowed } for pid=9637 comm="syz.0.985" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 361.021677][ C0] vkms_vblank_simulate: vblank timer overrun [ 361.175525][ T30] audit: type=1400 audit(1745841742.737:564): avc: denied { read write } for pid=9644 comm="syz.1.987" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 361.327626][ T30] audit: type=1400 audit(1745841742.737:565): avc: denied { open } for pid=9644 comm="syz.1.987" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 362.825059][ T30] audit: type=1400 audit(1745841744.397:566): avc: denied { ioctl } for pid=9666 comm="syz.0.993" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x4c0a scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 363.073765][ T30] audit: type=1400 audit(1745841744.397:567): avc: denied { bind } for pid=9666 comm="syz.0.993" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 363.807618][ T30] audit: type=1400 audit(1745841745.367:568): avc: denied { remount } for pid=9673 comm="syz.0.997" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 364.493883][ T9690] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 364.576361][ T9] usb 4-1: new high-speed USB device number 12 using dummy_hcd [ 364.864513][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 365.170086][ T9] usb 4-1: New USB device found, idVendor=0402, idProduct=5602, bcdDevice=35.76 [ 365.205768][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 365.226481][ T9] usb 4-1: Product: syz [ 365.243951][ T9] usb 4-1: Manufacturer: syz [ 365.253890][ T9] usb 4-1: SerialNumber: syz [ 365.276628][ T9] usb 4-1: config 0 descriptor?? [ 365.288502][ T9] gspca_main: ALi m5602-2.14.0 probing 0402:5602 [ 365.350951][ T9702] kernel profiling enabled (shift: 63) [ 365.456711][ T9702] profiling shift: 63 too large [ 366.520516][ T9714] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1007'. [ 366.608563][ T9712] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 366.647240][ T9] gspca_m5602: Failed to find a sensor [ 366.720036][ T9] ALi m5602 4-1:0.0: ALi m5602 webcam failed [ 366.901371][ T9] usb 4-1: USB disconnect, device number 12 [ 367.058733][ T9719] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1008'. [ 368.265333][ T9735] batadv0: entered promiscuous mode [ 368.422062][ T9748] ptrace attach of "./syz-executor exec"[5814] was attempted by "./syz-executor exec"[9748] [ 368.474794][ T92] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 368.516156][ T9735] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 368.645035][ T5874] usb 2-1: new high-speed USB device number 22 using dummy_hcd [ 368.753045][ T9735] macvtap1: entered allmulticast mode [ 368.769366][ T9735] batadv0: entered allmulticast mode [ 368.777361][ T9735] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 368.784640][ T92] usb 1-1: Using ep0 maxpacket: 8 [ 368.793656][ T92] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 368.803753][ T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 368.870861][ T92] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 369.110482][ T30] audit: type=1400 audit(1745841750.517:569): avc: denied { read write } for pid=9751 comm="syz.3.1018" name="uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 369.113147][ T5874] usb 2-1: config 1 has an invalid interface number: 13 but max is 0 [ 369.142244][ T30] audit: type=1400 audit(1745841750.517:570): avc: denied { open } for pid=9751 comm="syz.3.1018" path="/dev/uhid" dev="devtmpfs" ino=1273 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:uhid_device_t tclass=chr_file permissive=1 [ 369.166775][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.194595][ T92] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 369.207867][ T92] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 369.224733][ T92] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 369.241403][ T5874] usb 2-1: config 1 has no interface number 0 [ 369.266629][ T5874] usb 2-1: New USB device found, idVendor=04da, idProduct=0d05, bcdDevice= 0.00 [ 369.275917][ T5874] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.283931][ T5874] usb 2-1: Product: syz [ 369.292886][ T5874] usb 2-1: Manufacturer: syz [ 369.298552][ T5874] usb 2-1: SerialNumber: syz [ 369.308770][ T5874] usb-storage 2-1:1.13: USB Mass Storage device detected [ 369.457387][ T92] usb 1-1: GET_CAPABILITIES returned 0 [ 369.462951][ T92] usbtmc 1-1:16.0: can't read capabilities [ 369.576742][ T9] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 369.580480][ T9745] PM: Enabling pm_trace changes system date and time during resume. [ 369.580480][ T9745] PM: Correct system time has to be restored manually after resume. [ 369.602307][ T30] audit: type=1326 audit(1745841751.147:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0478e969 code=0x7ffc0000 [ 369.630416][ T30] audit: type=1326 audit(1745841751.147:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0478e969 code=0x7ffc0000 [ 369.655915][ T30] audit: type=1326 audit(1745841751.147:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fbb0478e969 code=0x7ffc0000 [ 369.690394][ T30] audit: type=1326 audit(1745841751.147:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0478e969 code=0x7ffc0000 [ 369.695843][ T5893] usb 2-1: USB disconnect, device number 22 [ 369.713783][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.716459][ T30] audit: type=1326 audit(1745841751.147:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=1 compat=0 ip=0x7fbb0478e969 code=0x7ffc0000 [ 369.749260][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.758169][ T30] audit: type=1326 audit(1745841751.227:576): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0478e969 code=0x7ffc0000 [ 369.781557][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.784984][ T9] usb 5-1: Using ep0 maxpacket: 8 [ 369.790133][ T30] audit: type=1326 audit(1745841751.227:577): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9744 comm="syz.1.1014" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fbb0478e969 code=0x7ffc0000 [ 369.800409][ T9] usb 5-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 369.816286][ C1] vkms_vblank_simulate: vblank timer overrun [ 369.816951][ T30] audit: type=1400 audit(1745841751.247:578): avc: denied { map } for pid=9742 comm="syz.0.1016" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 369.973674][ T9] usb 5-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 369.989342][ T9] usb 5-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 370.011729][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 370.056705][ T9767] /dev/nullb0: Can't open blockdev [ 370.754342][ T92] usb 5-1: USB disconnect, device number 26 [ 371.831923][ T5928] usb 1-1: USB disconnect, device number 28 [ 372.125691][ T9] usb 5-1: new high-speed USB device number 27 using dummy_hcd [ 372.364757][ T5928] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 372.444513][ T9] usb 5-1: device descriptor read/64, error -71 [ 372.514497][ T5928] usb 1-1: device descriptor read/64, error -71 [ 372.704680][ T9] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 372.714601][ T92] usb 2-1: new high-speed USB device number 23 using dummy_hcd [ 372.776038][ T5928] usb 1-1: new high-speed USB device number 30 using dummy_hcd [ 372.899474][ T92] usb 2-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 373.257309][ T9] usb 5-1: device descriptor read/64, error -71 [ 373.266116][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 373.290355][ T92] usb 2-1: config 0 descriptor?? [ 373.314884][ T5928] usb 1-1: device descriptor read/64, error -71 [ 373.377407][ T9] usb usb5-port1: attempt power cycle [ 373.437739][ T5928] usb usb1-port1: attempt power cycle [ 373.671148][ T92] ath6kl: Failed to submit usb control message: -71 [ 373.680943][ T92] ath6kl: unable to send the bmi data to the device: -71 [ 373.688650][ T92] ath6kl: Unable to send get target info: -71 [ 373.713842][ T92] ath6kl: Failed to init ath6kl core: -71 [ 373.725522][ T9] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 373.726602][ T92] ath6kl_usb 2-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 373.757111][ T92] usb 2-1: USB disconnect, device number 23 [ 373.771257][ T9] usb 5-1: device descriptor read/8, error -71 [ 373.784596][ T5928] usb 1-1: new high-speed USB device number 31 using dummy_hcd [ 373.847932][ T5928] usb 1-1: device descriptor read/8, error -71 [ 374.531151][ T9] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 374.555133][ T9] usb 5-1: device descriptor read/8, error -71 [ 374.604519][ T5928] usb 1-1: new high-speed USB device number 32 using dummy_hcd [ 374.626951][ T5928] usb 1-1: device descriptor read/8, error -71 [ 374.665522][ T9] usb usb5-port1: unable to enumerate USB device [ 374.737092][ T5928] usb usb1-port1: unable to enumerate USB device [ 375.032135][ T92] usb 2-1: new high-speed USB device number 24 using dummy_hcd [ 375.613989][ T9829] batadv0: entered promiscuous mode [ 375.624288][ T92] usb 2-1: Using ep0 maxpacket: 8 [ 375.651495][ T92] usb 2-1: config 252 has an invalid descriptor of length 0, skipping remainder of the config [ 375.662224][ T9829] macvtap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 375.680891][ T9829] macvtap1: entered allmulticast mode [ 375.686683][ T9829] batadv0: entered allmulticast mode [ 375.693468][ T9829] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 375.875005][ T92] usb 2-1: config 252 has 0 interfaces, different from the descriptor's value: 1 [ 375.895341][ T92] usb 2-1: New USB device found, idVendor=0ccd, idProduct=0039, bcdDevice=90.7b [ 376.232735][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 376.427758][ T30] kauditd_printk_skb: 2 callbacks suppressed [ 376.427796][ T30] audit: type=1400 audit(1745841757.997:581): avc: denied { connect } for pid=9849 comm="syz.3.1045" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 376.483618][ T5874] usb 2-1: USB disconnect, device number 24 [ 376.525957][ T9850] block device autoloading is deprecated and will be removed. [ 376.740397][ T24] usb 1-1: new high-speed USB device number 33 using dummy_hcd [ 376.918880][ T30] audit: type=1400 audit(1745841758.487:582): avc: denied { map } for pid=9857 comm="syz.3.1048" path="/dev/tty26" dev="devtmpfs" ino=45 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tty_device_t tclass=chr_file permissive=1 [ 377.364908][ T24] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 377.375357][ T24] usb 1-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 377.385205][ T24] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 377.408725][ T24] usb 1-1: config 0 descriptor?? [ 377.444320][ T24] pwc: Askey VC010 type 2 USB webcam detected. [ 377.940989][ T9853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 377.954554][ T24] pwc: recv_control_msg error -32 req 02 val 2b00 [ 377.971643][ T9853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 378.212526][ T9853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 378.294885][ T9853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.213673][ T9853] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1046'. [ 379.285615][ T9853] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.313646][ T9853] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.382471][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.458991][ T24] pwc: recv_control_msg error -32 req 02 val 2700 [ 379.668709][ T24] pwc: recv_control_msg error -32 req 04 val 1000 [ 379.765530][ T9] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 380.574715][ T24] pwc: recv_control_msg error -32 req 04 val 1300 [ 380.771042][ T9] usb 5-1: Using ep0 maxpacket: 16 [ 380.782384][ T9] usb 5-1: too many configurations: 123, using maximum allowed: 8 [ 380.793628][ T24] pwc: recv_control_msg error -71 req 02 val 2000 [ 380.803983][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 380.808621][ T24] pwc: recv_control_msg error -71 req 02 val 2100 [ 380.865957][ T9903] fuse: Bad value for 'fd' [ 381.103636][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.119729][ T24] pwc: recv_control_msg error -71 req 04 val 1500 [ 381.167756][ T24] pwc: recv_control_msg error -71 req 02 val 2500 [ 381.168550][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.177596][ T24] pwc: recv_control_msg error -71 req 02 val 2400 [ 381.221865][ T24] pwc: recv_control_msg error -71 req 02 val 2600 [ 381.229735][ T24] pwc: recv_control_msg error -71 req 02 val 2900 [ 381.238400][ T24] pwc: recv_control_msg error -71 req 02 val 2800 [ 381.245860][ T24] pwc: recv_control_msg error -71 req 04 val 1100 [ 381.253583][ T24] pwc: recv_control_msg error -71 req 04 val 1200 [ 381.262702][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.279933][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 381.698606][ T24] pwc: Registered as video103. [ 382.109778][ T24] input: PWC snapshot button as /devices/platform/dummy_hcd.0/usb1/1-1/input/input16 [ 382.128121][ T24] usb 1-1: USB disconnect, device number 33 [ 382.247721][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.250774][ T9910] hsr0 speed is unknown, defaulting to 1000 [ 382.342196][ T9905] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 382.359409][ T30] audit: type=1326 audit(1745841763.907:583): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 382.389857][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.434102][ T9] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 382.454658][ T30] audit: type=1326 audit(1745841763.907:584): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 382.508662][ T30] audit: type=1326 audit(1745841763.907:585): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 382.533415][ T30] audit: type=1326 audit(1745841763.907:586): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 382.555713][ T9] usb 5-1: string descriptor 0 read error: -71 [ 382.556760][ C1] vkms_vblank_simulate: vblank timer overrun [ 382.562919][ T9] usb 5-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 382.655242][ T30] audit: type=1326 audit(1745841763.907:587): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 382.828092][ T30] audit: type=1326 audit(1745841763.907:588): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 383.059937][ T30] audit: type=1326 audit(1745841763.907:589): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 383.085456][ T30] audit: type=1326 audit(1745841763.907:590): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 383.108761][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.116024][ T30] audit: type=1326 audit(1745841763.927:591): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 383.139314][ C1] vkms_vblank_simulate: vblank timer overrun [ 383.413587][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=45 [ 383.426871][ T30] audit: type=1326 audit(1745841763.927:592): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=9909 comm="syz.2.1065" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 383.476340][ T9] usb 5-1: config 0 descriptor?? [ 383.491226][ T9] usb 5-1: can't set config #0, error -71 [ 383.506553][ T9] usb 5-1: USB disconnect, device number 31 [ 383.597567][ T9928] overlayfs: missing 'lowerdir' [ 383.961321][ T9942] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 384.124815][ T9942] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 384.194557][ T9] usb 1-1: new high-speed USB device number 34 using dummy_hcd [ 384.364550][ T9] usb 1-1: Using ep0 maxpacket: 32 [ 384.373398][ T9] usb 1-1: config 0 has an invalid interface number: 67 but max is 0 [ 384.393478][ T9] usb 1-1: config 0 has no interface number 0 [ 384.419103][ T9] usb 1-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 384.435065][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 384.449319][ T9] usb 1-1: Product: syz [ 384.457222][ T9] usb 1-1: Manufacturer: syz [ 385.056924][ T9] usb 1-1: SerialNumber: syz [ 385.063933][ T9] usb 1-1: config 0 descriptor?? [ 385.084881][ T9] smsc95xx v2.0.0 [ 385.305706][ T9] smsc95xx 1-1:0.67 (unnamed net_device) (uninitialized): usbnet_get_endpoints failed: -71 [ 385.324974][ T9] smsc95xx 1-1:0.67: probe with driver smsc95xx failed with error -71 [ 385.340117][ T9] usb 1-1: USB disconnect, device number 34 [ 385.359119][ T9958] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1078'. [ 386.101208][ T9964] netlink: 'syz.1.1080': attribute type 39 has an invalid length. [ 386.730011][ T9973] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1083'. [ 387.562257][ T9] usb 4-1: new high-speed USB device number 13 using dummy_hcd [ 387.708827][ T9983] wg1: entered promiscuous mode [ 387.755083][ T9] usb 4-1: Using ep0 maxpacket: 32 [ 387.828881][ T9983] wg1: entered allmulticast mode [ 387.907662][ T9] usb 4-1: New USB device found, idVendor=0ac8, idProduct=0321, bcdDevice=6f.be [ 387.926491][ T30] kauditd_printk_skb: 60 callbacks suppressed [ 387.926524][ T30] audit: type=1400 audit(1745841769.497:653): avc: denied { setattr } for pid=9986 comm="syz.1.1088" name="ALG" dev="sockfs" ino=24589 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 388.033220][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.265777][ T30] audit: type=1400 audit(1745841769.587:655): avc: denied { ioctl } for pid=9986 comm="syz.1.1088" path="socket:[24589]" dev="sockfs" ino=24589 ioctlcmd=0xae7b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 388.267277][ T9] usb 4-1: config 0 descriptor?? [ 388.375469][ T30] audit: type=1400 audit(1745841769.587:654): avc: denied { ioctl } for pid=9986 comm="syz.1.1088" path="socket:[24589]" dev="sockfs" ino=24589 ioctlcmd=0xae67 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 388.496964][ T9] gspca_main: vc032x-2.14.0 probing 0ac8:0321 [ 389.155176][ T9] gspca_vc032x: reg_w err -110 [ 389.161737][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.176792][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.198052][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.220828][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.227086][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.245905][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.263256][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.274473][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.279872][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.297989][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.310543][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.324609][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.333500][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.349653][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.364266][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.373765][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.528975][ T30] audit: type=1400 audit(1745841771.067:656): avc: denied { bind } for pid=10013 comm="syz.4.1095" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 389.603404][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.629906][ T9] gspca_vc032x: I2c Bus Busy Wait 00 [ 389.646503][ T9] gspca_vc032x: Unknown sensor... [ 389.740181][ T9] vc032x 4-1:0.0: probe with driver vc032x failed with error -22 [ 389.752456][ T9] usb 4-1: USB disconnect, device number 13 [ 390.649591][T10034] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1099'. [ 391.854739][ T5928] usb 4-1: new high-speed USB device number 14 using dummy_hcd [ 392.474713][ T5928] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 392.490719][ T5928] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 392.523162][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.558065][ T5928] usb 4-1: config 0 descriptor?? [ 392.621713][ T5928] pwc: Askey VC010 type 2 USB webcam detected. [ 392.630177][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 392.643000][T10054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1106'. [ 392.744568][ T5874] usb 1-1: new high-speed USB device number 35 using dummy_hcd [ 392.784547][ T5864] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 392.894561][ T5874] usb 1-1: Using ep0 maxpacket: 16 [ 392.901561][ T5874] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 392.919013][ T5874] usb 1-1: New USB device found, idVendor=1604, idProduct=8007, bcdDevice=af.a6 [ 392.928439][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=23, SerialNumber=3 [ 392.936808][ T5874] usb 1-1: Product: syz [ 392.941140][ T5874] usb 1-1: Manufacturer: syz [ 392.946212][ T5874] usb 1-1: SerialNumber: syz [ 392.951775][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 392.963575][ T5864] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 392.974233][ T5874] usb 1-1: config 0 descriptor?? [ 392.979455][ T24] usb 2-1: new full-speed USB device number 25 using dummy_hcd [ 392.987791][ T5864] usb 5-1: New USB device found, idVendor=1d34, idProduct=0004, bcdDevice= 0.00 [ 392.999162][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 393.009255][ T5864] usb 5-1: config 0 descriptor?? [ 393.024630][ T5928] pwc: recv_control_msg error -32 req 02 val 2b00 [ 393.025684][T10040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.040051][T10040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.124642][ T24] usb 2-1: device descriptor read/64, error -71 [ 393.342768][T10040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.361350][T10040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.363305][ T5864] hid-led 0003:1D34:0004.0005: unknown main item tag 0x0 [ 393.375159][T10040] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1101'. [ 393.388338][T10040] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 393.397465][T10040] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 393.474633][ T24] usb 2-1: new full-speed USB device number 26 using dummy_hcd [ 393.547293][ T5928] pwc: recv_control_msg error -32 req 02 val 2700 [ 393.570220][ T5928] pwc: recv_control_msg error -32 req 02 val 2c00 [ 393.577547][ T5864] hid-led 0003:1D34:0004.0005: probe with driver hid-led failed with error -71 [ 393.624903][ T24] usb 2-1: device descriptor read/64, error -71 [ 393.636975][ T5928] pwc: recv_control_msg error -32 req 04 val 1000 [ 393.650949][ T5864] usb 5-1: USB disconnect, device number 32 [ 393.751145][ T5928] pwc: recv_control_msg error -32 req 04 val 1300 [ 393.765509][ T24] usb usb2-port1: attempt power cycle [ 393.982496][ T5928] pwc: recv_control_msg error -71 req 02 val 2000 [ 394.043224][ T5928] pwc: recv_control_msg error -71 req 02 val 2100 [ 394.073716][ T5928] pwc: recv_control_msg error -71 req 04 val 1500 [ 394.114757][ T24] usb 2-1: new full-speed USB device number 27 using dummy_hcd [ 394.165998][ T24] usb 2-1: device descriptor read/8, error -71 [ 394.215067][ T5928] pwc: recv_control_msg error -71 req 02 val 2500 [ 394.254715][ T5928] pwc: recv_control_msg error -71 req 02 val 2400 [ 394.280771][ T5928] pwc: recv_control_msg error -71 req 02 val 2600 [ 394.319891][ T5928] pwc: recv_control_msg error -71 req 02 val 2900 [ 394.371211][ T5928] pwc: recv_control_msg error -71 req 02 val 2800 [ 394.378739][ T5928] pwc: recv_control_msg error -71 req 04 val 1100 [ 394.388784][ T5928] pwc: recv_control_msg error -71 req 04 val 1200 [ 394.401476][ T5928] pwc: Registered as video103. [ 394.410095][ T5928] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input17 [ 394.425034][ T24] usb 2-1: new full-speed USB device number 28 using dummy_hcd [ 394.441358][ T5928] usb 4-1: USB disconnect, device number 14 [ 394.457554][ T24] usb 2-1: device descriptor read/8, error -71 [ 394.604186][ T24] usb usb2-port1: unable to enumerate USB device [ 394.699489][T10071] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1111'. [ 395.073939][T10076] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 395.437146][ T24] usb 1-1: USB disconnect, device number 35 [ 395.490423][T10085] syz.4.1115: attempt to access beyond end of device [ 395.490423][T10085] loop4: rw=0, sector=64, nr_sectors = 2 limit=0 [ 395.508981][T10085] isofs_fill_super: bread failed, dev=loop4, iso_blknum=16, block=32 [ 397.008735][ T30] audit: type=1400 audit(1745841778.477:657): avc: denied { getopt } for pid=10092 comm="syz.1.1120" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 397.171103][T10105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1122'. [ 397.246551][T10105] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1122'. [ 397.270615][T10108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1123'. [ 398.137538][T10129] sd 0:0:1:0: device reset [ 400.444422][ T5928] usb 2-1: new high-speed USB device number 29 using dummy_hcd [ 401.208778][ T5928] usb 2-1: too many configurations: 9, using maximum allowed: 8 [ 401.223125][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 401.237058][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 401.264120][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 401.293460][T10160] netlink: 'syz.4.1138': attribute type 10 has an invalid length. [ 401.317084][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 401.366056][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 401.378512][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 401.388098][T10162] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1140'. [ 401.388987][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 401.522113][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 401.546573][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 401.822041][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 401.831322][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 401.842886][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 401.854293][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 401.932375][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 401.959652][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 401.975716][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 401.989403][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 402.023580][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 402.051239][ T9] usb 4-1: new full-speed USB device number 15 using dummy_hcd [ 402.067105][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 402.076284][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 402.097521][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 402.105573][ T5928] usb 2-1: config 0 has 1 interface, different from the descriptor's value: 9 [ 402.117915][ T5928] usb 2-1: config 0 interface 0 altsetting 2 endpoint 0x8D has an invalid bInterval 0, changing to 7 [ 402.134973][ T5928] usb 2-1: config 0 interface 0 has no altsetting 0 [ 402.144050][ T5928] usb 2-1: New USB device found, idVendor=0c45, idProduct=1010, bcdDevice=49.8e [ 402.163692][ T5928] usb 2-1: New USB device strings: Mfr=41, Product=64, SerialNumber=168 [ 402.176034][ T5928] usb 2-1: Product: syz [ 402.184817][ T5928] usb 2-1: Manufacturer: syz [ 402.189545][ T5928] usb 2-1: SerialNumber: syz [ 402.198096][ T5928] usb 2-1: config 0 descriptor?? [ 402.209765][ T5928] yurex 2-1:0.0: USB YUREX device now attached to Yurex #0 [ 402.246399][ T9] usb 4-1: unable to get BOS descriptor or descriptor too short [ 402.255047][ T9] usb 4-1: not running at top speed; connect to a high speed hub [ 402.264269][ T9] usb 4-1: config 219 has an invalid interface number: 52 but max is 0 [ 402.273136][ T9] usb 4-1: config 219 has no interface number 0 [ 402.285580][ T9] usb 4-1: config 219 interface 52 has no altsetting 0 [ 402.302829][ T9] usb 4-1: New USB device found, idVendor=0c44, idProduct=03a2, bcdDevice=3a.a0 [ 402.317182][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 402.326737][ T9] usb 4-1: Product: syz [ 402.331189][ T9] usb 4-1: Manufacturer: syz [ 402.336711][ T9] usb 4-1: SerialNumber: syz [ 402.433900][ T5928] usb 2-1: USB disconnect, device number 29 [ 402.449625][ T5928] yurex 2-1:0.0: USB YUREX #0 now disconnected [ 402.606006][T10164] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 402.614787][T10164] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 402.723659][ T9] usb 4-1: USB disconnect, device number 15 [ 403.436334][T10172] bond0: option resend_igmp: invalid value (7540) [ 403.449747][T10172] bond0: option resend_igmp: allowed values 0 - 255 [ 404.064750][ T9] usb 4-1: new high-speed USB device number 16 using dummy_hcd [ 404.392603][ T9] usb 4-1: Using ep0 maxpacket: 8 [ 404.508754][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 15 [ 404.524464][ T9] usb 4-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 404.549840][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 404.602718][ T9] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 404.692916][ T9] usb 4-1: New USB device found, idVendor=077d, idProduct=04aa, bcdDevice=5b.d8 [ 404.702387][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 404.714494][ T9] usb 4-1: Product: syz [ 404.722202][ T9] usb 4-1: Manufacturer: syz [ 404.726971][ T9] usb 4-1: SerialNumber: syz [ 404.736237][ T9] usb 4-1: config 0 descriptor?? [ 404.743022][T10198] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 405.078352][ T9] powermate: Expected payload of 3--6 bytes, found 1024 bytes! [ 405.091187][ T9] input: Griffin SoundKnob as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input18 [ 405.731570][ C0] powermate: config urb returned -71 [ 405.737280][ C0] powermate: config urb returned -71 [ 405.742674][ C0] powermate: config urb returned -71 [ 405.748105][ C0] powermate: config urb returned -71 [ 405.759496][ T9] usb 4-1: USB disconnect, device number 16 [ 405.759549][ C0] powermate 4-1:0.0: powermate_irq - usb_submit_urb failed with result: -19 [ 405.857484][T10224] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[10224] [ 406.928447][T10233] netlink: 'syz.2.1160': attribute type 1 has an invalid length. [ 407.005696][T10233] bond2: entered promiscuous mode [ 407.075227][T10233] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.246172][T10237] 8021q: adding VLAN 0 to HW filter on device bond2 [ 407.273047][T10237] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 407.284791][T10237] bond2: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 407.464633][T10237] bond2: (slave ip6gre1): making interface the new active one [ 407.551299][ T24] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 407.903838][T10237] ip6gre1: entered promiscuous mode [ 407.920369][T10237] bond2: (slave ip6gre1): Enslaving as an active interface with an up link [ 408.074540][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 408.097907][ T24] usb 5-1: New USB device found, idVendor=1660, idProduct=0932, bcdDevice=80.ea [ 408.122059][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 408.140796][ T24] usb 5-1: Product: syz [ 408.224359][ T24] usb 5-1: Manufacturer: syz [ 408.731734][ T24] usb 5-1: SerialNumber: syz [ 408.745276][ T24] usb 5-1: config 0 descriptor?? [ 408.760092][ T24] dvb-usb: found a 'Medion MD95700 (MDUSBTV-HYBRID)' in warm state. [ 408.776481][ T30] audit: type=1400 audit(1745841790.337:658): avc: denied { setopt } for pid=10255 comm="syz.0.1167" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 408.846563][ T24] usb 5-1: setting power ON [ 408.872831][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 408.888535][T10249] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 408.918730][ T24] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 408.955607][ T24] dvbdev: DVB: registering new adapter (Medion MD95700 (MDUSBTV-HYBRID)) [ 408.975349][T10241] dvb-usb: bulk message failed: -22 (3/0) [ 409.031305][T10241] usb 5-1: gpio_write failed. [ 409.038426][ T24] usb 5-1: media controller created [ 409.057563][T10241] dvb-usb: bulk message failed: -22 (5/0) [ 409.129325][ T30] audit: type=1400 audit(1745841790.697:659): avc: denied { setattr } for pid=10263 comm="syz.0.1169" name="audio" dev="devtmpfs" ino=1286 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 409.384178][T10271] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 409.449519][ T24] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 410.066260][T10271] netlink: 'syz.3.1171': attribute type 1 has an invalid length. [ 410.096531][ T24] usb 5-1: selecting invalid altsetting 6 [ 410.102761][ T24] usb 5-1: digital interface selection failed (-22) [ 410.132028][T10268] netlink: 'syz.3.1171': attribute type 1 has an invalid length. [ 410.164939][T10280] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 410.185164][ T24] dvb-usb: no frontend was attached by 'Medion MD95700 (MDUSBTV-HYBRID)' [ 410.187811][ T30] audit: type=1400 audit(1745841791.757:660): avc: denied { mount } for pid=10277 comm="syz.1.1172" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 410.218774][ T24] usb 5-1: setting power OFF [ 410.231694][T10283] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 410.239916][ T24] dvb-usb: bulk message failed: -22 (2/0) [ 410.243061][ T30] audit: type=1400 audit(1745841791.787:661): avc: denied { mounton } for pid=10277 comm="syz.1.1172" path="/216/file0" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:devpts_t tclass=dir permissive=1 [ 410.277773][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully initialized and connected. [ 410.314457][ T24] (NULL device *): no alternate interface [ 410.404340][ T24] dvb-usb: Medion MD95700 (MDUSBTV-HYBRID) successfully deinitialized and disconnected. [ 410.433989][ T24] usb 5-1: USB disconnect, device number 33 [ 410.515612][ T5893] usb 2-1: new full-speed USB device number 30 using dummy_hcd [ 411.067493][ T9] usb 4-1: new high-speed USB device number 17 using dummy_hcd [ 411.109007][ T5893] usb 2-1: unable to get BOS descriptor or descriptor too short [ 411.138855][ T5893] usb 2-1: not running at top speed; connect to a high speed hub [ 411.210502][ T5893] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 411.249132][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 411.370753][ T5893] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x1 has an invalid bInterval 147, changing to 4 [ 411.387831][ T9] usb 4-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 411.478910][ T9] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 411.508927][ T5893] usb 2-1: config 1 interface 2 altsetting 1 endpoint 0x82 has invalid wMaxPacketSize 0 [ 411.546732][ T9] usb 4-1: config 0 descriptor?? [ 411.559186][ T5893] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 411.587281][ T9] pwc: Askey VC010 type 2 USB webcam detected. [ 411.593908][ T5893] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.689211][ T5893] usb 2-1: Product: syz [ 411.693968][ T5893] usb 2-1: Manufacturer: syz [ 411.699006][ T5893] usb 2-1: SerialNumber: syz [ 412.627271][T10278] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.684726][T10278] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.771710][ T5893] usb 2-1: USB disconnect, device number 30 [ 412.858293][ T9] pwc: recv_control_msg error -32 req 02 val 2b00 [ 412.858937][T10290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 412.876273][T10290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 412.887734][T10313] team0: No ports can be present during mode change [ 413.069285][T10320] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1184'. [ 413.109277][T10290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.405228][T10290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.441747][T10290] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1177'. [ 413.471925][T10290] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 413.485095][T10290] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 413.526408][ T30] audit: type=1400 audit(1745841795.087:662): avc: denied { unmount } for pid=5808 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 413.555688][ T24] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 413.580280][ T30] audit: type=1400 audit(1745841795.147:663): avc: denied { bind } for pid=10322 comm="syz.1.1186" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 413.700753][ T9] pwc: recv_control_msg error -32 req 02 val 2c00 [ 413.707981][ T9] pwc: recv_control_msg error -32 req 04 val 1000 [ 413.716111][ T9] pwc: recv_control_msg error -32 req 04 val 1300 [ 413.724912][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 413.747255][ T24] usb 5-1: config 0 has an invalid interface number: 31 but max is 0 [ 413.781681][ T24] usb 5-1: config 0 has no interface number 0 [ 413.808575][ T24] usb 5-1: New USB device found, idVendor=046d, idProduct=08c3, bcdDevice=6b.16 [ 413.830046][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 413.858244][ T24] usb 5-1: Product: syz [ 413.872984][ T24] usb 5-1: Manufacturer: syz [ 413.880456][ T24] usb 5-1: SerialNumber: syz [ 413.895509][ T24] usb 5-1: config 0 descriptor?? [ 413.942294][ T9] pwc: recv_control_msg error -71 req 02 val 2000 [ 413.954930][ T9] pwc: recv_control_msg error -71 req 02 val 2100 [ 413.968015][ T9] pwc: recv_control_msg error -71 req 04 val 1500 [ 413.975309][ T9] pwc: recv_control_msg error -71 req 02 val 2500 [ 413.982402][ T9] pwc: recv_control_msg error -71 req 02 val 2400 [ 414.003957][ T9] pwc: recv_control_msg error -71 req 02 val 2600 [ 414.011886][ T9] pwc: recv_control_msg error -71 req 02 val 2900 [ 414.019158][ T9] pwc: recv_control_msg error -71 req 02 val 2800 [ 414.026616][ T9] pwc: recv_control_msg error -71 req 04 val 1100 [ 414.034088][ T9] pwc: recv_control_msg error -71 req 04 val 1200 [ 414.042884][ T9] pwc: Registered as video103. [ 414.049555][ T9] input: PWC snapshot button as /devices/platform/dummy_hcd.3/usb4/4-1/input/input19 [ 414.066885][ T9] usb 4-1: USB disconnect, device number 17 [ 414.143024][ T24] usb 5-1: Found UVC 0.04 device syz (046d:08c3) [ 414.150107][ T24] usb 5-1: No valid video chain found. [ 415.282467][ T30] audit: type=1400 audit(1745841796.817:664): avc: denied { cmd } for pid=10344 comm="syz.2.1195" path="socket:[26132]" dev="sockfs" ino=26132 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 415.970525][ T92] usb 5-1: USB disconnect, device number 34 [ 420.238508][ T5874] usb 1-1: new high-speed USB device number 36 using dummy_hcd [ 421.305238][T10390] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 421.818338][ T5874] usb 1-1: device descriptor read/64, error -71 [ 422.423714][ T5893] usb 4-1: new high-speed USB device number 18 using dummy_hcd [ 422.596054][ T5893] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 422.613231][ T5893] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 422.739733][ T5893] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 422.780453][ T5893] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 423.799320][T10393] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 423.835737][ T5893] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 424.210836][ T5893] usb 4-1: USB disconnect, device number 18 [ 424.361284][T10419] hsr0 speed is unknown, defaulting to 1000 [ 424.579513][ T30] audit: type=1400 audit(1745841805.847:665): avc: denied { write } for pid=10414 comm="syz.4.1215" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 424.637142][ T5874] usb 1-1: new high-speed USB device number 38 using dummy_hcd [ 424.800168][T10423] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1216'. [ 424.811314][T10423] netlink: 88 bytes leftover after parsing attributes in process `syz.1.1216'. [ 424.820428][ T5874] usb 1-1: Using ep0 maxpacket: 32 [ 424.828658][ T5874] usb 1-1: config 0 has an invalid interface number: 146 but max is 0 [ 424.837214][ T5874] usb 1-1: config 0 has no interface number 0 [ 424.843310][ T5874] usb 1-1: config 0 interface 146 altsetting 0 has an endpoint descriptor with address 0xE3, changing to 0x83 [ 424.855072][ T5874] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x83 has invalid maxpacket 33307, setting to 1024 [ 424.868520][ T5874] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 1024 [ 424.882411][ T5874] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x9 has invalid maxpacket 19604, setting to 1024 [ 424.893854][ T30] audit: type=1400 audit(1745841806.447:666): avc: denied { compute_member } for pid=10421 comm="syz.1.1216" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 424.914707][ T5874] usb 1-1: config 0 interface 146 altsetting 0 bulk endpoint 0x9 has invalid maxpacket 1024 [ 424.925362][ T5874] usb 1-1: config 0 interface 146 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 425.011090][ T5874] usb 1-1: New USB device found, idVendor=05da, idProduct=009a, bcdDevice=62.95 [ 425.022260][ T5874] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 425.035023][ T5874] usb 1-1: Product: syz [ 425.039215][ T5874] usb 1-1: Manufacturer: syz [ 425.043854][ T5874] usb 1-1: SerialNumber: syz [ 425.071258][ T5874] usb 1-1: config 0 descriptor?? [ 425.098051][T10412] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 425.215403][T10412] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 425.237729][ T5874] microtek usb (rev 0.4.3): can only deal with bulk endpoints; endpoint 1 is not bulk. [ 425.251133][ T5874] microtek usb (rev 0.4.3): couldn't find two input bulk endpoints. Bailing out. [ 425.483132][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.494795][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.606632][T10412] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 425.619531][T10412] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 425.628714][ T5874] usb 1-1: USB disconnect, device number 38 [ 427.683336][T10456] netlink: 'syz.4.1225': attribute type 8 has an invalid length. [ 428.107557][T10475] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1230'. [ 428.140959][T10475] geneve2: entered promiscuous mode [ 429.558119][T10491] syz.1.1237: attempt to access beyond end of device [ 429.558119][T10491] loop3: rw=0, sector=0, nr_sectors = 1 limit=0 [ 429.583389][T10491] FAT-fs (loop3): unable to read boot sector [ 430.163794][T10512] FAULT_INJECTION: forcing a failure. [ 430.163794][T10512] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 430.185186][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 430.199750][T10515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1241'. [ 430.233264][T10512] CPU: 1 UID: 0 PID: 10512 Comm: syz.0.1244 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 430.233289][T10512] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 430.233300][T10512] Call Trace: [ 430.233307][T10512] [ 430.233314][T10512] dump_stack_lvl+0x16c/0x1f0 [ 430.233352][T10512] should_fail_ex+0x512/0x640 [ 430.233386][T10512] _copy_from_iter+0x2a4/0x15b0 [ 430.233415][T10512] ? __alloc_skb+0x200/0x380 [ 430.233446][T10512] ? __pfx__copy_from_iter+0x10/0x10 [ 430.233470][T10512] ? __pfx_netlink_autobind.isra.0+0x10/0x10 [ 430.233497][T10512] netlink_sendmsg+0x829/0xdd0 [ 430.233517][T10512] ? __pfx_netlink_sendmsg+0x10/0x10 [ 430.233540][T10512] ____sys_sendmsg+0xa95/0xc70 [ 430.233561][T10512] ? copy_msghdr_from_user+0x10a/0x160 [ 430.233587][T10512] ? __pfx_____sys_sendmsg+0x10/0x10 [ 430.233616][T10512] ___sys_sendmsg+0x134/0x1d0 [ 430.233643][T10512] ? __pfx____sys_sendmsg+0x10/0x10 [ 430.233698][T10512] __sys_sendmsg+0x16d/0x220 [ 430.233723][T10512] ? __pfx___sys_sendmsg+0x10/0x10 [ 430.233755][T10512] ? rcu_is_watching+0x12/0xc0 [ 430.233788][T10512] do_syscall_64+0xcd/0x260 [ 430.233810][T10512] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 430.233830][T10512] RIP: 0033:0x7f414bd8e969 [ 430.233845][T10512] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 430.233861][T10512] RSP: 002b:00007f414cb9c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 430.233879][T10512] RAX: ffffffffffffffda RBX: 00007f414bfb5fa0 RCX: 00007f414bd8e969 [ 430.233890][T10512] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000003 [ 430.233900][T10512] RBP: 00007f414cb9c090 R08: 0000000000000000 R09: 0000000000000000 [ 430.233910][T10512] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 430.233920][T10512] R13: 0000000000000000 R14: 00007f414bfb5fa0 R15: 00007ffdd440c368 [ 430.233943][T10512] [ 430.572122][ T5820] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 430.909082][ T5820] usb 5-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 431.343032][ T5820] usb 5-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 431.400580][ T5820] usb 5-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 431.429439][ T5820] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 431.476140][T10517] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 431.558702][ T30] audit: type=1400 audit(1745841813.107:667): avc: denied { create } for pid=10531 comm="syz.3.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 431.579906][ T30] audit: type=1400 audit(1745841813.117:668): avc: denied { write } for pid=10531 comm="syz.3.1252" path="socket:[27749]" dev="sockfs" ino=27749 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 431.780852][ T30] audit: type=1400 audit(1745841813.117:669): avc: denied { nlmsg_write } for pid=10531 comm="syz.3.1252" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 431.912699][ T5820] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 432.077354][ T30] audit: type=1400 audit(1745841813.647:670): avc: denied { write } for pid=10539 comm="syz.0.1255" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 432.714065][T10547] xt_nat: multiple ranges no longer supported [ 433.391582][T10544] FAULT_INJECTION: forcing a failure. [ 433.391582][T10544] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 433.412540][ T5820] usb 5-1: USB disconnect, device number 35 [ 433.427606][T10544] CPU: 0 UID: 0 PID: 10544 Comm: syz.1.1253 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 433.427631][T10544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 433.427640][T10544] Call Trace: [ 433.427646][T10544] [ 433.427652][T10544] dump_stack_lvl+0x16c/0x1f0 [ 433.427681][T10544] should_fail_ex+0x512/0x640 [ 433.427705][T10544] _copy_from_user+0x2e/0xd0 [ 433.427730][T10544] copy_msghdr_from_user+0x98/0x160 [ 433.427757][T10544] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 433.427782][T10544] ? kfree+0x252/0x4d0 [ 433.427816][T10544] ? find_held_lock+0x2b/0x80 [ 433.427843][T10544] ___sys_sendmsg+0xfe/0x1d0 [ 433.427868][T10544] ? __pfx____sys_sendmsg+0x10/0x10 [ 433.427911][T10544] ? __pfx___might_resched+0x10/0x10 [ 433.427940][T10544] __sys_sendmmsg+0x200/0x420 [ 433.427964][T10544] ? __pfx___sys_sendmmsg+0x10/0x10 [ 433.427991][T10544] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 433.428022][T10544] ? fput+0x70/0xf0 [ 433.428044][T10544] ? ksys_write+0x1b9/0x240 [ 433.428066][T10544] ? __pfx_ksys_write+0x10/0x10 [ 433.428086][T10544] ? rcu_is_watching+0x12/0xc0 [ 433.428109][T10544] __x64_sys_sendmmsg+0x9c/0x100 [ 433.428142][T10544] ? lockdep_hardirqs_on+0x7c/0x110 [ 433.428160][T10544] do_syscall_64+0xcd/0x260 [ 433.428180][T10544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 433.428198][T10544] RIP: 0033:0x7fbb0478e969 [ 433.428213][T10544] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 433.428230][T10544] RSP: 002b:00007fbb025f6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 433.428245][T10544] RAX: ffffffffffffffda RBX: 00007fbb049b6080 RCX: 00007fbb0478e969 [ 433.428256][T10544] RDX: 040000000000017d RSI: 0000200000002940 RDI: 0000000000000005 [ 433.428265][T10544] RBP: 00007fbb025f6090 R08: 0000000000000000 R09: 0000000000000000 [ 433.428274][T10544] R10: 0000000000000811 R11: 0000000000000246 R12: 0000000000000002 [ 433.428283][T10544] R13: 0000000000000000 R14: 00007fbb049b6080 R15: 00007ffcb7087b68 [ 433.428303][T10544] [ 434.127401][T10553] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.1256'. [ 434.300248][T10553] tmpfs: Unknown parameter 'quïtÁvÌï?a' [ 434.544088][T10553] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 434.558617][T10566] netlink: 'syz.2.1261': attribute type 3 has an invalid length. [ 434.586154][T10553] batman_adv: batadv0: Adding interface: ip6gretap1 [ 434.606496][T10553] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 434.637686][T10553] batman_adv: batadv0: Interface activated: ip6gretap1 [ 434.705317][ T5820] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 434.764737][ T5928] usb 2-1: new high-speed USB device number 31 using dummy_hcd [ 434.844524][ T5820] usb 5-1: device descriptor read/64, error -71 [ 434.924482][ T5928] usb 2-1: Using ep0 maxpacket: 8 [ 434.936819][ T5928] usb 2-1: config 179 has an invalid interface number: 65 but max is 0 [ 434.938078][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1264'. [ 434.954527][ T5928] usb 2-1: config 179 has no interface number 0 [ 434.960877][ T5928] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has an invalid bInterval 63, changing to 9 [ 434.984661][ T5928] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0xF has invalid maxpacket 57605, setting to 1024 [ 435.004597][ T5928] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has an invalid bInterval 52, changing to 9 [ 435.035035][ T5928] usb 2-1: config 179 interface 65 altsetting 12 endpoint 0x83 has invalid maxpacket 8241, setting to 1024 [ 435.054489][ T5928] usb 2-1: config 179 interface 65 altsetting 12 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 435.074472][ T5928] usb 2-1: config 179 interface 65 has no altsetting 0 [ 435.081465][ T5928] usb 2-1: New USB device found, idVendor=12ab, idProduct=0004, bcdDevice= 0.00 [ 435.096514][ T5820] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 435.115102][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.141077][ T5928] input: Honey Bee Xbox360 dancepad as /devices/platform/dummy_hcd.1/usb2/2-1/2-1:179.65/input/input20 [ 435.196782][ T5171] input input20: unable to receive magic message: -110 [ 435.214672][ T5171] input input20: unable to receive magic message: -32 [ 435.225833][ T5171] input input20: unable to receive magic message: -32 [ 435.239198][ T5171] input input20: unable to receive magic message: -32 [ 435.246327][ T5820] usb 5-1: device descriptor read/64, error -71 [ 435.354947][ T5820] usb usb5-port1: attempt power cycle [ 435.856046][ T5864] usb 1-1: new high-speed USB device number 39 using dummy_hcd [ 435.881435][ T92] usb 2-1: USB disconnect, device number 31 [ 435.881553][ C0] xpad 2-1:179.65: xpad_irq_out - usb_submit_urb failed with result -19 [ 435.896162][ T92] xpad 2-1:179.65: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -19 [ 436.024617][ T5864] usb 1-1: Using ep0 maxpacket: 32 [ 436.033999][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.062758][ T5864] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.095174][ T5864] usb 1-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 436.108911][ T5864] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.136658][ T5864] usb 1-1: config 0 descriptor?? [ 436.143921][ T5864] hub 1-1:0.0: USB hub found [ 436.194701][ T5820] usb 5-1: new high-speed USB device number 38 using dummy_hcd [ 436.215076][ T5820] usb 5-1: device descriptor read/8, error -71 [ 436.431063][ T5864] hub 1-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 436.447548][ T5928] usb 4-1: new high-speed USB device number 19 using dummy_hcd [ 436.564618][ T5820] usb 5-1: new high-speed USB device number 39 using dummy_hcd [ 436.604675][ T5928] usb 4-1: Using ep0 maxpacket: 32 [ 436.611536][ T5820] usb 5-1: device descriptor read/8, error -71 [ 436.623147][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 436.643830][ T5928] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 436.657858][ T5928] usb 4-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 436.675016][ T5928] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.693009][ T5928] usb 4-1: config 0 descriptor?? [ 436.702767][ T5928] hub 4-1:0.0: USB hub found [ 436.724723][ T5820] usb usb5-port1: unable to enumerate USB device [ 436.834472][ T92] usb 2-1: new high-speed USB device number 32 using dummy_hcd [ 436.849141][ T5864] usbhid 1-1:0.0: can't add hid device: -71 [ 436.857977][ T5864] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 436.888607][ T5864] usb 1-1: USB disconnect, device number 39 [ 436.908001][ T5928] hub 4-1:0.0: config failed, hub doesn't have any ports! (err -19) [ 437.009672][ T92] usb 2-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 437.030885][ T92] usb 2-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 437.041072][ T92] usb 2-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 437.052467][ T92] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 437.067471][T10599] raw-gadget.3 gadget.1: fail, usb_ep_enable returned -22 [ 437.101957][ T92] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 437.320251][ T5928] usbhid 4-1:0.0: can't add hid device: -71 [ 437.326581][ T92] usb 2-1: USB disconnect, device number 32 [ 437.329289][ T5928] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 437.390887][ T5928] usb 4-1: USB disconnect, device number 19 [ 437.985073][ T92] usb 5-1: new high-speed USB device number 40 using dummy_hcd [ 438.414999][ T92] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.465389][ T92] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 438.485995][ T92] usb 5-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 438.499716][ T92] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 438.508245][ T92] usb 5-1: SerialNumber: syz [ 438.733855][ T92] usb 5-1: 0:2 : does not exist [ 438.738915][ T92] usb 5-1: unit 5: unexpected type 0x0c [ 438.751901][ T92] usb 5-1: USB disconnect, device number 40 [ 439.384475][ T5874] usb 4-1: new high-speed USB device number 20 using dummy_hcd [ 439.529874][T10630] uprobe: syz.0.1283:10630 failed to unregister, leaking uprobe [ 439.555901][ T5874] usb 4-1: config 0 interface 0 altsetting 32 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 439.641654][ T5874] usb 4-1: config 0 interface 0 altsetting 32 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 439.655093][ T5874] usb 4-1: config 0 interface 0 has no altsetting 0 [ 439.661771][ T5874] usb 4-1: New USB device found, idVendor=04b3, idProduct=3109, bcdDevice= 0.00 [ 439.692752][ T5874] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 439.714635][ T5874] usb 4-1: config 0 descriptor?? [ 440.599617][T10640] overlayfs: missing 'lowerdir' [ 440.923147][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 440.926720][ T5874] usbhid 4-1:0.0: can't add hid device: -71 [ 440.997763][ T5874] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 441.047031][ T5874] usb 4-1: USB disconnect, device number 20 [ 442.330802][T10664] overlay: ./file0 is not a directory [ 442.412365][ T30] audit: type=1400 audit(1745841823.977:671): avc: denied { map } for pid=10666 comm="syz.4.1293" path="/dev/full" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 442.464660][ T30] audit: type=1400 audit(1745841823.977:672): avc: denied { execute } for pid=10666 comm="syz.4.1293" path="/dev/full" dev="devtmpfs" ino=7 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:null_device_t tclass=chr_file permissive=1 [ 444.606241][ T5864] usb 1-1: new full-speed USB device number 40 using dummy_hcd [ 444.829544][ T5864] usb 1-1: unable to get BOS descriptor or descriptor too short [ 444.843244][ T5864] usb 1-1: not running at top speed; connect to a high speed hub [ 444.930501][ T5864] usb 1-1: config 8 has an invalid interface number: 24 but max is 0 [ 445.179769][ T5864] usb 1-1: config 8 has no interface number 0 [ 445.191783][ T5864] usb 1-1: config 8 interface 24 altsetting 2 endpoint 0xE has invalid maxpacket 1535, setting to 64 [ 445.212320][ T5864] usb 1-1: config 8 interface 24 has no altsetting 0 [ 445.223038][ T5864] usb 1-1: New USB device found, idVendor=10cf, idProduct=5503, bcdDevice=75.af [ 445.456882][ T5864] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 445.469460][ T5864] usb 1-1: Product: syz [ 445.473661][ T5864] usb 1-1: Manufacturer: syz [ 445.478348][ T5864] usb 1-1: SerialNumber: syz [ 445.488067][T10681] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 445.769692][ T5864] comedi comedi0: driver 'vmk80xx' has successfully auto-configured 'K8055 (VM110)'. [ 445.824548][ T5864] usb 1-1: USB disconnect, device number 40 [ 446.461377][ T30] audit: type=1400 audit(1745841828.027:673): avc: denied { bind } for pid=10712 comm="syz.4.1307" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 447.135293][T10719] netlink: 'syz.2.1308': attribute type 4 has an invalid length. [ 447.176904][T10719] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 447.551803][T10730] IPVS: sync thread started: state = BACKUP, mcast_ifn = vcan0, syncid = 0, id = 0 [ 447.744719][T10732] hsr0 speed is unknown, defaulting to 1000 [ 449.036515][ T30] audit: type=1400 audit(1745841830.607:674): avc: denied { nlmsg_read } for pid=10739 comm="syz.1.1314" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 449.085202][ T5820] usb 4-1: new high-speed USB device number 21 using dummy_hcd [ 449.988909][ T5820] usb 4-1: device not accepting address 21, error -71 [ 450.135487][T10749] macvtap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 450.724316][T10749] macvtap2: entered allmulticast mode [ 450.743050][T10749] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 451.025625][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1320'. [ 451.123347][ C0] vcan0: j1939_session_tx_dat: 0xffff88804a463800: queue data error: -100 [ 451.885205][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1322'. [ 452.720043][T10790] fuse: Unknown parameter '00000000000000000000006' [ 453.144947][ T5820] usb 5-1: new low-speed USB device number 41 using dummy_hcd [ 453.904545][ T5820] usb 5-1: Invalid ep0 maxpacket: 16 [ 454.496231][ T5820] usb 5-1: new low-speed USB device number 42 using dummy_hcd [ 454.854668][ T5820] usb 5-1: Invalid ep0 maxpacket: 16 [ 454.871353][ T5820] usb usb5-port1: attempt power cycle [ 455.183533][T10808] macvtap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 455.274932][ T5820] usb 5-1: new low-speed USB device number 43 using dummy_hcd [ 455.607917][T10808] macvtap3: entered allmulticast mode [ 455.616016][T10808] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 456.207988][ T5820] usb 5-1: device descriptor read/8, error -71 [ 456.700463][T10832] Malformed UNC in devname [ 456.700463][T10832] [ 456.787306][T10832] CIFS: VFS: Malformed UNC in devname [ 456.850164][T10825] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 456.949689][ T30] audit: type=1400 audit(1745841838.437:675): avc: denied { read write } for pid=10837 comm="syz.3.1341" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 457.131688][ T30] audit: type=1400 audit(1745841838.437:676): avc: denied { open } for pid=10837 comm="syz.3.1341" path="/dev/nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 457.155976][ T30] audit: type=1400 audit(1745841838.437:677): avc: denied { read } for pid=10837 comm="syz.3.1341" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 462.631383][T10891] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 462.687444][ T30] audit: type=1400 audit(1745841844.227:678): avc: denied { read } for pid=10899 comm="syz.1.1359" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 464.371571][T10925] macvtap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 464.836165][T10925] macvtap4: entered allmulticast mode [ 464.857894][ T30] audit: type=1400 audit(1745841846.427:679): avc: denied { mounton } for pid=10936 comm="syz.0.1367" path="/proc/908/ns" dev="proc" ino=29513 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dir permissive=1 [ 464.926825][T10925] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 465.079195][T10934] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 465.091260][T10934] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 465.184522][ T24] usb 2-1: new low-speed USB device number 33 using dummy_hcd [ 465.374700][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 465.549188][ T24] usb 2-1: new low-speed USB device number 34 using dummy_hcd [ 465.814692][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 465.825133][ T24] usb usb2-port1: attempt power cycle [ 466.214549][ T24] usb 2-1: new low-speed USB device number 35 using dummy_hcd [ 466.372526][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 466.904926][ T24] usb 2-1: new low-speed USB device number 36 using dummy_hcd [ 466.935666][ T24] usb 2-1: Invalid ep0 maxpacket: 32 [ 466.941472][ T24] usb usb2-port1: unable to enumerate USB device [ 468.687900][T10987] block nbd4: shutting down sockets [ 468.846535][T10994] block nbd4: NBD_DISCONNECT [ 468.861843][T10994] block nbd4: Send disconnect failed -32 [ 469.526306][T10996] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 469.894209][ T30] audit: type=1400 audit(1745841851.397:680): avc: denied { create } for pid=11006 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 470.129119][ T30] audit: type=1400 audit(1745841851.397:681): avc: denied { read } for pid=11006 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 470.204566][ T30] audit: type=1400 audit(1745841851.537:682): avc: denied { write } for pid=11003 comm="syz.1.1386" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 470.238343][T11012] FAULT_INJECTION: forcing a failure. [ 470.238343][T11012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 470.266663][T11012] CPU: 1 UID: 0 PID: 11012 Comm: syz.4.1387 Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 470.266692][T11012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 470.266703][T11012] Call Trace: [ 470.266710][T11012] [ 470.266717][T11012] dump_stack_lvl+0x16c/0x1f0 [ 470.266749][T11012] should_fail_ex+0x512/0x640 [ 470.266787][T11012] _copy_from_user+0x2e/0xd0 [ 470.266814][T11012] memdup_user_nul+0x6c/0x120 [ 470.266840][T11012] sel_write_enforce+0xcd/0x510 [ 470.266865][T11012] ? __pfx_sel_write_enforce+0x10/0x10 [ 470.266890][T11012] ? __pfx_sel_write_enforce+0x10/0x10 [ 470.266909][T11012] vfs_writev+0x6c4/0xdc0 [ 470.266933][T11012] ? __pfx___mutex_trylock_common+0x10/0x10 [ 470.266970][T11012] ? __pfx_vfs_writev+0x10/0x10 [ 470.266993][T11012] ? __mutex_lock+0x1ca/0xb90 [ 470.267021][T11012] ? __pfx___mutex_lock+0x10/0x10 [ 470.267050][T11012] ? __fget_files+0x20e/0x3c0 [ 470.267075][T11012] ? __fget_files+0x1f0/0x3c0 [ 470.267107][T11012] ? do_writev+0x132/0x330 [ 470.267146][T11012] do_writev+0x132/0x330 [ 470.267169][T11012] ? __pfx_do_writev+0x10/0x10 [ 470.267190][T11012] ? rcu_is_watching+0x12/0xc0 [ 470.267218][T11012] do_syscall_64+0xcd/0x260 [ 470.267243][T11012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 470.267261][T11012] RIP: 0033:0x7fd72b38e969 [ 470.267277][T11012] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 470.267294][T11012] RSP: 002b:00007fd72c12e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 470.267311][T11012] RAX: ffffffffffffffda RBX: 00007fd72b5b6160 RCX: 00007fd72b38e969 [ 470.267322][T11012] RDX: 0000000000000002 RSI: 0000200000000340 RDI: 0000000000000007 [ 470.267332][T11012] RBP: 00007fd72c12e090 R08: 0000000000000000 R09: 0000000000000000 [ 470.267341][T11012] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 470.267351][T11012] R13: 0000000000000000 R14: 00007fd72b5b6160 R15: 00007ffdbde702e8 [ 470.267375][T11012] [ 470.483410][ T30] audit: type=1400 audit(1745841852.047:683): avc: denied { bind } for pid=11006 comm="syz.4.1387" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 471.542380][T10993] syz_tun: entered allmulticast mode [ 472.493654][T11036] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=255 sclass=netlink_route_socket pid=11036 comm=syz.2.1395 [ 472.508113][ T5874] usb 2-1: new high-speed USB device number 37 using dummy_hcd [ 472.668488][ T5820] usb 1-1: new high-speed USB device number 41 using dummy_hcd [ 472.826261][ T5874] usb 2-1: config 17 has an invalid descriptor of length 0, skipping remainder of the config [ 472.836830][ T5874] usb 2-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 472.836925][ T5820] usb 1-1: New USB device found, idVendor=041e, idProduct=3100, bcdDevice= 0.00 [ 472.846079][ T5874] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.868689][ T5820] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 472.907992][ T5874] aiptek 2-1:17.0: interface has no int in endpoints, but must have minimum 1 [ 472.942426][ T5820] usb 1-1: config 0 descriptor?? [ 473.047724][T11041] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 473.853862][ T5820] creative-sb0540 0003:041E:3100.0006: No inputs registered, leaving [ 473.868528][ T5820] creative-sb0540 0003:041E:3100.0006: hidraw0: USB HID v1.01 Device [HID 041e:3100] on usb-dummy_hcd.0-1/input0 [ 473.937898][T11054] ptrace attach of "./syz-executor exec"[5811] was attempted by "./syz-executor exec"[11054] [ 473.951601][T11054] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1400'. [ 474.023870][ T5820] usb 1-1: USB disconnect, device number 41 [ 474.091844][T11058] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 474.289029][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1404'. [ 474.778918][ T5820] usb 2-1: USB disconnect, device number 37 [ 474.966504][ T5864] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 475.189683][ T30] audit: type=1400 audit(1745841856.757:684): avc: denied { append } for pid=11073 comm="syz.0.1407" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 475.214435][ T5864] usb 5-1: Using ep0 maxpacket: 32 [ 475.238513][ T5864] usb 5-1: config 0 has no interfaces? [ 475.355648][ T5864] usb 5-1: New USB device found, idVendor=12d8, idProduct=0001, bcdDevice=de.79 [ 475.479890][ T5864] usb 5-1: New USB device strings: Mfr=1, Product=236, SerialNumber=2 [ 475.576055][ T5864] usb 5-1: Product: syz [ 475.630011][ T5864] usb 5-1: Manufacturer: syz [ 475.650166][ T5864] usb 5-1: SerialNumber: syz [ 475.662695][ T5864] usb 5-1: config 0 descriptor?? [ 476.144204][T11063] netlink: 'syz.4.1404': attribute type 21 has an invalid length. [ 476.152256][T11063] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1404'. [ 476.262502][T11093] fuse: Unknown parameter 'group_i00000000000000000000' [ 476.506977][ T5928] usb 5-1: USB disconnect, device number 45 [ 476.845909][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.862396][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.878312][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.892811][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.907470][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.928009][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.955045][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 476.982225][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 476.994461][T11102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 477.019044][T11102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 477.029939][T11102] batadv_slave_0: entered promiscuous mode [ 477.075671][T11102] batadv_slave_0: left promiscuous mode [ 477.157345][T11110] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1418'. [ 477.569436][T11122] @: renamed from vlan0 (while UP) [ 478.831103][T11131] fuse: Unknown parameter 'group_id00000000000000000000' [ 479.351917][ T5928] usb 2-1: new high-speed USB device number 38 using dummy_hcd [ 479.724537][ T5928] usb 2-1: Using ep0 maxpacket: 32 [ 479.735128][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 479.748161][ T5928] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 479.760473][ T5928] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 479.775648][ T5928] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 479.787718][ T5928] usb 2-1: config 0 descriptor?? [ 479.797933][ T5928] hub 2-1:0.0: USB hub found [ 479.826023][ T5820] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 480.015880][ T5820] usb 4-1: device descriptor read/64, error -71 [ 480.174020][ T5928] hub 2-1:0.0: 1 port detected [ 480.347002][ T5820] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 480.944506][ T5820] usb 4-1: device descriptor read/64, error -71 [ 481.071122][ T5820] usb usb4-port1: attempt power cycle [ 481.153499][ T5928] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 481.154050][ T5864] usb 2-1: USB disconnect, device number 38 [ 481.434587][ T5820] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 481.526468][ T5820] usb 4-1: device descriptor read/8, error -71 [ 481.536176][ T30] audit: type=1400 audit(1745841863.097:685): avc: denied { mount } for pid=11157 comm="syz.2.1434" name="/" dev="rpc_pipefs" ino=30305 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:rpc_pipefs_t tclass=filesystem permissive=1 [ 482.014746][ T5820] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 482.064285][ T5820] usb 4-1: device descriptor read/8, error -71 [ 482.121559][T11173] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1438'. [ 482.306502][ T5820] usb usb4-port1: unable to enumerate USB device [ 482.343736][T11175] can: request_module (can-proto-3) failed. [ 483.387743][T11194] dns_resolver: Unsupported content type (152) [ 483.403328][T11194] netlink: 148 bytes leftover after parsing attributes in process `syz.1.1444'. [ 483.658641][T11203] netlink: 'syz.2.1443': attribute type 14 has an invalid length. [ 484.398084][ T30] audit: type=1400 audit(1745841865.967:686): avc: denied { listen } for pid=11205 comm="syz.1.1446" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 484.533227][ T30] audit: type=1400 audit(1745841866.097:687): avc: denied { lock } for pid=11208 comm="syz.3.1447" path="socket:[31810]" dev="sockfs" ino=31810 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 484.716983][ T30] audit: type=1400 audit(1745841866.277:688): avc: denied { append } for pid=11211 comm="syz.3.1450" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 485.016843][T11219] fuse: Unknown parameter 'group_id00000000000000000000' [ 485.396469][T11226] overlayfs: failed to clone upperpath [ 487.420483][ T30] audit: type=1326 audit(1745841868.987:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11249 comm="syz.1.1459" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fbb0478e969 code=0x0 [ 488.428431][T11270] fuse: Bad value for 'user_id' [ 488.433379][T11270] fuse: Bad value for 'user_id' [ 488.662856][T11278] new mount options do not match the existing superblock, will be ignored [ 488.734578][ T9] usb 2-1: new high-speed USB device number 39 using dummy_hcd [ 488.765506][ T30] audit: type=1400 audit(1745841870.337:690): avc: denied { unmount } for pid=5812 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 489.473122][ T9] usb 2-1: Using ep0 maxpacket: 32 [ 489.550661][ T9] usb 2-1: config index 0 descriptor too short (expected 35577, got 27) [ 489.572228][ T9] usb 2-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 489.611064][ T9] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 489.646893][ T9] usb 2-1: config 1 has no interface number 0 [ 489.673509][ T9] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 489.704467][ T9] usb 2-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 489.731137][ T9] usb 2-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 489.746119][ T9] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 489.755663][ T30] audit: type=1326 audit(1745841871.327:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2051d8e969 code=0x7ffc0000 [ 489.761785][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD found [ 489.779059][ C1] vkms_vblank_simulate: vblank timer overrun [ 489.840592][ T30] audit: type=1326 audit(1745841871.327:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2051d8e969 code=0x7ffc0000 [ 489.864011][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.093208][ T30] audit: type=1326 audit(1745841871.377:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2051d8e969 code=0x7ffc0000 [ 490.116674][ C1] vkms_vblank_simulate: vblank timer overrun [ 490.790411][T11303] syzkaller0: entered promiscuous mode [ 490.790480][T11303] syzkaller0: entered allmulticast mode [ 490.933959][ T9] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now attached [ 490.940074][ T30] audit: type=1326 audit(1745841871.377:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2051d8e969 code=0x7ffc0000 [ 490.940124][ T30] audit: type=1326 audit(1745841871.377:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2051d8e969 code=0x7ffc0000 [ 490.940181][ T30] audit: type=1326 audit(1745841871.397:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f2051d8e969 code=0x7ffc0000 [ 490.940219][ T30] audit: type=1326 audit(1745841871.397:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f2051d8e969 code=0x7ffc0000 [ 490.940253][ T30] audit: type=1326 audit(1745841871.397:698): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11295 comm="syz.3.1472" exe="/root/syz-executor" sig=0 arch=c000003e syscall=99 compat=0 ip=0x7f2051d8e969 code=0x7ffc0000 [ 491.035823][T11305] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.036058][T11305] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.113562][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.160559][ C1] vkms_vblank_simulate: vblank timer overrun [ 491.765436][T11311] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 491.774040][T11311] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 491.892617][ T5820] usb 2-1: USB disconnect, device number 39 [ 491.910639][ T5820] snd_usb_pod 2-1:1.1: Line 6 Pocket POD now disconnected [ 491.978263][T11317] fuse: Bad value for 'user_id' [ 491.983174][T11317] fuse: Bad value for 'user_id' [ 493.454539][ T5820] usb 2-1: new high-speed USB device number 40 using dummy_hcd [ 493.893087][ T5820] usb 2-1: Using ep0 maxpacket: 32 [ 494.975177][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 495.111518][ T5820] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 495.124449][ T5820] usb 2-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 495.143286][ T5820] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 495.218591][ T5820] usb 2-1: config 0 descriptor?? [ 495.252623][ T5820] hub 2-1:0.0: USB hub found [ 495.302729][T11339] macvtap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 495.582498][ T5820] hub 2-1:0.0: 1 port detected [ 495.636037][T11339] macvtap2: entered allmulticast mode [ 495.642979][T11339] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 495.707647][T11346] macvtap2: default qdisc (pfifo_fast) fail, fallback to noqueue [ 495.718482][T11346] macvtap2: entered allmulticast mode [ 495.727860][T11346] 8021q: adding VLAN 0 to HW filter on device macvtap2 [ 496.536709][ T5820] hub 2-1:0.0: hub_ext_port_status failed (err = -71) [ 497.029061][ T5820] usb 2-1: USB disconnect, device number 40 [ 498.067914][T11369] fuse: Bad value for 'user_id' [ 498.072968][T11369] fuse: Bad value for 'user_id' [ 500.734684][T11409] macvtap3: default qdisc (pfifo_fast) fail, fallback to noqueue [ 500.742512][T11409] macvtap3: entered allmulticast mode [ 500.766333][T11409] 8021q: adding VLAN 0 to HW filter on device macvtap3 [ 500.878563][T11416] netlink: 496 bytes leftover after parsing attributes in process `syz.0.1503'. [ 500.934491][T11419] fuse: Bad value for 'fd' [ 501.305245][T11424] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=17168 sclass=netlink_route_socket pid=11424 comm=syz.2.1506 [ 501.387084][ T30] kauditd_printk_skb: 26 callbacks suppressed [ 501.387183][ T30] audit: type=1326 audit(1745841882.837:725): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 501.589585][ T30] audit: type=1326 audit(1745841882.837:726): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 501.629032][ T30] audit: type=1326 audit(1745841882.847:727): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=229 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 501.736956][ T30] audit: type=1326 audit(1745841882.847:728): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 501.761516][ T30] audit: type=1326 audit(1745841882.847:729): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 501.917195][ T30] audit: type=1326 audit(1745841882.857:730): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 501.940984][ T30] audit: type=1326 audit(1745841882.857:731): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 502.007161][ T30] audit: type=1326 audit(1745841882.857:732): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 502.185890][ T30] audit: type=1326 audit(1745841882.857:733): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 502.259626][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.269553][ T30] audit: type=1326 audit(1745841882.857:734): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=11421 comm="syz.2.1506" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f609eb8e969 code=0x7ffc0000 [ 503.204018][T11440] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 504.382741][T11470] ptrace attach of "./syz-executor exec"[5809] was attempted by "./syz-executor exec"[11470] [ 504.383585][T11471] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1518'. [ 504.892210][T11475] macvtap4: default qdisc (pfifo_fast) fail, fallback to noqueue [ 504.901714][T11475] macvtap4: entered allmulticast mode [ 504.910709][T11475] 8021q: adding VLAN 0 to HW filter on device macvtap4 [ 505.392951][T11448] overlayfs: failed to clone upperpath [ 505.588070][T11484] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1520'. [ 506.199888][T11494] x_tables: duplicate underflow at hook 1 [ 506.260634][T11497] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1524'. [ 506.405155][ T9] usb 2-1: new high-speed USB device number 41 using dummy_hcd [ 507.094860][ T9] usb 2-1: device descriptor read/64, error -71 [ 507.921069][ T9] usb 2-1: new high-speed USB device number 42 using dummy_hcd [ 508.225937][T11515] netlink: 236 bytes leftover after parsing attributes in process `syz.3.1529'. [ 508.257995][T11515] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 508.367158][T11517] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 508.376962][ T9] usb 2-1: device descriptor read/64, error -71 [ 508.387698][T11517] bond_slave_1: entered promiscuous mode [ 508.393683][T11517] team_slave_0: entered promiscuous mode [ 508.399475][T11517] team_slave_1: entered promiscuous mode [ 509.193760][T11516] bond_slave_1: left promiscuous mode [ 509.199719][T11516] team_slave_0: left promiscuous mode [ 509.205460][T11516] team_slave_1: left promiscuous mode [ 509.410374][ T5874] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 509.410720][ T9] usb usb2-port1: attempt power cycle [ 509.735296][ T5874] usb 5-1: Using ep0 maxpacket: 8 [ 509.747078][ T5874] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 509.785038][ T5874] usb 5-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 509.881297][ T5874] usb 5-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 509.892104][ T5874] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 509.900708][ T5874] usb 5-1: Product: syz [ 509.908162][ T5874] usb 5-1: Manufacturer: syz [ 509.912797][ T5874] usb 5-1: SerialNumber: syz [ 509.941817][ T5874] usb 5-1: config 0 descriptor?? [ 509.980116][T11517] syz.2.1530 (11517) used greatest stack depth: 20584 bytes left [ 510.002846][T11536] overlay: filesystem on ./bus not supported as upperdir [ 510.049662][ T30] kauditd_printk_skb: 21 callbacks suppressed [ 510.049694][ T30] audit: type=1800 audit(1745841891.617:756): pid=11536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.1.1537" name="file1" dev="overlay" ino=1568 res=0 errno=0 [ 510.107735][ T30] audit: type=1804 audit(1745841891.627:757): pid=11536 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1537" name="/newroot/281/bus/bus/file1" dev="overlay" ino=1568 res=1 errno=0 [ 510.162331][ T5874] usb 5-1: USB disconnect, device number 46 [ 510.214812][ T92] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 615.334310][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 615.341335][ C1] rcu: 0-...!: (0 ticks this GP) idle=cb2c/1/0x4000000000000000 softirq=51960/51960 fqs=0 [ 615.353581][ C1] rcu: (detected by 1, t=10506 jiffies, g=39309, q=265 ncpus=2) [ 615.361323][ C1] Sending NMI from CPU 1 to CPUs 0: [ 615.361364][ C0] NMI backtrace for cpu 0 [ 615.361384][ C0] CPU: 0 UID: 0 PID: 5808 Comm: syz-executor Not tainted 6.15.0-rc4-syzkaller #0 PREEMPT(full) [ 615.361401][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 615.361411][ C0] RIP: 0010:do_raw_spin_lock+0x13d/0x2b0 [ 615.361442][ C0] Code: 28 00 00 00 00 e8 c3 5a 88 00 be 04 00 00 00 48 8d 7c 24 28 e8 b4 5a 88 00 8b 44 24 28 ba 01 00 00 00 89 44 24 04 f0 0f b1 13 <0f> 85 94 00 00 00 65 44 8b 35 a9 66 0b 12 48 b8 00 00 00 00 00 fc [ 615.361455][ C0] RSP: 0018:ffffc90000007c98 EFLAGS: 00000046 [ 615.361468][ C0] RAX: 0000000000000000 RBX: ffffffff9ad5fdc0 RCX: ffffffff8198596c [ 615.361476][ C0] RDX: 0000000000000001 RSI: 0000000000000004 RDI: ffffc90000007cc0 [ 615.361483][ C0] RBP: 1ffff92000000f94 R08: 0000000000000001 R09: fffff52000000f98 [ 615.361491][ C0] R10: 0000000000000003 R11: 0000000000000000 R12: ffffffff9ad5fdc8 [ 615.361498][ C0] R13: ffffffff9ad5fdd0 R14: ffff88807dbe3340 R15: 1ffff92000000fac [ 615.361507][ C0] FS: 000055557c7e3500(0000) GS:ffff8881249e4000(0000) knlGS:0000000000000000 [ 615.361519][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 615.361527][ C0] CR2: 0000200000000240 CR3: 0000000061392000 CR4: 00000000003526f0 [ 615.361542][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 615.361550][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 615.361557][ C0] Call Trace: [ 615.361565][ C0] [ 615.361573][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 615.361587][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 615.361601][ C0] _raw_spin_lock_irqsave+0x42/0x60 [ 615.361622][ C0] ? debug_object_deactivate+0x135/0x3a0 [ 615.361645][ C0] debug_object_deactivate+0x135/0x3a0 [ 615.361664][ C0] ? __pfx_debug_object_activate+0x10/0x10 [ 615.361681][ C0] ? __pfx_debug_object_deactivate+0x10/0x10 [ 615.361700][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 615.361715][ C0] __hrtimer_run_queues+0x46f/0xad0 [ 615.361734][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 615.361746][ C0] ? read_tsc+0x9/0x20 [ 615.361770][ C0] hrtimer_interrupt+0x397/0x8e0 [ 615.361794][ C0] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 615.361811][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 615.361828][ C0] [ 615.361832][ C0] [ 615.361837][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 615.361852][ C0] RIP: 0010:copy_page_range+0x2ae9/0x5fe0 [ 615.361877][ C0] Code: ff df 48 89 fa 48 c1 ea 03 0f b6 04 02 84 c0 74 08 3c 03 0f 8e a2 2c 00 00 48 8b 44 24 78 83 80 98 02 00 00 01 e9 0d d8 ff ff 92 ed b2 ff 48 8d 7b 30 be 04 00 00 00 e8 a4 70 18 00 f0 ff 43 [ 615.361889][ C0] RSP: 0018:ffffc90004057770 EFLAGS: 00000246 [ 615.361899][ C0] RAX: 0000000000000000 RBX: ffffea00018837c0 RCX: ffffffff820834c9 [ 615.361907][ C0] RDX: ffff888077f54880 RSI: 0000000000000000 RDI: 0000000000000001 [ 615.361914][ C0] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 615.361921][ C0] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000000 [ 615.361928][ C0] R13: dffffc0000000000 R14: ffff88806139c2d0 R15: ffffea00018837c0 [ 615.361939][ C0] ? copy_page_range+0x1c49/0x5fe0 [ 615.361967][ C0] ? __pfx_copy_page_range+0x10/0x10 [ 615.361986][ C0] ? __pfx___might_resched+0x10/0x10 [ 615.362003][ C0] ? __pfx_mas_store+0x10/0x10 [ 615.362020][ C0] ? __vma_enter_locked+0x163/0x3f0 [ 615.362033][ C0] ? copy_process+0x85dd/0x91a0 [ 615.362052][ C0] ? down_write+0x14d/0x200 [ 615.362068][ C0] ? up_write+0x1b2/0x520 [ 615.362081][ C0] copy_process+0x862b/0x91a0 [ 615.362104][ C0] ? __pfx_copy_process+0x10/0x10 [ 615.362123][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 615.362139][ C0] kernel_clone+0xfc/0x960 [ 615.362155][ C0] ? __pfx_kernel_clone+0x10/0x10 [ 615.362172][ C0] ? cgroup_rstat_updated+0x2a/0xb20 [ 615.362192][ C0] __do_sys_clone+0xce/0x120 [ 615.362207][ C0] ? __pfx___do_sys_clone+0x10/0x10 [ 615.362227][ C0] ? do_user_addr_fault+0x843/0x1370 [ 615.362244][ C0] do_syscall_64+0xcd/0x260 [ 615.362263][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 615.362275][ C0] RIP: 0033:0x7fbb047851d3 [ 615.362288][ C0] Code: 1f 84 00 00 00 00 00 64 48 8b 04 25 10 00 00 00 45 31 c0 31 d2 31 f6 bf 11 00 20 01 4c 8d 90 d0 02 00 00 b8 38 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 35 89 c2 85 c0 75 2c 64 48 8b 04 25 10 00 00 [ 615.362299][ C0] RSP: 002b:00007ffcb7087de8 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 615.362310][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fbb047851d3 [ 615.362318][ C0] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 615.362325][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 615.362331][ C0] R10: 000055557c7e37d0 R11: 0000000000000246 R12: 0000000000000000 [ 615.362339][ C0] R13: 00000000000927c0 R14: 000000000007ca7c R15: 00007ffcb7087f80 [ 615.362352][ C0] [ 615.363347][ C1] rcu: rcu_preempt kthread timer wakeup didn't happen for 10505 jiffies! g39309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 615.849009][ C1] rcu: Possible timer handling issue on cpu=0 timer-softirq=24208 [ 615.856892][ C1] rcu: rcu_preempt kthread starved for 10506 jiffies! g39309 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=0 [ 615.868244][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 615.878200][ C1] rcu: RCU grace-period kthread stack dump: [ 615.884074][ C1] task:rcu_preempt state:I stack:27304 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 615.896013][ C1] Call Trace: [ 615.899281][ C1] [ 615.902208][ C1] __schedule+0x116f/0x5de0 [ 615.906723][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 615.911665][ C1] ? __pfx___schedule+0x10/0x10 [ 615.916520][ C1] ? find_held_lock+0x2b/0x80 [ 615.921192][ C1] ? schedule+0x2d7/0x3a0 [ 615.925515][ C1] schedule+0xe7/0x3a0 [ 615.929573][ C1] schedule_timeout+0x123/0x290 [ 615.934420][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 615.939789][ C1] ? __pfx_process_timeout+0x10/0x10 [ 615.945075][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 615.950869][ C1] ? prepare_to_swait_event+0xf5/0x480 [ 615.956330][ C1] rcu_gp_fqs_loop+0x1ea/0xb00 [ 615.961097][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 615.966379][ C1] ? rcu_gp_init+0xc76/0x15a0 [ 615.971055][ C1] ? rcu_gp_cleanup+0x7c1/0xd90 [ 615.975905][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 615.981714][ C1] rcu_gp_kthread+0x270/0x380 [ 615.986387][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 615.991579][ C1] ? rcu_is_watching+0x12/0xc0 [ 615.996336][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 616.001547][ C1] ? __kthread_parkme+0x19e/0x250 [ 616.006602][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 616.011823][ C1] kthread+0x3c2/0x780 [ 616.015894][ C1] ? __pfx_kthread+0x10/0x10 [ 616.020473][ C1] ? __pfx_kthread+0x10/0x10 [ 616.025058][ C1] ? __pfx_kthread+0x10/0x10 [ 616.029634][ C1] ? __pfx_kthread+0x10/0x10 [ 616.034212][ C1] ? rcu_is_watching+0x12/0xc0 [ 616.038973][ C1] ? __pfx_kthread+0x10/0x10 [ 616.043562][ C1] ret_from_fork+0x45/0x80 [ 616.047971][ C1] ? __pfx_kthread+0x10/0x10 [ 616.052549][ C1] ret_from_fork_asm+0x1a/0x30 [ 616.057328][ C1]