last executing test programs: 9m33.903278674s ago: executing program 4 (id=322): syz_io_uring_setup(0x4736, &(0x7f0000000280)={0x0, 0x0, 0x10100, 0x3, 0x4a}, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), r0) sendmsg$TIPC_NL_BEARER_DISABLE(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="f7ee25bd7000fcdbdf250200000014000180050001"], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40050) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r2}, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$inet6(0xa, 0x3, 0x0) setsockopt$inet6_udp_int(r4, 0x11, 0x65, 0x0, 0x0) r5 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) r6 = socket(0x2, 0x3, 0x1) getsockopt(r6, 0xff, 0x100000000000001, 0x0, &(0x7f0000000040)) write$sysctl(r5, &(0x7f0000000580)='1\x00', 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000500)={@fallback=r5, 0x1d, 0x0, 0xa6e, &(0x7f0000000400), 0x0, 0x0, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000000c0)=[0x0], 0x0}, 0x40) ioctl$AUTOFS_DEV_IOCTL_EXPIRE(0xffffffffffffffff, 0xc018937c, &(0x7f0000000580)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x2}}, './file0\x00'}) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000880)=ANY=[@ANYRESOCT=r6, @ANYRES32=r7, @ANYBLOB="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", @ANYRES32, @ANYBLOB, @ANYRES64], 0x20) r8 = dup3(0xffffffffffffffff, 0xffffffffffffffff, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r9, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=r10, 0xfe66) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000003c0)={r8}, 0x4) r11 = openat$procfs(0xffffffffffffff9c, &(0x7f0000000040)='/proc/slabinfo\x00', 0x0, 0x0) mmap$IORING_OFF_SQES(&(0x7f00003fe000/0x1000)=nil, 0x1000, 0x3000003, 0x11, r11, 0x10000000) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff, 0x22, 0x0, @void}, 0x10) 9m32.683422921s ago: executing program 4 (id=326): r0 = syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x8002) r1 = open_tree(0xffffffffffffff9c, &(0x7f0000000100)='\x00', 0x89901) prlimit64(0x0, 0x7, &(0x7f0000000300), 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) prlimit64(r3, 0xf, &(0x7f00000001c0)={0x57}, &(0x7f0000000200)) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r5}, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0xf0b, 0x3, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {0xfff3, 0xffff}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_WASH={0x8}, @TCA_CAKE_TARGET={0x8, 0x8, 0x6}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x44045}, 0xc090) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) fspick(r1, &(0x7f0000000000)='.\x00', 0x0) r6 = io_uring_setup(0x1dde, &(0x7f0000000440)) r7 = gettid() rt_sigqueueinfo(r7, 0x21, &(0x7f00000002c0)) sched_getscheduler(r7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000007, 0x38011, r0, 0x1000) io_uring_register$IORING_UNREGISTER_PERSONALITY(r6, 0x1a, 0x20000028, 0x0) r8 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, &(0x7f0000000000)={'raw\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) 9m31.767893161s ago: executing program 4 (id=329): syz_usb_connect(0x0, 0x34, &(0x7f0000000100)=ANY=[@ANYBLOB="1201000092e1300833280102d52a0000000109022200010000000009040000000e010000082402010102100708", @ANYRESDEC], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) creat(&(0x7f00000002c0)='./file0\x00', 0x109) openat$sequencer(0xffffffffffffff9c, 0x0, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@mcast1, @in=@remote, 0xffff, 0x0, 0x0, 0x100, 0x2, 0x0, 0x0, 0x84}, {}, {0x0, 0x0, 0xfffffffffffffffe}}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in6=@dev={0xfe, 0x80, '\x00', 0xb}}}, 0xe8) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) getpid() r1 = socket$nl_route(0x10, 0x3, 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000d80), 0x8000, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x40002}, 0x4004040) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) truncate(&(0x7f0000000180)='./file0\x00', 0x8fff5) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r3, 0x0, 0x30, 0xe1515f8735398fb, @val=@uprobe_multi={&(0x7f0000000140)='./file0\x00', &(0x7f00000002c0)=[0x8fff5], 0x0, 0x0, 0x1f, 0x1}}, 0x3c) r4 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r5 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r5, 0xc008ae88, &(0x7f0000000040)=ANY=[@ANYBLOB="0100000000000f0003000040"]) 9m26.943881701s ago: executing program 4 (id=344): mkdir(&(0x7f0000000580)='./file0\x00', 0x0) mkdir(&(0x7f00000008c0)='./bus\x00', 0x0) mkdir(&(0x7f0000000400)='./file1\x00', 0xc0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000340), 0x0, &(0x7f0000000080)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) socket$packet(0x11, 0x2, 0x300) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000021c0)=ANY=[], 0x1224}, 0x1, 0x0, 0x0, 0x40}, 0x8080) recvmsg(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000ac0)=""/138, 0x1f}, {&(0x7f00000000c0)=""/231, 0xe7}], 0x2}, 0x0) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000080)={0x8}) 9m26.034243154s ago: executing program 4 (id=346): r0 = fsopen(&(0x7f0000000340)='autofs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r0, 0x1, &(0x7f0000000040)='uid', &(0x7f00000008c0)='0\x00#\x00\xd0\x00 \x00\x00qS\x00\x00\x00\x00\x00\x00\x00\x00$\xf6_\xbdI\x1c\xf2\xa9]\xcc\xe0*\xef\x01\x8d\x15\xd2h\x93\xc9\xb57\xc3\xea\\Eb\xf8\xe6,\xdf\xd4\xfae\x84\xcc\xd5\"d\xf0D-\x98\x9f\x81{\xfc$\xc4\xbcF\xf8\xc8\x8d\xcb\xb8\xf2\x1e\xe4\'U\xb3\xb8\xd3\xe6\xd7\x80=\x8a\xeb\n\xb8_\xe8\x96YY\xe3\xc7\xe6\xf28\x19\xa6\xa7\xfa\xdb\x1ce\xc1\x03\x86J\xb2fh\x19\xee#\xcc\x0f\xed\xfea\xdc\x88\xcb%bW\xd35\xda=\xac\x1d\xae\x93\xfd\'T6\x94\n\xa4\x9cU\xc4\fA~[\xbf\x8b\x90\xfe\x04\xe7U\xf3h\x81\x14l7u\x95\x96t\\\x0f\xef;\x03\xa4C\xbc(Vc!a\xc1\xe39\xc6b\x905\x1f\x03\x00\x00\x00\x00\x00\x00\xdf9\xaf5\xc8a:z\xe4\xcbag&67\x814\xf6}\xe10v6l\xd6,\x1e\xa0\xcc\xbf\xfdkm\b?\x839\x85N\x1c\xc1\xcb\xfc\x85\xd2\n\x02\"\xf2\x81g\x90\x01n%\x7f_\xe1.f>>\xa5\xfb\"\xab\xdb\x06\x12e\x14\x11~\x9a\bR-\x85\xc3\xa9\xe6\xf6R\x11\"\xc3\xc9\xfc\x14s X\xec\xdd\xc2qB\x85\xf0\xd7\x04\xdd<\x9ak\x00\x00\x00\x00\x00\x00\x00\n\xa72\xa3\xef^\xe7\x8f', 0x0) r1 = syz_open_dev$sndpcmc(&(0x7f0000000000), 0x1, 0x4000) ioctl$SNDRV_PCM_IOCTL_REWIND(r1, 0x40084146, &(0x7f0000000080)=0x2) 9m25.115734254s ago: executing program 4 (id=347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8c44279185abb", 0x53}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x30001, 0x0, [0x2, 0xfffffffffffffffb, 0x10001, 0x4, 0x6, 0x4c, 0x72d, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1201010000f7130870270c936a8d010203010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040961b090000000000000109022400cb6e0d6400ce9041067fd341010000400009f500fd0203000000092100000001"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x7, 0x8, {0x8, 0xd, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r8, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x40}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='zonefs\x00', 0x200403, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 9m24.849224315s ago: executing program 32 (id=347): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r1, 0x4020ae46, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x20002000, &(0x7f0000000000/0x2000)=nil}) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r2, &(0x7f0000000000/0x18000)=nil, &(0x7f00000014c0)=[@text64={0x40, &(0x7f0000001500)="267600410f01b00000000066b88e000f00d066420f3a14ce5736430f0164b107b805000000b9060000000f01c1f30f01330f015b7548b80c000000000000000f23d80f21f835800000000f23f8c44279185abb", 0x53}], 0x1, 0x43, 0x0, 0x0) ioctl$KVM_SET_GUEST_DEBUG(r2, 0x4048ae9b, &(0x7f0000000100)={0x30001, 0x0, [0x2, 0xfffffffffffffffb, 0x10001, 0x4, 0x6, 0x4c, 0x72d, 0x9]}) ioctl$KVM_RUN(r2, 0xae80, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000001140)=ANY=[@ANYBLOB="1201010000f7130870270c936a8d010203010902120001000000000904"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000080)=ANY=[@ANYBLOB="1201000000000040961b090000000000000109022400cb6e0d6400ce9041067fd341010000400009f500fd0203000000092100000001"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f00000000c0)={0x2c, &(0x7f0000000100)={0x0, 0x7, 0x8, {0x8, 0xd, "392cdaab4a73"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) fallocate(0xffffffffffffffff, 0x0, 0x400000000000000, 0x7) r5 = ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r6 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r6, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0x1}], 0x1) ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$IOMMU_TEST_OP_CREATE_ACCESS(0xffffffffffffffff, 0x3ba0, &(0x7f0000000340)={0x48, 0x5, 0x0, 0x0, 0xffffffffffffffff, 0x1}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000140)='net/ip6_tables_matches\x00') mkdir(&(0x7f0000000180)='./file0\x00', 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000001880)={'wg1\x00', 0x0}) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000fc0), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000280)={0x40, r8, 0xa29, 0x0, 0x0, {}, [@WGDEVICE_A_IFINDEX={0x8, 0x1, r7}, @WGDEVICE_A_PRIVATE_KEY={0x24}]}, 0x40}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r8, 0x1, 0x0, 0x0, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r7}]}, 0x40}}, 0x0) mount(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040)='zonefs\x00', 0x200403, 0x0) mount$overlay(0x0, &(0x7f0000000140)='./file0\x00', &(0x7f0000000180), 0x0, &(0x7f00000001c0)={[{@lowerdir={'lowerdir', 0x3d, './file0'}, 0x3a}], [], 0x2f}) 6m1.307958381s ago: executing program 5 (id=992): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/cpuinfo\x00', 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x12, 0xffffffffffffffff, 0xfffff000) socket$inet6(0xa, 0x5, 0x8e3) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prlimit64(0x0, 0xe, &(0x7f00000000c0)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) syz_open_dev$dri(0x0, 0x1f, 0x0) r2 = syz_open_dev$dri(&(0x7f0000000100), 0x1f, 0x0) ioctl$DRM_IOCTL_MODE_GETFB(r2, 0xc01c64ad, &(0x7f0000000180)) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = mmap$binder(&(0x7f00004c3000/0x2000)=nil, 0x2000, 0x1, 0x11, r0, 0x8) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000280)={0x48, 0x0, &(0x7f0000000140)=[@free_buffer={0x40086303, r3}, @decrefs={0x40046307, 0x1}, @increfs_done={0x40106308, 0x3}, @request_death={0x400c630e, 0x3}, @clear_death={0x400c630f, 0x2}], 0x0, 0x0, &(0x7f0000000240)}) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000040)={0x1f, 0x0, @any, 0xfffa}, 0xe) ioctl$X86_IOC_RDMSR_REGS(r1, 0xc02063a0, &(0x7f0000000100)=[0x1, 0x3, 0x3, 0x4, 0x7, 0xf953, 0x1]) pread64(r0, &(0x7f0000000000)=""/49, 0x31, 0x8) 6m0.089015077s ago: executing program 5 (id=995): r0 = socket(0x2a, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) getsockname$packet(r0, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000006c0)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r2, {0x0, 0x10}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400400}, 0x10000, 0x1, 0x7ff, 0x6, 0x3, 0x14, 0x1f, 0x18, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x4000005) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 5m59.995793529s ago: executing program 5 (id=996): prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x420000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r3 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$IP_VS_SO_SET_ADD(r3, 0x0, 0x482, &(0x7f0000000040)={0x84, @initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e26, 0x3, 'dh\x00', 0x1, 0x7, 0x4b}, 0x2c) r4 = io_uring_setup(0x177f, &(0x7f0000000140)) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, 0x0, 0x0) ioctl$AUTOFS_DEV_IOCTL_OPENMOUNT(0xffffffffffffffff, 0xc0189374, &(0x7f00000000c0)={{0x1, 0x1, 0x18, r2, {0x4}}, './file0\x00'}) writev(r6, &(0x7f0000001a40)=[{&(0x7f0000000300)="57f88e5e7d7ca8d453b6b27acebe9bff98297bcd068e797adb3faf5b66b7fe568270302a6ee18b0c6ed2634584390d278cf42cee51e755eb61e13a8f9dea51a85cbffe8b63d2e12384b686", 0x4b}, {&(0x7f0000000380)="e46861eec8a17fdfc0b61f7f40773822ece7d655448e499b75dfc022319b86ecd93345fc92bb829c7b182f8b21c7abd8330b387122d22f2e2ef35ed2022ede2c01451d", 0x43}, {&(0x7f0000000100)="53cf94cb0f5b6dbe7368c89d6fb3d293d10eacfd1d840727d493ecfb916f9963eee22a2ce2cad38d734fe9e65386e48274", 0x31}, {&(0x7f00000008c0)="cb64bbeb37b251baecf0560a5fc387eecce428aba30ce0ca", 0x18}, {&(0x7f00000009c0)="291a9e7651f97291e799d43841445f37bf59084d1200c8e8a6a2edaf616492b1c82dc925", 0x24}, {&(0x7f0000000a40)="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", 0xf00}], 0x6) close_range(r4, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_DELDEST(r3, 0x0, 0x488, &(0x7f0000000280)={{0x84, @empty, 0x4e20, 0x3, 'lblc\x00', 0x1d, 0x2, 0x2a}, {@broadcast, 0x4e21, 0x10000, 0xc24, 0x0, 0xfffffffb}}, 0x44) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x0) getsockopt$inet6_IPV6_XFRM_POLICY(r6, 0x29, 0x23, &(0x7f0000000440)={{{@in=@private, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@ipv4={""/10, ""/2, @multicast1}}, 0x0, @in=@loopback}}, &(0x7f0000000540)=0xe8) lsetxattr$security_capability(&(0x7f0000000240)='./file0\x00', &(0x7f0000000400), &(0x7f0000000580)=@v3={0x3000000, [{0x6, 0x8}, {0x6, 0x9}], r7}, 0x18, 0x3) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0xf8a, @mcast1}, 0x80, 0x0}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r8 = socket$inet6(0x10, 0x6, 0x7fff) sendto$inet6(r8, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) 5m59.112697852s ago: executing program 5 (id=999): sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) socket$rxrpc(0x21, 0x2, 0xa) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xd, &(0x7f0000000280)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x6, &(0x7f0000000300)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = syz_open_dev$usbfs(&(0x7f0000000240), 0x3, 0x202002) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fc040000060000000200"/28], 0x50) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$bind(&(0x7f0000000480)='./file0/file0\x00', &(0x7f0000000380)='./file0/file0/file1\x00', 0x0, 0x2125099, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) r5 = open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) move_mount(r5, &(0x7f0000000140)='.\x00', 0xffffffffffffff9c, &(0x7f0000000180)='./file0\x00', 0x0) mount$bind(&(0x7f0000000000)='./file0/../file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x1891009, 0x0) mount$bind(0x0, &(0x7f0000000140)='./file0/file0\x00', 0x0, 0x80000, 0x0) mount$bind(&(0x7f00000000c0)='.\x00', &(0x7f0000000080)='./file0/file0/file0\x00', 0x0, 0x80700a, 0x0) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) r6 = getpid() r7 = syz_pidfd_open(r6, 0x0) setns(r7, 0x24020000) umount2(&(0x7f0000000100)='./file0/../file0\x00', 0xe) ioctl$USBDEVFS_CONTROL(r4, 0xc0105500, 0x0) 5m53.259862957s ago: executing program 5 (id=1014): openat$vicodec1(0xffffffffffffff9c, &(0x7f0000001340), 0x2, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00', r0}, 0x10) mkdir(&(0x7f00000000c0)='./bus\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000a00)={[{@workdir={'workdir', 0x3d, './bus'}}, {@nfs_export_on}]}) r4 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000040)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0x7fc00100}]}) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, 0x0) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000240)={0x0}) ioctl$SECCOMP_IOCTL_NOTIF_RECV(r4, 0xc0502100, &(0x7f0000000400)) ioctl$SECCOMP_IOCTL_NOTIF_SEND(r4, 0xc0182101, &(0x7f00000003c0)={r5}) rmdir(&(0x7f0000000380)='./file0/../file0\x00') r6 = syz_open_procfs(0xffffffffffffffff, &(0x7f0000000040)='smaps\x00') madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) read$FUSE(r6, &(0x7f0000002680)={0x2020}, 0x2020) r7 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$KVM_CREATE_VM(r7, 0xae01, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r8, 0x29, 0x1b, 0x0, 0x0) syz_io_uring_setup(0x27e, &(0x7f0000000200)={0x0, 0xf683, 0x20, 0x2, 0x20f}, &(0x7f0000000100), 0x0) 5m50.428839956s ago: executing program 5 (id=1022): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@local]}]}}}], 0x18}}], 0x2, 0x0) 5m49.939905134s ago: executing program 33 (id=1022): syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000800)=[{{&(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @broadcast}}}], 0x20}}, {{&(0x7f00000000c0)={0x2, 0x4e21, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000100)=[@ip_retopts={{0x18, 0x0, 0x7, {[@lsrr={0x83, 0x7, 0x4, [@local]}]}}}], 0x18}}], 0x2, 0x0) 11.345746984s ago: executing program 0 (id=2020): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020100000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000dfff75390000000000000000850000007500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mount(0x0, &(0x7f0000000140)='./file0\x00', 0x0, 0x0, 0x0) open(&(0x7f0000000200)='./file0\x00', 0x0, 0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x15, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x140, 0x0) read$msr(r1, &(0x7f0000032680)=""/102400, 0x19000) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r2}, &(0x7f0000000000)) ioctl$IOCTL_VMCI_INIT_CONTEXT(0xffffffffffffffff, 0x7a0, &(0x7f0000000240)={@hyper}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r4, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000400)=[{}]}) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDFONTOP_GET(r5, 0x560f, &(0x7f0000000000)={0x1, 0x2, 0x12, 0x1b, 0x4, 0x0}) close(0xffffffffffffffff) bind$nfc_llcp(0xffffffffffffffff, &(0x7f0000000240)={0x27, 0x0, 0x0, 0x0, 0xd, 0x0, "d9298498abdba7f061bd1ca44c226af50a0e961711a07760760beefe11e88509de7f1939e8abff005597c8ef039a5be42200000000000800", 0x36}, 0x60) listen(0xffffffffffffffff, 0x0) io_uring_register$IORING_REGISTER_FILES_UPDATE(0xffffffffffffffff, 0x1e, 0x0, 0x0) 11.317473437s ago: executing program 2 (id=2021): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x9c, 0x32, 0x3f, 0x8, 0x4a5, 0x3003, 0x3ab2, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x2, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x28, 0xf0, 0xf6}}]}}]}}, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000200)={0x0, 0x3, 0x2, @string={0x2}}, 0x0, 0x0}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) 10.768063751s ago: executing program 0 (id=2022): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prlimit64(0x0, 0xe, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x4800}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000240)={0x0, 0xffffffffffffff4a, &(0x7f0000000200)={&(0x7f0000000080)={0x18, 0x16, 0xa01, 0x0, 0x0, {0xa, 0x0, 0x2}}, 0x78}}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) io_uring_setup(0x4612, &(0x7f0000000080)={0x0, 0xc401, 0x1000, 0x2, 0x1d0}) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x22) mount(0x0, &(0x7f0000000180)='./file0\x00', &(0x7f0000000080)='proc\x00', 0x0, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x3a) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x1c, 0x21, 0x1, 0x0, 0x25dfdbfe, {0x18}, [@typed={0x8, 0x1, 0x0, 0x0, @uid=0xffffffffffffffff}]}, 0x1c}}, 0x0) ioctl$FS_IOC_GETFSMAP(r1, 0xc0c0583b, &(0x7f0000000300)={0x0, 0x0, 0x4, 0x0, '\x00', [{0x6, 0xa, 0x8521, 0x2, 0x9, 0x8000000000000000}, {0x80000001, 0x1, 0x180000000000000, 0x10001, 0x1, 0x80}], ['\x00', '\x00', '\x00', '\x00']}) setsockopt$MRT6_ADD_MFC(r2, 0x29, 0x22, &(0x7f0000000080)={{0xa, 0x4e23, 0x103, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x8}, {0xa, 0x4e21, 0x0, @dev={0xfe, 0x80, '\x00', 0x25}, 0x20000}, 0x0, {[0x0, 0x5, 0x0, 0x0, 0x4, 0x1, 0x0, 0x100000]}}, 0x5c) r4 = openat(0xffffffffffffff9c, &(0x7f0000000000)='./file0\x00', 0x446140, 0x44) lseek(r4, 0x100, 0x0) getdents64(r4, &(0x7f0000000540)=""/66, 0x42) 8.718055147s ago: executing program 0 (id=2026): openat$ttyS3(0xffffffffffffff9c, 0x0, 0x200, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x50) socket$inet_dccp(0x2, 0x6, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000380)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000000)=0x7) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r0 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r0, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) openat$ptmx(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x194}}, 0x0) sendmsg$TIPC_NL_LINK_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)=ANY=[@ANYRES16=r3, @ANYBLOB="00000036e6ed4edb75fd02880000"], 0x14}}, 0x0) sendmsg$TIPC_NL_NET_SET(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000fdffffff0f00000020000708000000000000000008000200070000000c000400050000005c154a0673aaba53fdfd13aa10402840ded322dd9cb668b380d84fd642dd74965e6d748c0caef3934d6d04a64c7bf0c556a00f5822ea0b956246f09582692aed1cb83eadfd5d367dfdb288000c6ab4caecfa00"/136], 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) r6 = openat$ttyprintk(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSETD(r6, 0x5423, &(0x7f0000000040)=0x7) ioctl$TCSETA(r6, 0x8926, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x0, "4feda26323b172e0"}) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x4091, &(0x7f0000000080)={0xa, 0xfffc, 0x7ffe, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) sendto$inet6(r5, &(0x7f0000000040)='=', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @private0}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f0000000000)=[{&(0x7f0000000140)="480000001400190d09004beafd0d8c560a84476080ffe00600000003590000a2bc5603ca00000f7f89000000200000000101ff0000000309ff5bffff00c7e5ed5e00000000000000", 0x40b}], 0x1) mq_open(&(0x7f000084dff0)='!selinuxselinux\x00', 0x6e93ebbbcc0884f2, 0x0, 0x0) 8.605362277s ago: executing program 3 (id=2027): add_key$keyring(&(0x7f0000000080), 0x0, 0x0, 0x0, 0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) fcntl$getownex(0xffffffffffffffff, 0x10, &(0x7f0000000040)={0x0, 0x0}) ptrace$getenv(0x4201, r0, 0xfffffffffffffffd, &(0x7f0000000300)) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000180)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_io_uring_setup(0x10d, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x3}, &(0x7f0000000380)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_CONNECT={0x10, 0xa, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r4, 0x3f70, 0x0, 0x0, 0x0, 0x0) ioctl$IMADDTIMER(0xffffffffffffffff, 0x80044940, 0x0) prctl$PR_SET_SECUREBITS(0x1c, 0x25) openat$sndseq(0xffffffffffffff9c, 0x0, 0x101041) r7 = openat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x2240, 0x0) fcntl$setlease(r7, 0x400, 0x0) creat(&(0x7f0000000840)='./file1\x00', 0x0) syz_clone(0x0, 0x0, 0xfffffe11, 0x0, 0x0, 0x0) 7.667905423s ago: executing program 2 (id=2028): syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0xfffffff7, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) ftruncate(0xffffffffffffffff, 0x1000000000000000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f04ebbee6, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) socket$can_raw(0x1d, 0x3, 0x1) recvmmsg(r0, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$sndmidi(0x0, 0x2, 0x141101) r2 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$IP_VS_SO_GET_INFO(r2, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000100)=0xc) ioctl$DMA_HEAP_IOCTL_ALLOC(0xffffffffffffffff, 0xc0184800, &(0x7f0000000080)={0x10001}) mount(&(0x7f0000000580)=@sr0, &(0x7f0000000280)='./bus\x00', &(0x7f00000002c0)='v7\x00', 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000f8ff0000d300000a14000000000a010200000000000000000100000018000000160a0101000b0000000000000100000004000380140000001000010000000000000000000000000a"], 0x54}}, 0x0) lseek(0xffffffffffffffff, 0x9, 0x0) 6.73828786s ago: executing program 3 (id=2031): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r2, &(0x7f0000000000), 0xffffff6a) r3 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) sendfile(r3, r2, 0x0, 0xfe) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x1, 0x0, 0x4, {0x2, 0x0, 0x0, 0x0, 0xff, 0x0, 0xc8, 0x5}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWT_BPF_IN={0x10, 0x1, 0x0, 0x1, @LWT_BPF_PROG_NAME={0x9, 0x2, '-)!t\x00'}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = syz_genetlink_get_family_id$nfc(&(0x7f00000038c0), r0) sendmsg$NFC_CMD_LLC_SET_PARAMS(r0, &(0x7f0000003a00)={0x0, 0x0, &(0x7f00000039c0)={&(0x7f0000003940)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NFC_ATTR_LLC_PARAM_LTO={0x5, 0xf, 0x7}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x1001}, 0x0) syz_usb_connect(0x5, 0x3f, &(0x7f0000000080)=ANY=[@ANYRES32, @ANYRES64], 0x0) 6.648066776s ago: executing program 0 (id=2032): socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sched_setaffinity(0x0, 0x8, &(0x7f00000000c0)=0xa) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r1, 0x800448d2, &(0x7f0000000000)) 5.312114089s ago: executing program 0 (id=2034): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 5.305518006s ago: executing program 6 (id=2035): syz_usb_connect(0x0, 0x43, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x43, 0xa5, 0xaa, 0x40, 0x1b80, 0xe396, 0xa7b1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x68, 0x5b, 0xd1}}]}}]}}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000400)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x64440, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x13, 0x10, &(0x7f0000000580)=@framed={{0x18, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}, {0x7, 0x0, 0xb, 0x4}, {0x85, 0x0, 0x0, 0x95}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kfree\x00', r5}, 0x10) mount(0x0, &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0)='ramfs\x00', 0x0, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, 0x0, 0x0, 0xffffffffffffffff) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r6 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x38, 0x10, 0x401, 0x70bd26, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r6}]}}}]}, 0x38}}, 0x0) r7 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000000c0)={0x1, &(0x7f0000000040)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) close_range(r7, 0xffffffffffffffff, 0x0) 4.359994395s ago: executing program 1 (id=2037): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x4) socket(0x840000000002, 0x3, 0xfa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0xa, 0x0) getpeername$l2tp(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140000000250900010073797a30000000000900020073797a320000000014000000110001"], 0x74}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth1_to_team\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0xa1, 0xca, "75eb3b5059424559607110a90dafded66f55915c1bbd2e40b07c2f8ff6992e387072b899c793878d34286573073409469dfdf8c83b33285cf1e3dfc6606eb73e641ac699b6eb1837379866587327d9c26593200315e7f15fce09fd24efd5ac5ac8939ea663438fb3cdb8d13121e65c55f334a9c47a82e81e9f882eac73bc37e4f78b4e916cfec0a0738e88aad92dfdcb788b8e53949814a384c84223af879806b8ee75bd3d20b0cc090b5eb889a34bf9b5f1fb8f869437f39f26c8a546cef195b09786c2b111060b147f"}}) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}, {@access_client}], [], 0x6b}}) 3.361194769s ago: executing program 1 (id=2038): r0 = openat$vhost_vsock(0xffffffffffffff9c, &(0x7f00000015c0), 0x2, 0x0) ioctl$VHOST_SET_VRING_BASE(r0, 0xaf01, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000002a00dbdf"], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) read(r2, &(0x7f0000000000)=""/170, 0xaa) ioctl$VHOST_SET_VRING_KICK(r0, 0x4008af20, &(0x7f0000000300)={0x3}) openat$binderfs(0xffffffffffffff9c, &(0x7f0000000140)='./binderfs/binder1\x00', 0x0, 0x0) 3.293646175s ago: executing program 3 (id=2039): mkdir(&(0x7f0000000000)='./file0\x00', 0xa7) r0 = openat$dir(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0, 0x0) lseek(r0, 0xfffffffffffffffe, 0x1) r1 = syz_open_dev$video(&(0x7f0000000000), 0x3, 0x0) ioctl$VIDIOC_SUBSCRIBE_EVENT(r1, 0x4020565a, &(0x7f0000000040)={0x3, 0x980914, 0x3}) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000040), 0x8002, 0x0) pselect6(0x40, &(0x7f0000000100), 0x0, &(0x7f0000000240)={0x1f}, 0x0, 0x0) 3.117403573s ago: executing program 2 (id=2040): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000280)={0x1f, 0xffff, 0x3}, 0x6) io_setup(0x2, &(0x7f0000002400)=0x0) io_submit(r2, 0x1, &(0x7f0000000340)=[&(0x7f0000000100)={0x2000000000, 0x4, 0x0, 0x1, 0x0, r1, &(0x7f0000000040)="0200ffff0000", 0x6, 0x0, 0x0, 0x2}]) r3 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) r4 = io_uring_setup(0x6dba, &(0x7f0000000180)) r5 = syz_open_dev$cec(&(0x7f0000000080), 0x0, 0x0) ioctl$CEC_S_MODE(r5, 0x40046109, &(0x7f00000000c0)=0x32) close_range(r4, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x11, 0xe, &(0x7f00000022c0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000)={0x0, 0x2}, 0xffffffffffffff9d, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$KVM_SET_GSI_ROUTING(r3, 0x4008ae6a, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000028000004000000000000000000000008000000050000000600000000000000000000000000000000000000000000005d11cb4d604e0aa3eb0e7e5a6442d683b5a8366ea3865863f479df9e04f1436b19063b2389b4cef0786ba7071c8f6a994fdcd81ea8044bd9c76a4c9c83e669c060a71981610d8d659fee5ee899857f5311c84c2bbbd82faf7f3b0ee8b3f686046e9114ec7f988797a46ddb27ef5856959efb523fa99400310cb0e39c7d67ab3d7171647628c7a03be493d20296330c380de7f2dc8d254fb94bca5e7427626e9af9e3bcde29151d7213692a30580a4c859bfa1a559ba22d"]) 3.050490064s ago: executing program 3 (id=2041): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) (async) fsopen(&(0x7f0000002200)='ramfs\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) (async) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000040)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000180)=@abs, 0x6e) (async) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async, rerun: 64) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) accept(r2, &(0x7f0000000300)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, &(0x7f0000000440)=0x80) (async, rerun: 32) r4 = syz_open_procfs(0x0, &(0x7f0000000000)='map_files\x00') (rerun: 32) getdents64(r4, &(0x7f0000000180)=""/59, 0x3b) (async) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000000000000e02000000000000000000020000000000002e00"/56], 0x0, 0x38, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0900000008020000080400229000000000000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32=r5, @ANYBLOB="010000000200"/28], 0x48) (async, rerun: 64) mount$tmpfs(0x0, &(0x7f0000000540)='./cgroup\x00', &(0x7f0000000180), 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="75737271756f74615f696e6f64655f68617264743d34672c006dea91379ef568811c4da2c9dbd0c7581c48ebef2bf198c6fab0eec0beb0ef6c80e19050429057bb63a3d09479eb0517d0f0c4406b27c5e0159e21f2f15745003a8ab85343b2df"]) (rerun: 64) r6 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r6, &(0x7f0000000200)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x13f, 0x4}}, 0x20) write$RDMA_USER_CM_CMD_BIND(r6, &(0x7f0000000140)={0x14, 0x88, 0xfa00, {r7, 0x30, 0x0, @ib={0x1b, 0x0, 0x0, {'\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00W:\x00'}, 0x2000000000001005, 0x1000000010001}}}, 0x90) sendmsg$IPSET_CMD_SAVE(0xffffffffffffffff, 0x0, 0x40) syz_open_dev$video(&(0x7f0000000440), 0x8, 0x0) ioctl$VIDIOC_S_SELECTION(0xffffffffffffffff, 0xc040565f, &(0x7f0000000940)={0xa, 0x1, 0x4, {0x7, 0xfff, 0x10004, 0x9}}) (async, rerun: 32) r8 = socket$inet(0x2, 0x3, 0x2) (rerun: 32) setsockopt$inet_mreqsrc(r8, 0x0, 0x27, &(0x7f0000000040)={@multicast1, @local}, 0xc) (async) socket$kcm(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000000)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0x0, '.\x00'}}) 2.82309453s ago: executing program 0 (id=2042): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000300)=ANY=[@ANYBLOB="e987427fea2c4876bf53343eb1f072f5dfe6201655535c575c022fd75afcb145c234ab5bd16daf1584f488", @ANYRESOCT=0x0, @ANYRESOCT=0x0, @ANYRES8=0x0, @ANYRES32, @ANYRES8, @ANYBLOB="3da45b458a0a5b45bf5417c2fd2f08a4ee9f4bbbc866f318d962b91ce675f68116001ca5f447cb9531b56dd7a4b8d718d45da57b813c6209ba9ed4c0a90e9413bf2a11d6a2325f619b75f0346aec40bfe013eb288629e6dfa392bc5b0c84326e99a6b389785f270a4988498891f01309f7ae3d76e7e1cac0c5fdecac152e1fb09c6f6c26677e7fd68ca38f0142c0f208870c28785d524c9321cf9575fd73cd8c002735f9f6b855204749935373c82855078a90f76b17b4906a70aa7c82c0d06280757b76ddac2ece09f39409b4614e53c519b35d1b3313401dfa8a2b60d45e917febe0d41fe9519cb3cd02f28d20d3", @ANYRES16, @ANYRES64=0x0], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000002c0)={0x2c, &(0x7f0000000680)=ANY=[@ANYBLOB="400d0500000005224a20eeff60f4a6e91abe57ce1e26ec95c8b6669dc9fea5475b2c8e4d203b84655a9c89c311c7c43274dbfda1ede0da3c2e8ffa48caaaca123ad96738537fd0e72152d313da75a17cf7a518ae3fb6b1fc422ccd1d4f9ead7f1b506bbf8b8dd1fd04c6f81f44686a501b4936b9d85b77ed3190fabbae0ce557632cbf1debaebb9ebe92e779e25102e231178b9c420f217f45698b830cbfa18661313ea65ef613d3382dc672583ac77fe7b8038474cb4475c81edb4b1a0546e3f3ac8e560764c2aad3acfeec44eaae11005a20b43f535fcce18f6b1e4a245b1392c6e5033c9b4c878e31e3c38e88b1a8a95347d01ad1a4dd41"], 0x0, 0x0, 0x0, 0x0}, 0x0) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) prlimit64(0x0, 0x0, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='svcrdma_decode_rseg\x00', r2, 0x0, 0x9}, 0x18) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TLS_RX(r7, 0x6, 0x2, 0x0, 0x0) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r8, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r8, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) syz_usb_connect$uac1(0x1, 0x96, &(0x7f0000000480)=ANY=[@ANYBLOB="33ef9be590bebd73605c0fb9c6c758ec0172441f8034f3c596996108440ffe9e0dafc0505a4d0356b0a192dd79f4433dc332ba30874cc18f224ea21dcf3a7b6a3ac2141c1ac88f41cd80f333408e", @ANYRESOCT=r1, @ANYBLOB="1a8ba428b0bdbc0904ee6144313bc1a37833044c1bd012cf819f0abc2ad4eb8c4fca15a213f156ce07d6c6e6f365fa41ffac8cd5e38ba72e7b1a806a53fd4b3cfb7d8194a91efefe3fb61fb8627d8d8f5341c780d5692309c411683c82e7aa63713b4cf8a84f3da2bc15134255cedf9f4e87a740ce2750643ae4e32f58e66e1efaff39beadf262683787d5939922ff8e10953e6eaddb4378fde3af", @ANYBLOB="99cc26439c4b4e55c8ad2e97f94bd087cc41a783b1f66cf606c5261a59f4a4874cf34293ee94cd5c0e547bfa72b3be6e2159a374bc1b012aee5aff831a16544d7ee203aef7a6e90b0b0b0dc3eeb2eef02bfa35778a66eb67d9ad7914f9d082fcc04424beb62f8c894959275968193fed3f6c929ca2a44556b203d59a1f16b208e07a7b910861f196524f318a5aa991ea7ef921638a3fb3e994882e68713bd727d0e681be8ca0c00c12d0155bbd1227ae09cf6e6916274732965e264a00a801ea0f7da35d3876bd4b5004d384d665292efcd98222d7bc65cfb6bc2193a2b6d157109f92"], &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, 0x1}) sendto$inet6(r8, &(0x7f0000000200)="89", 0x1, 0x0, 0x0, 0x0) mkdir(&(0x7f0000000000)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) 2.819858366s ago: executing program 6 (id=2043): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) (async) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) ptrace$PTRACE_SECCOMP_GET_FILTER(0x420c, r0, 0xfffffffffffff800, &(0x7f0000000240)=""/115) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xffd, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000900)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='sched_switch\x00', r4}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000002c0)={{r3}, 0x0, 0x0}, 0x20) (async, rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000a40)=ANY=[], 0x0, 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 64) syz_emit_ethernet(0x4e, 0x0, 0x0) (async) r5 = socket$unix(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000006c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) (async) symlinkat(&(0x7f0000000000)='.\x00', 0xffffffffffffff9c, &(0x7f0000000140)='./file0\x00') mkdir(&(0x7f0000000300)='./bus\x00', 0x0) (async) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) (async) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) 2.475979916s ago: executing program 3 (id=2044): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x12, 0x5, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r1, &(0x7f0000000240), &(0x7f00000000c0)=@udp6=r0}, 0x20) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000000100)=[{{0x0, 0x0, 0x0}, 0x200}], 0x1, 0x40000002, 0x0) r2 = syz_open_dev$vim2m(&(0x7f0000000300), 0x1000000000001, 0x2) r3 = openat$selinux_policy(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r4 = memfd_secret(0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0xa, 0x13, r4, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000206010200000000000000000000000005000100070000000900020073797a310000000014000780050015000900000008001240000000000500040000000000050005001200000016000300686173683a6e65742c706f72742c6e6574"], 0x64}}, 0x0) ioctl$VIDIOC_S_EXT_CTRLS(r3, 0xc0205648, &(0x7f0000000100)={0xa20000, 0x3, 0x7, r4, 0x0, &(0x7f00000000c0)={0x9b0952, 0x8, '\x00', @value64=0x8d}}) ioctl$vim2m_VIDIOC_ENUM_FMT(r2, 0xc0405602, &(0x7f0000000040)={0x10, 0x1, 0x0, "08000054c10785000000a50f0000000000000000000000f1ffffff0000000010", 0x30385056}) syz_usb_connect(0x5, 0x2d, &(0x7f0000000000)=ANY=[@ANYBLOB="120100000cb768405e0483020b990102030109021b00010000000009040000015c292000090509"], 0x0) 2.416745585s ago: executing program 1 (id=2045): syz_io_uring_setup(0x239, &(0x7f0000000080)={0x0, 0x40009c0e, 0x8, 0x0, 0xfffffffd}, &(0x7f0000000000), &(0x7f00000001c0)) sched_setscheduler(0x0, 0x2, 0x0) getpid() prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(0xffffffffffffffff, 0xc0a85320, 0x0) openat$sequencer(0xffffffffffffff9c, 0x0, 0x81, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) get_robust_list(0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0500000081000000020000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000a9fd000000000000000007000000000000000000000000000000005506cd023edf3d775149a62cabe44dc54716668f5098c927a7a89aaaef4793abd181ac14e57e90641422df69b845df2648f6d535125de39decf08d93062d9d1b6ed4dcba7521242bc7b61fe3838aff9998669d43b06156785e56d5"], 0x50) 2.170666063s ago: executing program 6 (id=2046): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x8c, 0x30, 0x1, 0x0, 0x0, {}, [{0x78, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}, @m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x84042, 0x0) ioctl$BLKZEROOUT(r0, 0x127f, &(0x7f00000000c0)={0x10000, 0xe3bd}) (async) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) (async) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) (async) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) (async) sendmmsg$unix(r3, &(0x7f0000000000), 0x400000000000041, 0x0) (async) sched_setaffinity(r1, 0x8, &(0x7f0000000240)=0x2) (async) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) (async) fsconfig$FSCONFIG_CMD_CREATE(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) (async) r4 = fsmount(0xffffffffffffffff, 0x0, 0x1) openat(r4, &(0x7f0000000040)='./file3\x00', 0x143041, 0x0) ioctl$IOC_WATCH_QUEUE_SET_SIZE(r4, 0x5760, 0x0) (async) r5 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @local}, &(0x7f0000000380)=0x1c, 0x0) getsockopt$inet6_buf(r5, 0x29, 0x2e, 0x0, &(0x7f0000000440)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[], 0x48) (async) r6 = syz_open_dev$tty1(0xc, 0x4, 0x1) r7 = dup(r6) ioctl$TIOCL_SETSEL(r7, 0x541c, &(0x7f0000000100)={0x2, {0x2, 0x13d, 0x0, 0xd6e}}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r8, 0x800448d3, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r9, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0x4}], 0x1c) (async) sendto$inet6(r9, &(0x7f0000000040)='l', 0x1, 0x7ddfdbdfafa51cdd, &(0x7f0000000100)={0xa, 0x4e23, 0x2, @loopback, 0xffffffff}, 0x1c) 2.02044661s ago: executing program 1 (id=2047): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="38000000200001000000000000fdffff80"], 0x38}, 0x1, 0x0, 0x0, 0x20000020}, 0xc0c4) 2.018944591s ago: executing program 2 (id=2048): r0 = creat(&(0x7f0000000280)='./file0\x00', 0xecf86c37d53049cc) pipe2$9p(&(0x7f0000001900)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) write$P9_RVERSION(r2, &(0x7f0000000500)=ANY=[@ANYBLOB="1500000065ffff048000000800395032303030"], 0x15) r3 = dup(r2) write$FUSE_BMAP(r3, &(0x7f0000000100)={0x18}, 0x18) write$FUSE_NOTIFY_RETRIEVE(r3, &(0x7f00000000c0)={0x14c}, 0x137) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$KDSIGACCEPT(r4, 0x5607, 0x4) socket(0x840000000002, 0x3, 0xfa) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) socket$packet(0x11, 0xa, 0x300) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0xa, 0x0) getpeername$l2tp(r5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x15, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x84}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0xa7f10723c5e5444d}}, @ringbuf_output={{}, {}, {}, {0x4}, {0x6, 0x0, 0xa}, {}, {}, {0x85, 0x0, 0x0, 0x33}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[], 0x3c}}, 0x4000) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a4c000000060a0b04000000000000000002000000200004801c000180090001006d617371000000000c00028008000140000000250900010073797a30000000000900020073797a320000000014000000110001"], 0x74}}, 0x0) r7 = socket$inet(0x2, 0x4000000000000001, 0x0) sendto$inet(r7, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r8 = accept$inet(r0, &(0x7f0000000000)={0x2, 0x0, @initdev}, &(0x7f0000000080)=0x10) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000140)={'veth1_to_team\x00', &(0x7f0000000340)=@ethtool_regs={0x4, 0xa1, 0xca, "75eb3b5059424559607110a90dafded66f55915c1bbd2e40b07c2f8ff6992e387072b899c793878d34286573073409469dfdf8c83b33285cf1e3dfc6606eb73e641ac699b6eb1837379866587327d9c26593200315e7f15fce09fd24efd5ac5ac8939ea663438fb3cdb8d13121e65c55f334a9c47a82e81e9f882eac73bc37e4f78b4e916cfec0a0738e88aad92dfdcb788b8e53949814a384c84223af879806b8ee75bd3d20b0cc090b5eb889a34bf9b5f1fb8f869437f39f26c8a546cef195b09786c2b111060b147f"}}) ioctl$VT_ACTIVATE(r4, 0x5606, 0x4) mount$9p_fd(0x0, &(0x7f00000001c0)='./file0\x00', &(0x7f0000000040), 0x1000000, &(0x7f00000002c0)={'trans=fd,', {'rfdno', 0x3d, r1}, 0x2c, {'wfdno', 0x3d, r3}, 0x2c, {[{@access_uid}, {@access_client}], [], 0x6b}}) 1.936036215s ago: executing program 6 (id=2049): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4004000) openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000), 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) syz_genetlink_get_family_id$nl80211(0x0, r1) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) write$input_event(0xffffffffffffffff, &(0x7f0000000000)={{}, 0x1f, 0x6, 0x400088}, 0x18) r5 = getpid() prlimit64(r5, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x0, 0x0) read$msr(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYRESOCT=r0, @ANYRES64, @ANYRES8=r2, @ANYRES8=r4], 0x50) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f0000000040), 0x0, 0x0) ioctl$int_in(r0, 0x5454, 0x0) syz_open_dev$sndctrl(0x0, 0x9, 0x80000) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOMMU_VFIO_IOMMU_UNMAP_DMA(0xffffffffffffffff, 0x3b72, &(0x7f0000000380)=ANY=[@ANYBLOB="3600000001000000010000000000000008000000000000006e9822185b59e7a27159b188f9a941e719a38f06bdc01325989cc1caf420a5fe6be81565098ded86c0cb9b9a69f3fb8ab782933c050ea2c003de6f6db496246d892498fffeb6523f4c604392e82e7ec33ee045e04a04ff5a920a125412f3be4bf02ae02c693ca9340e3c9ece2c69855fd6b5cb07c7a02dbb409fb258caeb2e6e32a34b906bf4f760618e9661e18eb7aeccc8e14311d964fc6004fdbc01cb5acfc403c420947da98a7ca9f9160bc8cbfb024ba7c2e61560f960211f867376c61ca276752143231eb1b52ed2a67453c180d25d00ecba0dfd43e5"]) sendmsg$nl_generic(r6, 0x0, 0x0) recvmmsg(r6, 0x0, 0x0, 0x0, 0x0) syz_open_dev$sndctrl(&(0x7f00000000c0), 0x800000, 0x0) socket$tipc(0x1e, 0x2, 0x0) 1.930703418s ago: executing program 2 (id=2050): openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r0}, 0x18) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x8) r1 = getpid() sched_setscheduler(r1, 0x1, &(0x7f0000000000)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, 0x0, 0x0, 0x2, 0x0) lgetxattr(0x0, &(0x7f00000003c0)=ANY=[], 0x0, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0x0) add_key$user(&(0x7f0000000040), &(0x7f0000000400)={'syz', 0x3}, &(0x7f0000000440)="600036ae45290a3dec0447616c98edb8b5fc4e7c1b68cace9c43bf6f7e63df799ac18149d189f45083145b9495d07e4797a12046f37453291a328cd012946bcad8dbcd67d40614b157a15766d9ede9450848afe0b6dde1b49268ca0c2263eaff4d7c9f02743e66ac7c34e4ce07e6724c6ebf8d354224757c36659bbe7b1983d63c523b4b9b8ea36b1aaf9ef195f0288b08ccf2686fd594ec55ba45adeb8fed07d5ec3ed0282412905645544cc8150b955a01942f8a956fe14ce41261f61c9409f4915d8b6b3657f53dfd1f32a11c73849e3b6737ef935af6b7a98477d7eaffdba95a8b", 0xe3, r4) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_GET(r5, &(0x7f0000000240)={&(0x7f00000000c0), 0xc, &(0x7f0000000200)={&(0x7f00000001c0)=ANY=[@ANYBLOB="02000000061401002dbd70006afbdbdf25"], 0x10}, 0x1, 0x0, 0x0, 0x4081}, 0x804) close(0xffffffffffffffff) ioctl$AUTOFS_DEV_IOCTL_PROTOSUBVER(0xffffffffffffffff, 0xc0189373, &(0x7f0000000100)={{0x1, 0x1, 0x18, 0xffffffffffffffff, {0x7}}, './file0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000580)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_COMMENT={0x9, 0x1a, 'user\x00'}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 1.926277898s ago: executing program 1 (id=2051): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000001700)=0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) (async) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x3fffffffffffcb5, 0x2, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000ec0)=ANY=[@ANYBLOB="20010000100021040000000000000000fe8800000000000000000000000000016401010100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000000000000001000000000001000000002b00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000039000000000000000014000e00fe8800000000000000000000000000011c001700"/216], 0x120}}, 0x0) (async, rerun: 32) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) (rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00'}, 0x10) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x4e22}, 0x21) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000600)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r5 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r5}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$TIOCSTI(r6, 0x5412, &(0x7f0000000000)=0xfd) splice(r4, 0x0, r7, 0x0, 0xaf4, 0x0) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "1f891d5b00", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "dd6ed25e", "d4e9e1c90d89691c"}, 0x38) (async) recvmmsg(r4, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f00000003c0)=""/179, 0xb3}], 0x1}, 0x80}], 0x1, 0x100, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 1.61208086s ago: executing program 3 (id=2052): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x400000000000041, 0x0) sched_setaffinity(r0, 0x8, &(0x7f0000000240)=0x2) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0, r3}, 0x18) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0180000000171300883795c04a31ba377a1b2cc32b38d3740000ffffffffffffffff", 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 717.524024ms ago: executing program 1 (id=2053): r0 = fsopen(&(0x7f00000001c0)='ramfs\x00', 0x0) fsconfig$FSCONFIG_CMD_CREATE(r0, 0x6, 0x0, 0x0, 0x0) r1 = syz_open_procfs(0x0, &(0x7f0000019080)='net/ip_tables_targets\x00') r2 = openat$fuse(0xffffffffffffff9c, &(0x7f00000001c0), 0x2, 0x0) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r2, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) read$FUSE(r2, &(0x7f0000002140)={0x2020, 0x0, 0x0, 0x0, 0x0}, 0x2020) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000190c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000000000001000000000000000000000000000000c7c950d3569d2b5c9009c1c3837a0929b9216f1e3023c9e8c966eba6e2e7d59067ece8f83af6a21d1de8821c1c3466f96b6da11f8585ed7b49f0be2f641273041cb427c46fbf25707a22a8e9e076b62dfed9f1cdcfbd3958ee56161c95f8f138b593290ddbe9461b2bca322b4dba23025f30819e421c3de66bc3550333e88c7e20c35d6f436de9decef4a53598629fc99f621ba2edb3da7aa7b4685497ef08d53a38a0e72e57e2b24545b2d29c20f9a250a590a47ba431c05233132efbb0e60d75357e6bfaeb0a634158bde2109f28e1d0007b3a053e14763d288573f67ac4", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000002c0)={{r4, r4}, &(0x7f0000000300), &(0x7f0000000340)='%-010d \x00'}, 0x1c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000600), 0xffffffffffffffff) openat$ttyS3(0xffffffffffffff9c, &(0x7f00000000c0), 0x121000, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="ec000000", @ANYRES16=r6, @ANYBLOB="01000000000000000000010000000800050001000000140002007767310000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5420800050000000000900008808c00008024000100975c9d81c983c8209ee781254b899f8ed925ae9f0923c23c62f53c57cdbf691c640009801c000080060001000200000008000200ffffffff05000300030000001c000080060001000200000008000200ac141427050003"], 0xec}, 0x1, 0x0, 0x0, 0x4084}, 0x20000010) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000380)={r4, r4}, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) recvmmsg(r7, &(0x7f0000000200)=[{{&(0x7f0000000080)=@tipc=@name, 0x80, &(0x7f0000000180)=[{&(0x7f0000000100)=""/107, 0x6b}], 0x1, &(0x7f0000000540)=""/148, 0x94}, 0x7fffffff}], 0x1, 0x0, &(0x7f0000000600)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000104a5270b7357000000925e4a44", @ANYRES32, @ANYBLOB="0dfa130016000000240012000c00010000000000000000000c8002f60800000001180000080001"], 0x44}}, 0x80) sendmsg$NFT_MSG_GETRULE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x20, 0x19, 0xa, 0x3, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}}, 0x4010010) r8 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[@ANYBLOB="4800000010000507"], 0x48}, 0x1, 0x100000000000000}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000480)=@framed={{}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1234}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0xa0) syz_fuse_handle_req(r2, &(0x7f0000008400)="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", 0x2000, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x90, 0x0, 0x4, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x4000, 0x0, 0x6000, 0x2000, 0x0, r3, 0x800}}}, 0x0, 0x0, 0x0, 0x0, 0x0}) setregid(0xee01, r3) pread64(r1, &(0x7f0000000080)=""/102356, 0x18fd4, 0xc2a) socket$packet(0x11, 0x3, 0x300) r9 = syz_io_uring_setup(0x231, &(0x7f0000000140)={0x0, 0x0, 0x10100}, &(0x7f0000000000)=0x0, &(0x7f0000000100)=0x0) syz_io_uring_submit(r10, r11, &(0x7f00000009c0)=@IORING_OP_WRITE={0x17, 0x0, 0x0, @fd_index=0x3, 0x0, 0x0, 0xffffffffffffff31}) io_uring_enter(r9, 0x7a98, 0x0, 0x0, 0x0, 0x0) r12 = fsmount(r1, 0x0, 0x0) fchdir(r12) 676.499099ms ago: executing program 6 (id=2054): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x11, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@call={0x85, 0x0, 0x0, 0x50}, @snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x3, 0xff) sendto$inet6(r2, 0x0, 0xfffffffffffffd2f, 0x300, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast2}, 0x1c) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x8, 0x17, &(0x7f00000002c0)="0000ffffffffa000", &(0x7f00000007c0)=""/23, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r3 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r4 = dup(r3) write$6lowpan_enable(r4, &(0x7f0000000000)='0', 0xfffffd2c) syz_io_uring_setup(0x239, &(0x7f0000000740)={0x0, 0x1c2a, 0x10100, 0x0, 0x0, 0x0, r4}, &(0x7f0000000180), &(0x7f00000001c0)) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000000080)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r6}, 0x0, &(0x7f0000000040)}, 0x20) syz_emit_ethernet(0x7a, &(0x7f0000000340)={@local, @dev, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, '\x00', 0x44, 0x2f, 0x0, @remote, @private2, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1, 0x0, 0x1, 0x880b, 0x0, 0x3}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}, {}, {0x8, 0x88be, 0x3}, {0x8, 0x22eb, 0x3f000000}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x17, &(0x7f0000000480)=ANY=[@ANYBLOB="180000000600000000000000388a000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018feff002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000060000008500000006000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0xa40, 0x77, &(0x7f0000000180)=""/119, 0x41000, 0x22, '\x00', 0x0, 0x25, r5, 0x8, &(0x7f0000000540)={0x1, 0x4}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0x7, 0x5, 0xffffff05}, 0x10, 0x0, 0x0, 0x0, &(0x7f00000005c0)=[r0, r6], 0x0, 0x10, 0x8, @void, @value}, 0x94) r7 = openat$selinux_commit_pending_bools(0xffffffffffffff9c, &(0x7f00000006c0), 0x1, 0x0) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000700)={r5, r7, 0x4, r1}, 0x10) 248.251197ms ago: executing program 2 (id=2055): r0 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5ac, 0x8241, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f00000003c0)={0x2c, &(0x7f0000000100)=ANY=[@ANYBLOB='\x00\x00\b'], 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = syz_open_dev$hiddev(&(0x7f0000000580), 0x0, 0x0) ioctl$HIDIOCGUSAGE(r1, 0xc018480b, &(0x7f0000000080)={0x1, 0xffffffff, 0x3c, 0x0, 0xfffffc, 0x2}) r2 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x46d, 0xc295, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x4, 0x1, {0x22, 0x5}}, {{{0x9, 0x5, 0x81, 0x3, 0x200}}}}}]}}]}}, 0x0) syz_usb_control_io(r2, 0x0, 0x0) syz_usb_control_io$hid(r2, &(0x7f0000000240)={0x24, 0x0, 0x0, &(0x7f0000000080)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "0f584b70"}]}}, 0x0}, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000e40)=@raw={'raw\x00', 0x3c1, 0x3, 0x338, 0x0, 0x268, 0x33a, 0x0, 0x268, 0x2a0, 0x460, 0x460, 0x2a0, 0x460, 0xc, 0x0, {[{{@uncond, 0x0, 0xf0, 0x130, 0xd8000000, {0x9402}, [@common=@unspec=@limit={{0x48}, {0x28f5c, 0x4, 0xfff, 0xe94c, 0xe5, 0x200, 0x3}}]}, @common=@inet=@TCPOPTSTRIP={0x40}}, {{@ipv6={@private1, @empty, [], [], 'pim6reg0\x00', 'vxcan1\x00', {}, {}, 0x0, 0x0, 0x0, 0x1}, 0x0, 0xd0, 0x138, 0x0, {}, [@inet=@rpfilter={{0x28, 'rpfilter\x00', 0x2}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x398) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f0000000180)) r4 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r4, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102388, 0x18ff4) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) r6 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x0) read$FUSE(r6, &(0x7f0000000a40)={0x2020}, 0x2) syz_usb_connect$printer(0x2, 0x2d, &(0x7f0000000080)=ANY=[@ANYBLOB="12010102000000402545a8a440000102030109021b000101002005090400070107010200090501021000000000"], &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0}) r7 = add_key$keyring(&(0x7f0000000000), &(0x7f0000000040)={'syz', 0x2}, 0x0, 0x0, 0xfffffffffffffffe) getgroups(0x0, 0x0) keyctl$chown(0x4, r7, 0xee01, 0x0) keyctl$setperm(0x5, r7, 0x21081c22) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0xffffffffffffff30, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r2, @ANYRESOCT=r1, @ANYRES32=0x0, @ANYRESOCT=r4], 0xfc}}, 0x0) r8 = socket$inet6(0xa, 0x3, 0x1) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmmsg(r8, &(0x7f0000000480), 0x21, 0x0) 0s ago: executing program 6 (id=2056): r0 = socket$inet6(0xa, 0x5, 0x0) r1 = syz_open_pts(0xffffffffffffffff, 0x40000) ioctl$TIOCSETD(r1, 0x5423, &(0x7f0000000040)=0x1) setsockopt$inet6_int(r0, 0x29, 0x18, &(0x7f0000000680)=0x20000003, 0x4) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000400)={0x1, &(0x7f0000000380)=[{0x6, 0x0, 0x0, 0x7fffffff}]}) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@newqdisc={0x38, 0x24, 0xd0f, 0xfffffffd, 0x25dfdbfe, {0x60, 0x0, 0x0, r3, {0x0, 0x2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pie={{0x8}, {0xc, 0x2, [@TCA_PIE_BYTEMODE={0x8, 0x7, 0x1}]}}]}, 0x38}}, 0x0) clock_settime(0x0, &(0x7f0000000040)={0x77359400}) shutdown(r0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x8000000, @dev={0xfe, 0x80, '\x00', 0x2}, 0x6}, 0x1c) kernel console output (not intermixed with test programs): iommufd_mock0: Adding to iommu group 0 [ 504.085623][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.093809][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.103944][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.113447][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.121039][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.139265][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.139332][T11743] netlink: 'syz.1.1384': attribute type 1 has an invalid length. [ 504.147305][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.342078][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.601631][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.609227][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.623294][ T5940] usb 4-1: USB disconnect, device number 42 [ 504.670862][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.707541][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 504.716177][T11750] netlink: 'syz.2.1386': attribute type 12 has an invalid length. [ 504.728981][T11750] netlink: 'syz.2.1386': attribute type 29 has an invalid length. [ 504.738205][T11750] netlink: 148 bytes leftover after parsing attributes in process `syz.2.1386'. [ 504.752889][T11750] netlink: 59 bytes leftover after parsing attributes in process `syz.2.1386'. [ 504.849072][T11739] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 505.283831][ T5940] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 505.726980][ T29] audit: type=1400 audit(1740451384.476:1167): avc: denied { ioctl } for pid=11756 comm="syz.6.1388" path="socket:[35210]" dev="sockfs" ino=35210 ioctlcmd=0x8903 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 505.764058][T11760] FAULT_INJECTION: forcing a failure. [ 505.764058][T11760] name failslab, interval 1, probability 0, space 0, times 0 [ 505.776995][T11760] CPU: 1 UID: 0 PID: 11760 Comm: syz.0.1389 Not tainted 6.14.0-rc4-syzkaller #0 [ 505.777018][T11760] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 505.777027][T11760] Call Trace: [ 505.777033][T11760] [ 505.777040][T11760] dump_stack_lvl+0x16c/0x1f0 [ 505.777067][T11760] should_fail_ex+0x50a/0x650 [ 505.777094][T11760] ? fs_reclaim_acquire+0xae/0x150 [ 505.777120][T11760] ? tomoyo_encode2+0x100/0x3e0 [ 505.777141][T11760] should_failslab+0xc2/0x120 [ 505.777159][T11760] __kmalloc_noprof+0xcb/0x510 [ 505.777178][T11760] ? rcu_is_watching+0x12/0xc0 [ 505.777197][T11760] tomoyo_encode2+0x100/0x3e0 [ 505.777221][T11760] tomoyo_encode+0x29/0x50 [ 505.777241][T11760] tomoyo_realpath_from_path+0x19d/0x720 [ 505.777265][T11760] ? tomoyo_path_number_perm+0x235/0x590 [ 505.777287][T11760] tomoyo_path_number_perm+0x248/0x590 [ 505.777305][T11760] ? tomoyo_path_number_perm+0x235/0x590 [ 505.777326][T11760] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 505.777365][T11760] ? __pfx_lock_release+0x10/0x10 [ 505.777386][T11760] ? trace_lock_acquire+0x14e/0x1f0 [ 505.777407][T11760] ? lock_acquire+0x2f/0xb0 [ 505.777426][T11760] ? __fget_files+0x40/0x3a0 [ 505.777444][T11760] ? __fget_files+0x206/0x3a0 [ 505.777462][T11760] security_file_ioctl+0x9b/0x240 [ 505.777485][T11760] __x64_sys_ioctl+0xb7/0x200 [ 505.777508][T11760] do_syscall_64+0xcd/0x250 [ 505.777529][T11760] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 505.777551][T11760] RIP: 0033:0x7fd85058d169 [ 505.777564][T11760] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 505.777579][T11760] RSP: 002b:00007fd851483038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 505.777595][T11760] RAX: ffffffffffffffda RBX: 00007fd8507a5fa0 RCX: 00007fd85058d169 [ 505.777605][T11760] RDX: 0000400000000080 RSI: 000000000000890b RDI: 0000000000000003 [ 505.777615][T11760] RBP: 00007fd851483090 R08: 0000000000000000 R09: 0000000000000000 [ 505.777624][T11760] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 505.777634][T11760] R13: 0000000000000000 R14: 00007fd8507a5fa0 R15: 00007ffdb38eac58 [ 505.777655][T11760] [ 505.777677][T11760] ERROR: Out of memory at tomoyo_realpath_from_path. [ 505.816805][ T29] audit: type=1400 audit(1740451384.516:1168): avc: denied { ioctl } for pid=11756 comm="syz.6.1388" path="/dev/nvram" dev="devtmpfs" ino=623 ioctlcmd=0x8946 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 506.091501][ T3073] usb 7-1: new high-speed USB device number 10 using dummy_hcd [ 506.142540][ T5940] usb 3-1: Using ep0 maxpacket: 32 [ 506.149325][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has an invalid bInterval 128, changing to 11 [ 506.160808][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x9 has invalid wMaxPacketSize 0 [ 506.170923][ T5940] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xB7, changing to 0x87 [ 506.198475][ T5940] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x87 has an invalid bInterval 0, changing to 7 [ 506.432705][ T29] audit: type=1400 audit(1740451385.156:1169): avc: denied { ioctl } for pid=11768 comm="syz.1.1393" path="socket:[35222]" dev="sockfs" ino=35222 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 506.986585][ T3073] usb 7-1: Using ep0 maxpacket: 16 [ 507.022899][ T5940] usb 3-1: New USB device found, idVendor=0e6f, idProduct=582c, bcdDevice=31.68 [ 507.032157][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.040160][ T5940] usb 3-1: Product: syz [ 507.061384][ T5940] usb 3-1: Manufacturer: syz [ 507.066019][ T5940] usb 3-1: SerialNumber: syz [ 507.087395][ T3073] usb 7-1: config 1 contains an unexpected descriptor of type 0x2, skipping [ 507.111413][ T3073] usb 7-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 507.133214][ T5940] usb 3-1: config 0 descriptor?? [ 507.149191][ T5940] input: Generic X-Box pad as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input54 [ 507.151365][ T3073] usb 7-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 507.203531][ T3073] usb 7-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 507.206125][ T5179] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 507.215272][ T3073] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 507.424853][ T3073] usb 7-1: Product: syz [ 507.429828][ T3073] usb 7-1: Manufacturer: syz [ 507.435304][ T5179] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 507.449433][ T3073] usb 7-1: SerialNumber: syz [ 508.144628][ T29] audit: type=1400 audit(1740451386.266:1170): avc: denied { map } for pid=11773 comm="syz.3.1394" path="socket:[34630]" dev="sockfs" ino=34630 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 508.278966][ T5179] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 508.309747][T11753] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 508.310391][ T29] audit: type=1400 audit(1740451387.056:1171): avc: denied { name_bind } for pid=11752 comm="syz.2.1387" src=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=tcp_socket permissive=1 [ 508.318883][T11753] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 508.382240][ T5179] xpad 3-1:0.0: xpad_try_sending_next_out_packet - usb_submit_urb failed with result -90 [ 508.932582][ T3073] usb 7-1: 0:2 : does not exist [ 509.322982][ T9] usb 3-1: USB disconnect, device number 48 [ 510.849144][T11812] FAULT_INJECTION: forcing a failure. [ 510.849144][T11812] name failslab, interval 1, probability 0, space 0, times 0 [ 510.981738][T11812] CPU: 1 UID: 0 PID: 11812 Comm: syz.1.1402 Not tainted 6.14.0-rc4-syzkaller #0 [ 510.981765][T11812] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 510.981775][T11812] Call Trace: [ 510.981780][T11812] [ 510.981788][T11812] dump_stack_lvl+0x16c/0x1f0 [ 510.981813][T11812] should_fail_ex+0x50a/0x650 [ 510.981840][T11812] ? fs_reclaim_acquire+0xae/0x150 [ 510.981865][T11812] ? fib6_info_alloc+0x40/0x160 [ 510.981881][T11812] should_failslab+0xc2/0x120 [ 510.981902][T11812] __kmalloc_noprof+0xcb/0x510 [ 510.981926][T11812] fib6_info_alloc+0x40/0x160 [ 510.981944][T11812] ip6_route_info_create+0x337/0x1910 [ 510.981971][T11812] ? __pfx_ip6_route_info_create+0x10/0x10 [ 510.981994][T11812] ? cap_capable+0xb3/0x250 [ 510.982022][T11812] ip6_route_add+0x26/0x1c0 [ 510.982043][T11812] ipv6_route_ioctl+0x422/0x600 [ 510.982071][T11812] ? __pfx_ipv6_route_ioctl+0x10/0x10 [ 510.982093][T11812] ? find_held_lock+0x2d/0x110 [ 510.982122][T11812] ? __might_fault+0xe3/0x190 [ 510.982142][T11812] ? __might_fault+0xe3/0x190 [ 510.982169][T11812] inet6_ioctl+0x269/0x2b0 [ 510.982197][T11812] ? __pfx_inet6_ioctl+0x10/0x10 [ 510.982243][T11812] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 510.982271][T11812] sock_do_ioctl+0x116/0x280 [ 510.982284][T11812] ? __pfx_sock_do_ioctl+0x10/0x10 [ 510.982298][T11812] ? ioctl_has_perm.constprop.0.isra.0+0x2f2/0x450 [ 510.982316][T11812] ? ioctl_has_perm.constprop.0.isra.0+0x2fc/0x450 [ 510.982334][T11812] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 510.982353][T11812] sock_ioctl+0x228/0x6c0 [ 510.982365][T11812] ? __pfx_sock_ioctl+0x10/0x10 [ 510.982380][T11812] ? selinux_file_ioctl+0x180/0x270 [ 510.982395][T11812] ? selinux_file_ioctl+0xb4/0x270 [ 510.982412][T11812] ? __pfx_sock_ioctl+0x10/0x10 [ 510.982424][T11812] __x64_sys_ioctl+0x190/0x200 [ 510.982441][T11812] do_syscall_64+0xcd/0x250 [ 510.982455][T11812] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 510.982472][T11812] RIP: 0033:0x7f1d7fb8d169 [ 510.982483][T11812] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 510.982493][T11812] RSP: 002b:00007f1d80a13038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 510.982504][T11812] RAX: ffffffffffffffda RBX: 00007f1d7fda5fa0 RCX: 00007f1d7fb8d169 [ 510.982511][T11812] RDX: 0000400000000080 RSI: 000000000000890b RDI: 0000000000000003 [ 510.982517][T11812] RBP: 00007f1d80a13090 R08: 0000000000000000 R09: 0000000000000000 [ 510.982523][T11812] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 510.982529][T11812] R13: 0000000000000000 R14: 00007f1d7fda5fa0 R15: 00007ffd974842a8 [ 510.982543][T11812] [ 511.252884][ T9] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 511.533097][ T3073] usb 7-1: 1:0: failed to get current value for ch 0 (-22) [ 511.556699][ T3073] usb 7-1: USB disconnect, device number 10 [ 511.589889][ T9] usb 1-1: Using ep0 maxpacket: 8 [ 511.615744][ T9] usb 1-1: config index 0 descriptor too short (expected 65298, got 18) [ 511.640882][ T9] usb 1-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 511.656107][ T9] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 511.664963][ T9] usb 1-1: Product: syz [ 511.669147][ T9] usb 1-1: Manufacturer: syz [ 511.679110][ T9] usb 1-1: SerialNumber: syz [ 511.849321][ T9] usb 1-1: config 0 descriptor?? [ 511.897625][T11823] netlink: 'syz.6.1404': attribute type 1 has an invalid length. [ 511.908407][T11823] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1404'. [ 512.159159][ T5877] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 512.208197][ T29] audit: type=1400 audit(1740451390.956:1172): avc: denied { mount } for pid=11824 comm="syz.3.1405" name="/" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 512.246824][T11804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.260658][T11804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.272373][T11804] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 512.281082][T11804] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 512.321571][ T5877] usb 3-1: Using ep0 maxpacket: 8 [ 512.328995][ T29] audit: type=1400 audit(1740451391.076:1173): avc: denied { unmount } for pid=5827 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 512.341718][ T5877] usb 3-1: config 179 has an invalid interface number: 65 but max is 0 [ 512.395324][ T5877] usb 3-1: config 179 has no interface number 0 [ 512.407958][ T5877] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 512.419460][ T5877] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x8F has invalid maxpacket 1025, setting to 1024 [ 512.436716][ T5877] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 512.449034][ T5877] usb 3-1: config 179 interface 65 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 512.483099][ T3073] libceph: connect (1)[c::]:6789 error -101 [ 512.498355][ T3073] libceph: mon0 (1)[c::]:6789 connect error [ 512.547860][T11831] ceph: No mds server is up or the cluster is laggy [ 512.567182][ T3073] libceph: connect (1)[c::]:6789 error -101 [ 512.613420][ T3073] libceph: mon0 (1)[c::]:6789 connect error [ 512.771790][ T9] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 512.778509][ T5877] usb 3-1: config 179 interface 65 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 23 [ 512.797017][ T9] gspca_sunplus: reg_w_riv err -71 [ 512.802850][ T9] sunplus 1-1:0.0: probe with driver sunplus failed with error -71 [ 512.812389][ T5877] usb 3-1: New USB device found, idVendor=12ab, idProduct=90a3, bcdDevice=1e.eb [ 512.829939][ T9] usb 1-1: USB disconnect, device number 58 [ 512.839763][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 512.865248][ T29] audit: type=1400 audit(1740451391.606:1174): avc: denied { name_connect } for pid=11835 comm="syz.3.1408" dest=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=dccp_socket permissive=1 [ 512.901409][ T3073] libceph: connect (1)[c::]:6789 error -101 [ 512.943622][ T3073] libceph: mon0 (1)[c::]:6789 connect error [ 513.162928][T11822] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 514.051587][ T5905] usb 7-1: new high-speed USB device number 11 using dummy_hcd [ 514.191565][ T5905] usb 7-1: device descriptor read/64, error -71 [ 514.491659][ T5905] usb 7-1: new high-speed USB device number 12 using dummy_hcd [ 514.714500][ T3073] usb 3-1: USB disconnect, device number 49 [ 514.861687][ T5905] usb 7-1: device descriptor read/64, error -71 [ 514.972576][ T5905] usb usb7-port1: attempt power cycle [ 515.154535][T11872] dccp_invalid_packet: invalid packet type [ 515.311521][ T5905] usb 7-1: new high-speed USB device number 13 using dummy_hcd [ 515.343219][ T5905] usb 7-1: device descriptor read/8, error -71 [ 516.471458][ T3073] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 516.701519][ T5905] usb 7-1: new high-speed USB device number 14 using dummy_hcd [ 517.483332][ T3073] usb 1-1: Using ep0 maxpacket: 16 [ 517.489043][ T5905] usb 7-1: device descriptor read/8, error -71 [ 517.508272][ T3073] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 517.530098][ T3073] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 517.551703][ T3073] usb 1-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 517.577143][ T3073] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 517.591423][ T3073] usb 1-1: Product: syz [ 517.595740][ T3073] usb 1-1: Manufacturer: syz [ 517.600351][ T3073] usb 1-1: SerialNumber: syz [ 517.607369][ T3073] usb 1-1: config 0 descriptor?? [ 517.615201][ T5905] usb usb7-port1: unable to enumerate USB device [ 517.626406][ T3073] em28xx 1-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 517.637673][ T3073] em28xx 1-1:0.0: Audio interface 0 found (Vendor Class) [ 517.717768][ T29] audit: type=1400 audit(1740451396.466:1175): avc: denied { bind } for pid=11893 comm="syz.1.1425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 517.738621][T11894] 9pnet_virtio: no channels available for device ./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 517.758035][T11895] vhci_hcd vhci_hcd.0: pdev(6) rhport(0) sockfd(4) [ 517.855766][T11895] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 517.882118][T11895] vhci_hcd vhci_hcd.0: Device attached [ 518.425194][ T9] vhci_hcd: vhci_device speed not set [ 518.491550][ T9] usb 45-1: new full-speed USB device number 2 using vhci_hcd [ 518.868493][ T6521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 518.892665][ T6521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 518.967204][ T3073] em28xx 1-1:0.0: unknown em28xx chip ID (0) [ 518.973941][ T3073] em28xx 1-1:0.0: Config register raw data: 0xee [ 518.980304][ T3073] em28xx 1-1:0.0: I2S Audio (1 sample rate(s)) [ 518.986549][ T3073] em28xx 1-1:0.0: No AC97 audio processor [ 519.449134][T11923] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input55 [ 519.919621][ T29] audit: type=1400 audit(1740451398.666:1176): avc: denied { read } for pid=11927 comm="syz.3.1434" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 521.215843][ T4922] usb 1-1: USB disconnect, device number 59 [ 521.911480][ T5877] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 521.939949][T11896] vhci_hcd: connection reset by peer [ 522.771623][T11949] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1438'. [ 522.848057][T11949] sp0: Synchronizing with TNC [ 523.058892][T11945] [U] [ 523.597596][ T5877] usb 2-1: device descriptor read/all, error -71 [ 523.710783][ T6521] vhci_hcd: stop threads [ 523.780329][ T6521] vhci_hcd: release socket [ 523.808488][ T6521] vhci_hcd: disconnect device [ 524.008440][ T9] vhci_hcd: vhci_device speed not set [ 524.075538][ T5877] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 524.436318][ T5877] usb 2-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 524.582309][ T5877] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 524.756285][ T5877] usb 2-1: config 1 interface 1 altsetting 1 endpoint 0x3 has invalid wMaxPacketSize 0 [ 524.790515][ T5877] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 524.853329][ T5877] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 525.061207][ T5877] usb 2-1: Product: syz [ 525.065812][ T5877] usb 2-1: Manufacturer: syz [ 525.070421][ T5877] usb 2-1: SerialNumber: syz [ 525.078451][ T5877] hub 2-1:1.0: Invalid hub with more than one config or interface [ 525.087051][ T5877] hub 2-1:1.0: probe with driver hub failed with error -22 [ 525.569172][ T29] audit: type=1400 audit(1740451404.186:1177): avc: denied { setattr } for pid=11982 comm="syz.6.1449" name="kvm" dev="devtmpfs" ino=84 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:kvm_device_t tclass=chr_file permissive=1 [ 526.552117][T11999] xt_TCPMSS: Only works on TCP SYN packets [ 527.636605][ T5877] cdc_ncm 2-1:1.0: bind() failure [ 527.703708][T11999] bridge0: port 2(bridge_slave_1) entered disabled state [ 527.709818][ T5877] hub 2-1:1.1: probe with driver hub failed with error -71 [ 527.710977][T11999] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.724852][ T5877] cdc_ncm 2-1:1.1: probe with driver cdc_ncm failed with error -71 [ 527.779844][T11999] bridge0: entered allmulticast mode [ 527.851539][ T5905] usb 7-1: new full-speed USB device number 15 using dummy_hcd [ 527.869393][ T5877] cdc_mbim 2-1:1.1: probe with driver cdc_mbim failed with error -71 [ 527.878911][ T5877] usbtest 2-1:1.1: probe with driver usbtest failed with error -71 [ 527.893720][T12013] bond0: entered promiscuous mode [ 527.899679][T12013] bond_slave_0: entered promiscuous mode [ 527.909931][T12013] bond_slave_1: entered promiscuous mode [ 527.923068][ T5877] usb 2-1: USB disconnect, device number 63 [ 528.789824][ T5905] usb 7-1: config index 0 descriptor too short (expected 63524, got 36) [ 529.018729][T12013] batadv0: entered promiscuous mode [ 529.040109][T12013] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 529.086636][T12018] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1458'. [ 529.209885][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 188, changing to 4 [ 529.233363][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 21322, setting to 1023 [ 529.899990][T12022] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1458'. [ 529.973292][T12007] bridge_slave_1: left allmulticast mode [ 529.998823][T12007] bridge_slave_1: left promiscuous mode [ 530.005741][ T5905] usb 7-1: string descriptor 0 read error: -71 [ 530.014438][ T5905] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 530.075580][T12007] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.083761][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 530.105262][ T5905] usb 7-1: config 0 descriptor?? [ 530.110567][ T5905] usb 7-1: can't set config #0, error -71 [ 530.123932][T12007] bridge_slave_0: left allmulticast mode [ 530.129880][ T5905] usb 7-1: USB disconnect, device number 15 [ 530.136376][T12007] bridge_slave_0: left promiscuous mode [ 530.149826][T12007] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.265923][T12026] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1459'. [ 530.316011][ T5877] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 531.066011][T12027] Falling back ldisc for ttyprintk. [ 531.185332][ T5877] usb 4-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 531.220745][ T5877] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.232675][T12033] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1460'. [ 531.820181][ T5877] usb 4-1: Product: syz [ 531.848930][ T5877] usb 4-1: Manufacturer: syz [ 531.875772][ T5877] usb 4-1: SerialNumber: syz [ 531.935098][T12034] sp0: Synchronizing with TNC [ 532.063862][ T5877] usb 4-1: config 0 descriptor?? [ 532.112946][T12030] [U] [ 532.501288][T12042] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input56 [ 532.993492][T12047] PKCS7: Unknown OID: [4] 0.38.11253.6554(bad) [ 532.999723][T12047] PKCS7: Only support pkcs7_signedData type [ 534.170862][ T5877] usb 4-1: Firmware version (0.0) predates our first public release. [ 534.179039][ T5877] usb 4-1: Please update to version 0.2 or newer [ 536.272975][ T5940] usb 4-1: USB disconnect, device number 43 [ 537.261636][ T4922] usb 7-1: new full-speed USB device number 16 using dummy_hcd [ 537.298968][ T29] audit: type=1400 audit(1740451416.046:1178): avc: denied { getopt } for pid=12084 comm="syz.1.1471" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 537.663509][ T4922] usb 7-1: config index 0 descriptor too short (expected 63524, got 36) [ 537.675582][ T4922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 188, changing to 4 [ 537.813512][ T4922] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 21322, setting to 1023 [ 537.839813][ T4922] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 538.740754][ T4922] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.749831][ T4922] usb 7-1: Product: syz [ 538.786487][ T4922] usb 7-1: Manufacturer: syz [ 538.794137][ T4922] usb 7-1: SerialNumber: syz [ 538.805132][ T4922] usb 7-1: config 0 descriptor?? [ 538.823890][T12097] openvswitch: netlink: IPv6 tunnel dst address is zero [ 538.824721][ T4922] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 99, bLength 9, bSynchAddress 3d [ 540.261262][ T4922] usb 7-1: USB disconnect, device number 16 [ 542.311521][ T4922] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 542.498874][ T4922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 542.515693][ T4922] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 542.525804][ T4922] usb 1-1: New USB device found, idVendor=044f, idProduct=b65d, bcdDevice= 0.00 [ 542.540447][ T4922] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 542.550491][ T4922] usb 1-1: config 0 descriptor?? [ 543.165685][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 543.173330][ C0] raw-gadget.0 gadget.0: ignoring, device is not running [ 543.180519][ T4922] usbhid 1-1:0.0: can't add hid device: -32 [ 543.186589][ T4922] usbhid 1-1:0.0: probe with driver usbhid failed with error -32 [ 543.206871][ T4922] usb 1-1: USB disconnect, device number 60 [ 543.854760][ T5940] usb 7-1: new high-speed USB device number 17 using dummy_hcd [ 544.301412][ T5940] usb 7-1: Using ep0 maxpacket: 16 [ 544.333401][ T5940] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xC6, changing to 0x86 [ 544.374199][ T5940] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x86 has invalid wMaxPacketSize 0 [ 544.408894][ T5940] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x86 has invalid maxpacket 0 [ 544.429035][ T5940] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 225 [ 544.491304][ T5940] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 544.500455][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 545.005212][ T5940] usb 7-1: Product: syz [ 545.263725][ T5940] usb 7-1: Manufacturer: syz [ 545.276922][ T5940] usb 7-1: SerialNumber: syz [ 545.514039][ T5940] usb 7-1: config 0 descriptor?? [ 545.571812][T12139] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 545.641721][ C0] port100 7-1:0.0: NFC: Urb failure (status -71) [ 545.651154][ T5940] port100 7-1:0.0: NFC: Could not get supported command types [ 546.751434][ T5940] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 546.813441][ T9] usb 7-1: USB disconnect, device number 17 [ 546.901574][ T5940] usb 4-1: Using ep0 maxpacket: 8 [ 546.908125][ T5940] usb 4-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 547.778772][ T5940] usb 4-1: New USB device found, idVendor=04d8, idProduct=00df, bcdDevice= 0.00 [ 547.791457][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 547.802319][ T5940] usb 4-1: config 0 descriptor?? [ 548.794114][ T46] usb 4-1: USB disconnect, device number 44 [ 549.888318][T12195] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 549.918427][T12195] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 550.121593][ T5940] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 550.142260][ T9] IPVS: starting estimator thread 0... [ 550.231898][T12203] IPVS: using max 22 ests per chain, 52800 per kthread [ 550.302129][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 550.330433][ T5940] usb 3-1: New USB device found, idVendor=0763, idProduct=2081, bcdDevice=d0.ab [ 550.353237][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=228, SerialNumber=2 [ 550.388452][ T5940] usb 3-1: Product: syz [ 550.404298][ T5940] usb 3-1: Manufacturer: syz [ 550.428065][ T5940] usb 3-1: SerialNumber: syz [ 550.453454][ T5940] usb 3-1: config 0 descriptor?? [ 550.468760][ T29] audit: type=1400 audit(1740451429.206:1179): avc: denied { read } for pid=12204 comm="syz.0.1502" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 550.556492][ T29] audit: type=1400 audit(1740451429.306:1180): avc: denied { link } for pid=12204 comm="syz.0.1502" name="#15" dev="tmpfs" ino=1684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 550.611472][ T29] audit: type=1400 audit(1740451429.306:1181): avc: denied { rename } for pid=12204 comm="syz.0.1502" name="#16" dev="tmpfs" ino=1684 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 552.936402][ T29] audit: type=1400 audit(1740451431.686:1182): avc: denied { getopt } for pid=12239 comm="syz.3.1510" lport=36774 faddr=::ffff:172.20.255.187 fport=20002 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 553.066202][ T29] audit: type=1400 audit(1740451431.766:1183): avc: denied { remount } for pid=12238 comm="syz.1.1511" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fs_t tclass=filesystem permissive=1 [ 553.180769][ T29] audit: type=1400 audit(1740451431.926:1184): avc: denied { connect } for pid=12244 comm="syz.6.1512" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 553.353603][ T5940] usb 3-1: USB disconnect, device number 50 [ 553.801279][T12258] befs: (nbd6): No write support. Marking filesystem read-only [ 553.809099][T12258] syz.6.1515: attempt to access beyond end of device [ 553.809099][T12258] nbd6: rw=0, sector=0, nr_sectors = 2 limit=0 [ 554.671930][ T5905] usb 7-1: new high-speed USB device number 18 using dummy_hcd [ 554.701525][ T5940] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 554.881285][ T5940] usb 3-1: device descriptor read/64, error -71 [ 554.887765][ T5905] usb 7-1: Using ep0 maxpacket: 32 [ 554.917116][ T5905] usb 7-1: config 8 has an invalid interface number: 203 but max is 0 [ 554.939727][ T5905] usb 7-1: config 8 has an invalid descriptor of length 0, skipping remainder of the config [ 554.983299][ T5905] usb 7-1: config 8 has no interface number 0 [ 555.010306][ T5905] usb 7-1: config 8 interface 203 altsetting 1 has an endpoint descriptor with address 0x93, changing to 0x83 [ 555.107399][ T5905] usb 7-1: config 8 interface 203 altsetting 1 endpoint 0x83 has invalid wMaxPacketSize 0 [ 555.305724][ T5905] usb 7-1: config 8 interface 203 altsetting 1 bulk endpoint 0x83 has invalid maxpacket 0 [ 555.325519][ T5905] usb 7-1: config 8 interface 203 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 3 [ 555.348708][ T5905] usb 7-1: config 8 interface 203 has no altsetting 0 [ 555.365275][ T5905] usb 7-1: New USB device found, idVendor=054c, idProduct=06c3, bcdDevice=eb.7a [ 555.384556][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 555.392812][ T5905] usb 7-1: Product: syz [ 555.431503][ T5940] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 555.441467][ T5905] usb 7-1: Manufacturer: syz [ 555.446097][ T5905] usb 7-1: SerialNumber: syz [ 555.491658][ T29] audit: type=1400 audit(1740451434.236:1185): avc: denied { mount } for pid=12277 comm="syz.0.1521" name="/" dev="configfs" ino=1133 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 555.591601][ T5940] usb 3-1: device descriptor read/64, error -71 [ 555.667981][ T29] audit: type=1400 audit(1740451434.416:1186): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:configfs_t tclass=filesystem permissive=1 [ 555.709021][ T5940] usb usb3-port1: attempt power cycle [ 555.743910][ T5905] port100 7-1:8.203: NFC: Could not find bulk-in or bulk-out endpoint [ 555.755583][ T5905] usb 7-1: USB disconnect, device number 18 [ 556.221549][ T5877] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 556.431619][ T5877] usb 1-1: Using ep0 maxpacket: 32 [ 556.448124][ T5877] usb 1-1: config 0 interface 0 has no altsetting 0 [ 556.463164][ T5877] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 556.481020][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 556.489698][ T5877] usb 1-1: Product: syz [ 556.498892][ T5877] usb 1-1: Manufacturer: syz [ 556.504039][ T5877] usb 1-1: SerialNumber: syz [ 556.510401][ T5877] usb 1-1: config 0 descriptor?? [ 556.515869][ T5940] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 556.552216][ T5940] usb 3-1: device descriptor read/8, error -71 [ 556.639655][ T29] audit: type=1400 audit(1740451435.386:1187): avc: denied { getopt } for pid=12298 comm="syz.1.1526" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 556.772484][ T5877] gs_usb 1-1:0.0: Couldn't get device config: (err=-32) [ 556.789352][ T5877] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -32 [ 556.885879][T12308] netlink: 'syz.3.1525': attribute type 9 has an invalid length. [ 557.146340][T12286] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 557.400358][ T29] audit: type=1400 audit(1740451436.136:1188): avc: denied { map } for pid=12306 comm="syz.6.1527" path="socket:[36709]" dev="sockfs" ino=36709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 557.515257][T12286] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.543553][T12307] Bluetooth: MGMT ver 1.23 [ 557.580007][ T5940] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 557.618788][ T5940] usb 3-1: device descriptor read/8, error -71 [ 557.639638][ T29] audit: type=1400 audit(1740451436.266:1189): avc: denied { read } for pid=12306 comm="syz.6.1527" path="socket:[36709]" dev="sockfs" ino=36709 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 557.683316][ T5877] usb 1-1: USB disconnect, device number 61 [ 557.740250][ T5940] usb usb3-port1: unable to enumerate USB device [ 557.886902][ T29] audit: type=1400 audit(1740451436.636:1190): avc: denied { connect } for pid=12316 comm="syz.3.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 558.238057][ T29] audit: type=1400 audit(1740451436.906:1191): avc: denied { read } for pid=12316 comm="syz.3.1529" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 558.258790][ T29] audit: type=1400 audit(1740451436.936:1192): avc: denied { create } for pid=12327 comm="syz.6.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_nflog_socket permissive=1 [ 558.259673][T12332] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 558.599814][ T29] audit: type=1400 audit(1740451437.346:1193): avc: denied { accept } for pid=12327 comm="syz.6.1532" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 558.704611][ T5940] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 559.223263][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 559.229883][ T5940] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 559.238210][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 559.281059][ T5940] usb 3-1: config 0 has no interface number 0 [ 559.287703][ T5940] usb 3-1: config 0 interface 49 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 559.674377][ T5940] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 559.683820][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 559.694412][ T5940] usb 3-1: Product: syz [ 559.712700][ T5940] usb 3-1: Manufacturer: syz [ 559.734097][ T5940] usb 3-1: SerialNumber: syz [ 559.749594][ T5940] usb 3-1: config 0 descriptor?? [ 559.767173][ T29] audit: type=1400 audit(1740451438.516:1194): avc: denied { ioctl } for pid=12363 comm="syz.3.1537" path="socket:[36780]" dev="sockfs" ino=36780 ioctlcmd=0xae80 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 559.804036][ T5940] qmi_wwan 3-1:0.49: probe with driver qmi_wwan failed with error -22 [ 560.332957][ T5877] usb 3-1: USB disconnect, device number 55 [ 561.351867][ T5940] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 561.883275][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 561.916748][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 561.929455][ T5940] usb 4-1: New USB device found, idVendor=10c4, idProduct=ea90, bcdDevice= 0.00 [ 562.029855][ T5940] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 562.330479][ T5940] usb 4-1: config 0 descriptor?? [ 562.481365][T12399] netlink: 'syz.6.1548': attribute type 21 has an invalid length. [ 562.936104][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 563.245320][ T5940] cp2112 0003:10C4:EA90.001B: unknown main item tag 0x0 [ 563.283797][ T5940] cp2112 0003:10C4:EA90.001B: hidraw0: USB HID v0.00 Device [HID 10c4:ea90] on usb-dummy_hcd.3-1/input0 [ 563.796168][ T5940] cp2112 0003:10C4:EA90.001B: error requesting version [ 563.813451][ T5940] cp2112 0003:10C4:EA90.001B: probe with driver cp2112 failed with error -71 [ 564.003940][ T5940] usb 4-1: USB disconnect, device number 45 [ 564.561138][T12416] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1552'. [ 564.634816][T12417] sp0: Synchronizing with TNC [ 565.340907][T12413] [U] [ 566.706336][T12431] SELinux: policydb magic number 0x0 does not match expected magic number 0xf97cff8c [ 566.716735][T12431] SELinux: failed to load policy [ 567.239233][ T29] audit: type=1400 audit(1740451445.456:1195): avc: denied { load_policy } for pid=12420 comm="syz.3.1553" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 567.341706][T12430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1555'. [ 567.351555][T12430] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1555'. [ 567.903302][ T29] audit: type=1400 audit(1740451446.646:1196): avc: denied { read } for pid=12435 comm="syz.2.1558" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 567.983345][T12437] netlink: 'syz.2.1558': attribute type 10 has an invalid length. [ 568.042247][T12437] team0: Device hsr_slave_0 failed to register rx_handler [ 568.539254][ T29] audit: type=1400 audit(1740451447.256:1197): avc: denied { write } for pid=12448 comm="syz.3.1562" name="hwrng" dev="devtmpfs" ino=83 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:random_device_t tclass=chr_file permissive=1 [ 568.657475][ T29] audit: type=1400 audit(1740451447.276:1198): avc: denied { shutdown } for pid=12448 comm="syz.3.1562" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 568.844059][ T29] audit: type=1400 audit(1740451447.596:1199): avc: denied { map } for pid=12453 comm="syz.3.1563" path="socket:[38108]" dev="sockfs" ino=38108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 568.966497][ T29] audit: type=1400 audit(1740451447.596:1200): avc: denied { read } for pid=12453 comm="syz.3.1563" path="socket:[38108]" dev="sockfs" ino=38108 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 569.151586][ T29] audit: type=1400 audit(1740451447.626:1201): avc: denied { ioctl } for pid=12453 comm="syz.3.1563" path="/dev/fb0" dev="devtmpfs" ino=629 ioctlcmd=0x4601 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 569.200293][ T29] audit: type=1400 audit(1740451447.686:1202): avc: denied { map } for pid=12453 comm="syz.3.1563" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 570.343066][T12471] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1568'. [ 570.461732][ T46] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 570.672454][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 570.732777][ T46] usb 1-1: New USB device found, idVendor=2137, idProduct=0001, bcdDevice=2a.35 [ 571.145453][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 571.241848][ T46] usb 1-1: Product: syz [ 571.246204][ T46] usb 1-1: Manufacturer: syz [ 571.250911][ T46] usb 1-1: SerialNumber: syz [ 571.269583][ T46] usb 1-1: config 0 descriptor?? [ 571.278297][ T46] as10x_usb: device has been detected [ 571.285190][ T46] dvbdev: DVB: registering new adapter (Sky IT Digital Key (green led)) [ 571.319345][ T46] usb 1-1: DVB: registering adapter 1 frontend 0 (Sky IT Digital Key (green led))... [ 571.525340][T12487] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1573'. [ 571.837290][T12492] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1573'. [ 572.567151][ T46] as10x_usb: error during firmware upload part1 [ 572.576493][ T46] Registered device Sky IT Digital Key (green led) [ 572.888365][T12485] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input58 [ 573.050301][T12484] tty tty33: ldisc open failed (-12), clearing slot 32 [ 573.057569][T12491] tty tty1: ldisc open failed (-12), clearing slot 0 [ 573.174378][T12501] random: crng reseeded on system resumption [ 573.226742][ T29] audit: type=1400 audit(1740451451.976:1203): avc: denied { listen } for pid=12500 comm="syz.1.1575" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 573.265346][ T46] libceph: connect (1)[c::]:6789 error -101 [ 573.301681][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 573.438283][ T29] audit: type=1400 audit(1740451452.156:1204): avc: denied { ioctl } for pid=12500 comm="syz.1.1575" path="socket:[38152]" dev="sockfs" ino=38152 ioctlcmd=0x89e0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 573.570799][T12502] ceph: No mds server is up or the cluster is laggy [ 573.574501][ T5940] usb 1-1: USB disconnect, device number 62 [ 573.579442][ T46] libceph: connect (1)[c::]:6789 error -101 [ 573.589804][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 573.638491][ T5940] Unregistered device Sky IT Digital Key (green led) [ 573.924100][ T46] usb 7-1: new high-speed USB device number 19 using dummy_hcd [ 574.321017][ T46] usb 7-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 574.347943][ T5940] as10x_usb: device has been disconnected [ 574.378007][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 255, changing to 11 [ 574.420906][T12512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1574'. [ 574.430207][ T46] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 574.464595][ T46] usb 7-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 21 [ 575.451464][ T46] usb 7-1: New USB device found, idVendor=047f, idProduct=ffff, bcdDevice= 0.00 [ 575.460553][ T46] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 575.471274][ T46] usb 7-1: config 0 descriptor?? [ 575.478939][T12510] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 575.601631][ T5940] usb 1-1: new low-speed USB device number 63 using dummy_hcd [ 575.744440][ T5940] usb 1-1: device descriptor read/64, error -71 [ 576.091519][ T5940] usb 1-1: new low-speed USB device number 64 using dummy_hcd [ 576.108603][ T46] plantronics 0003:047F:FFFF.001C: unknown main item tag 0xd [ 576.117672][ T46] plantronics 0003:047F:FFFF.001C: No inputs registered, leaving [ 576.127396][ T46] plantronics 0003:047F:FFFF.001C: hiddev0,hidraw0: USB HID v0.40 Device [HID 047f:ffff] on usb-dummy_hcd.6-1/input0 [ 577.121272][ T5940] usb 1-1: device descriptor read/64, error -71 [ 577.275384][ T5940] usb usb1-port1: attempt power cycle [ 577.401445][ T9] usb 7-1: reset high-speed USB device number 19 using dummy_hcd [ 577.681739][ T5940] usb 1-1: new low-speed USB device number 65 using dummy_hcd [ 577.883589][ T5940] usb 1-1: device descriptor read/8, error -71 [ 577.952568][T12553] IPv6: NLM_F_CREATE should be specified when creating new route [ 577.973424][T12553] netlink: 1 bytes leftover after parsing attributes in process `syz.2.1587'. [ 579.913548][ T5877] usb 7-1: USB disconnect, device number 19 [ 580.107470][ T5940] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 580.150551][T12583] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1596'. [ 580.263173][ T5940] usb 3-1: Using ep0 maxpacket: 16 [ 580.280351][ T5940] usb 3-1: config 0 has an invalid interface number: 49 but max is 0 [ 580.434487][T12587] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1596'. [ 581.097296][ T5940] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 581.230182][ T5940] usb 3-1: config 0 has no interface number 0 [ 581.236797][ T5940] usb 3-1: config 0 interface 49 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 581.263580][ T5940] usb 3-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 581.292481][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 581.453357][ T5940] usb 3-1: Product: syz [ 581.457557][ T5940] usb 3-1: Manufacturer: syz [ 581.471866][ T5940] usb 3-1: SerialNumber: syz [ 581.478287][ T5940] usb 3-1: config 0 descriptor?? [ 581.485349][ T5940] qmi_wwan 3-1:0.49: probe with driver qmi_wwan failed with error -22 [ 581.711958][ T5940] usb 3-1: USB disconnect, device number 56 [ 583.458536][ T29] audit: type=1400 audit(1740451462.206:1205): avc: denied { write } for pid=12619 comm="syz.6.1605" laddr=172.20.20.170 lport=45742 faddr=172.20.20.170 fport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 584.183972][T12620] ALSA: seq fatal error: cannot create timer (-19) [ 585.439426][ T29] audit: type=1400 audit(1740451464.136:1206): avc: denied { connect } for pid=12650 comm="syz.6.1614" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 585.511610][T12651] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input60 [ 585.535518][ T29] audit: type=1400 audit(1740451464.226:1207): avc: denied { ioctl } for pid=12650 comm="syz.6.1614" path="socket:[39289]" dev="sockfs" ino=39289 ioctlcmd=0x6104 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 585.718726][ T55] Bluetooth: Wrong link type (-22) [ 587.442668][T12673] netlink: 'syz.1.1618': attribute type 1 has an invalid length. [ 587.743258][ T46] libceph: connect (1)[c::]:6789 error -101 [ 587.749344][ T46] libceph: mon0 (1)[c::]:6789 connect error [ 587.778105][T12673] 8021q: adding VLAN 0 to HW filter on device bond2 [ 587.821638][ T29] audit: type=1400 audit(1740451466.576:1208): avc: denied { read } for pid=12677 comm="syz.2.1619" lport=58 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rawip_socket permissive=1 [ 588.054168][ T5905] libceph: connect (1)[c::]:6789 error -101 [ 588.079347][ T5905] libceph: mon0 (1)[c::]:6789 connect error [ 588.089899][T12675] ceph: No mds server is up or the cluster is laggy [ 589.121841][ T46] usb 4-1: new high-speed USB device number 46 using dummy_hcd [ 590.121648][ T46] usb 4-1: Using ep0 maxpacket: 32 [ 590.136718][ T46] usb 4-1: config 0 has no interfaces? [ 590.149504][ T46] usb 4-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 590.177445][ T46] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 590.360801][T12723] loop2: detected capacity change from 0 to 7 [ 590.384545][T12723] Dev loop2: unable to read RDB block 7 [ 590.391053][T12723] loop2: unable to read partition table [ 590.391954][ T46] usb 4-1: config 0 descriptor?? [ 590.405339][T12723] loop2: partition table beyond EOD, truncated [ 590.412140][T12723] loop_reread_partitions: partition scan of loop2 (被x ) failed (rc=-5) [ 590.663572][T12701] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1623'. [ 591.169970][ T29] audit: type=1400 audit(1740451469.916:1209): avc: denied { getopt } for pid=12716 comm="syz.6.1628" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 591.784141][T12746] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1634'. [ 591.823720][T12746] sp0: Synchronizing with TNC [ 592.624247][T12744] [U] [ 593.341395][ T5905] usb 4-1: USB disconnect, device number 46 [ 594.013669][T12765] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1638'. [ 594.027178][T12767] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1639'. [ 594.045822][T12765] input: syz0 as /devices/virtual/input/input61 [ 594.101587][ T5905] usb 7-1: new high-speed USB device number 20 using dummy_hcd [ 594.144420][T12771] pim6reg1: entered promiscuous mode [ 594.151050][T12771] pim6reg1: entered allmulticast mode [ 594.261804][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 594.263691][T12779] PKCS8: Unsupported PKCS#8 version [ 594.268265][ T5905] usb 7-1: config 0 has an invalid interface number: 49 but max is 0 [ 594.283785][T12779] SET target dimension over the limit! [ 594.310667][ T5905] usb 7-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 594.327663][ T5905] usb 7-1: config 0 has no interface number 0 [ 594.334248][ T5905] usb 7-1: config 0 interface 49 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 594.356565][ T5905] usb 7-1: New USB device found, idVendor=03f0, idProduct=581d, bcdDevice=76.b7 [ 594.368060][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 594.383310][ T5905] usb 7-1: Product: syz [ 594.387558][ T5905] usb 7-1: Manufacturer: syz [ 594.392651][ T5905] usb 7-1: SerialNumber: syz [ 594.399149][ T5905] usb 7-1: config 0 descriptor?? [ 594.406777][ T5905] qmi_wwan 7-1:0.49: probe with driver qmi_wwan failed with error -22 [ 594.736155][ T5905] usb 7-1: USB disconnect, device number 20 [ 595.146013][ T29] audit: type=1400 audit(1740451473.896:1210): avc: denied { create } for pid=12787 comm="syz.0.1645" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 595.167315][ T29] audit: type=1400 audit(1740451473.896:1211): avc: denied { write } for pid=12787 comm="syz.0.1645" name="file0" dev="tmpfs" ino=1863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 595.200067][ T29] audit: type=1400 audit(1740451473.896:1212): avc: denied { open } for pid=12787 comm="syz.0.1645" path="/345/file0" dev="tmpfs" ino=1863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 595.343591][ T29] audit: type=1400 audit(1740451473.896:1213): avc: denied { ioctl } for pid=12787 comm="syz.0.1645" path="/345/file0" dev="tmpfs" ino=1863 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 595.826942][ T29] audit: type=1400 audit(1740451474.576:1214): avc: denied { setopt } for pid=12791 comm="syz.6.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 595.869026][ T29] audit: type=1400 audit(1740451474.596:1215): avc: denied { create } for pid=12791 comm="syz.6.1646" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=atmsvc_socket permissive=1 [ 595.909881][T12789] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 595.959763][ T29] audit: type=1400 audit(1740451474.706:1216): avc: denied { unlink } for pid=5832 comm="syz-executor" name="file0" dev="tmpfs" ino=1863 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 596.185928][T12801] netlink: 'syz.0.1649': attribute type 1 has an invalid length. [ 596.394109][T12800] 8021q: adding VLAN 0 to HW filter on device bond3 [ 596.429664][T12804] veth3: entered promiscuous mode [ 596.481756][T12800] overlayfs: overlapping lowerdir path [ 596.491149][T12804] bond3: (slave veth3): Enslaving as a backup interface with a down link [ 596.769626][T12811] netlink: 14 bytes leftover after parsing attributes in process `syz.0.1651'. [ 596.785225][ T29] audit: type=1400 audit(1740451475.516:1217): avc: denied { listen } for pid=12809 comm="syz.0.1651" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 597.121407][ T5905] usb 7-1: new high-speed USB device number 21 using dummy_hcd [ 597.138890][T12811] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 597.148920][T12811] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 597.159044][T12811] bond0 (unregistering): (slave bond1): Releasing backup interface [ 597.182606][T12811] bond0 (unregistering): Released all slaves [ 597.371820][ T5905] usb 7-1: Using ep0 maxpacket: 16 [ 597.403736][T12817] openvswitch: netlink: Multiple metadata blocks provided [ 597.497351][ T5905] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xF has invalid maxpacket 33437, setting to 1024 [ 597.557544][ T5905] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0xF has invalid maxpacket 1024 [ 597.657141][ T5905] usb 7-1: config 0 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 14 [ 597.707342][ T5905] usb 7-1: New USB device found, idVendor=054c, idProduct=06c1, bcdDevice=c2.87 [ 597.770768][ T5905] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 597.860042][ T5905] usb 7-1: Product: syz [ 597.883467][ T5905] usb 7-1: Manufacturer: syz [ 597.939076][ T5905] usb 7-1: SerialNumber: syz [ 597.988247][T12826] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input62 [ 598.003610][ T5905] usb 7-1: config 0 descriptor?? [ 598.022315][T12807] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 598.029528][T12807] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 598.037881][ C1] port100 7-1:0.0: NFC: Urb failure (status -71) [ 598.044287][ C1] port100 7-1:0.0: NFC: Urb failure (status -71) [ 598.061692][ T5905] port100 7-1:0.0: NFC: Could not get supported command types [ 598.191427][ T46] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 598.316702][ T970] libceph: connect (1)[c::]:6789 error -101 [ 598.323418][ T970] libceph: mon0 (1)[c::]:6789 connect error [ 598.355183][T12808] ceph: No mds server is up or the cluster is laggy [ 598.443275][ T46] usb 4-1: config 0 has an invalid interface number: 191 but max is 0 [ 598.451771][ T46] usb 4-1: config 0 has no interface number 0 [ 598.460424][ T46] usb 4-1: New USB device found, idVendor=0421, idProduct=0070, bcdDevice=99.05 [ 598.470289][ T46] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 598.479311][ T46] usb 4-1: Product: syz [ 598.484152][ T46] usb 4-1: Manufacturer: syz [ 598.488827][ T46] usb 4-1: SerialNumber: syz [ 598.496051][ T46] usb 4-1: config 0 descriptor?? [ 598.502956][ T46] usb 4-1: bad CDC descriptors [ 598.601784][ T5905] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 598.918223][ T970] usb 4-1: USB disconnect, device number 47 [ 599.461558][ T5905] usb 3-1: Using ep0 maxpacket: 16 [ 599.474924][ T5905] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x7 has invalid wMaxPacketSize 0 [ 599.490224][ T5905] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has an invalid bInterval 0, changing to 7 [ 599.502668][ T5905] usb 3-1: config 0 interface 0 altsetting 1 endpoint 0x89 has invalid wMaxPacketSize 0 [ 599.518539][ T5905] usb 3-1: config 0 interface 0 has no altsetting 0 [ 599.567495][ T970] usb 7-1: USB disconnect, device number 21 [ 599.616552][ T5905] usb 3-1: New USB device found, idVendor=06cb, idProduct=0006, bcdDevice=9a.eb [ 599.636891][ T5905] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 599.645403][ T5905] usb 3-1: Product: syz [ 599.649954][ T5905] usb 3-1: Manufacturer: syz [ 599.660727][ T5905] usb 3-1: SerialNumber: syz [ 599.670113][ T5905] usb 3-1: config 0 descriptor?? [ 599.716057][ T29] audit: type=1400 audit(1740451478.466:1218): avc: denied { write } for pid=12856 comm="syz.3.1664" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 599.866576][ T29] audit: type=1400 audit(1740451478.606:1219): avc: denied { ioctl } for pid=12858 comm="syz.1.1665" path="socket:[39732]" dev="sockfs" ino=39732 ioctlcmd=0x6103 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 600.283605][ T5905] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input63 [ 600.322207][ T5179] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 600.353472][ T5905] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 600.389413][ T29] audit: type=1400 audit(1740451479.116:1220): avc: denied { setopt } for pid=12863 comm="syz.1.1667" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 600.400807][T12867] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1666'. [ 600.434429][ T5179] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 600.491831][ T5905] input: failed to attach handler mousedev to device input63, error: -5 [ 600.522919][ T5179] synaptics_usb 3-1:0.0: synusb_open - usb_submit_urb failed, error: -90 [ 600.523351][ T5905] usb 3-1: USB disconnect, device number 57 [ 601.049667][T12879] openvswitch: netlink: Multiple metadata blocks provided [ 601.793142][T12890] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1674'. [ 601.899285][ T29] audit: type=1400 audit(1740451480.626:1221): avc: denied { shutdown } for pid=12886 comm="syz.2.1671" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 602.678604][T12899] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1677'. [ 603.031222][T12906] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1677'. [ 604.041556][ T29] audit: type=1400 audit(1740451482.766:1222): avc: denied { mount } for pid=12894 comm="syz.0.1676" name="/" dev="nfsd" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfsd_fs_t tclass=filesystem permissive=1 [ 604.910349][T12907] lo speed is unknown, defaulting to 1000 [ 606.146270][T12931] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input64 [ 606.721222][ T29] audit: type=1400 audit(1740451485.466:1223): avc: denied { read write } for pid=12940 comm="syz.2.1686" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 606.766511][T12941] netfs: Couldn't get user pages (rc=-14) [ 606.779091][ T29] audit: type=1400 audit(1740451485.466:1224): avc: denied { open } for pid=12940 comm="syz.2.1686" path="/340/file0" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 606.836783][ T29] audit: type=1400 audit(1740451485.506:1225): avc: denied { map } for pid=12940 comm="syz.2.1686" path="/340/file0" dev="9p" ino=65538 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 606.925273][T12942] mkiss: ax0: crc mode is auto. [ 607.396946][T12949] tmpfs: Bad value for 'mpol' [ 610.271426][ T5940] usb 4-1: new full-speed USB device number 48 using dummy_hcd [ 610.338818][T12989] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1700'. [ 610.495319][ T5940] usb 4-1: config index 0 descriptor too short (expected 1068, got 27) [ 610.503975][ T5940] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 610.576649][ T5940] usb 4-1: New USB device found, idVendor=06f8, idProduct=b000, bcdDevice=7d.f9 [ 610.586336][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 610.602534][ T5940] usb 4-1: Product: syz [ 610.612921][ T5940] usb 4-1: Manufacturer: syz [ 610.627588][ T5940] usb 4-1: SerialNumber: syz [ 610.662418][ T5940] usb 4-1: config 0 descriptor?? [ 611.972020][T13005] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input65 [ 612.140896][ T5940] usb 4-1: USB disconnect, device number 48 [ 614.626593][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1709'. [ 614.966415][T13046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1712'. [ 615.001979][T13046] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1712'. [ 615.018156][T13049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1714'. [ 615.071429][T13049] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1714'. [ 615.281501][ T5877] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 615.407648][ T29] audit: type=1400 audit(1740451494.156:1226): avc: denied { write } for pid=13056 comm="syz.1.1716" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 615.481488][ T5877] usb 3-1: Using ep0 maxpacket: 16 [ 615.490443][ T5877] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 615.513186][ T5877] usb 3-1: config 0 interface 0 altsetting 2 endpoint 0x81 has invalid wMaxPacketSize 0 [ 615.531389][ T5877] usb 3-1: config 0 interface 0 has no altsetting 0 [ 615.538046][ T5877] usb 3-1: New USB device found, idVendor=060b, idProduct=430a, bcdDevice= 0.00 [ 615.564543][ T5877] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 615.589484][ T5877] usb 3-1: config 0 descriptor?? [ 616.251231][ T5877] hid (null): unknown global tag 0xd [ 616.270714][ T5877] hid (null): unknown global tag 0x3b [ 616.491961][ T5877] hid (null): global environment stack underflow [ 616.498373][ T5877] hid (null): report_id 25602 is invalid [ 616.741398][ T5877] hid (null): bogus close delimiter [ 616.759473][ T5877] hid (null): global environment stack underflow [ 616.813245][ T5877] hid (null): unknown global tag 0xd [ 617.014494][ T29] audit: type=1400 audit(1740451495.686:1227): avc: denied { read } for pid=13087 comm="syz.3.1727" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 617.015559][ T5877] hid (null): unknown global tag 0xe [ 617.136092][ T5877] hid (null): global environment stack underflow [ 617.325630][ T5877] hid-generic 0003:060B:430A.001D: unexpected long global item [ 617.348045][ T5877] hid-generic 0003:060B:430A.001D: probe with driver hid-generic failed with error -22 [ 617.376981][T13095] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1729'. [ 617.396621][ T5877] usb 3-1: USB disconnect, device number 58 [ 617.664435][T13098] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1729'. [ 618.576043][T13103] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=1545 sclass=netlink_route_socket pid=13103 comm=syz.6.1731 [ 618.711409][T13105] syz.1.1730: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 618.727037][T13105] CPU: 0 UID: 0 PID: 13105 Comm: syz.1.1730 Not tainted 6.14.0-rc4-syzkaller #0 [ 618.727064][T13105] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 618.727078][T13105] Call Trace: [ 618.727085][T13105] [ 618.727094][T13105] dump_stack_lvl+0x16c/0x1f0 [ 618.727126][T13105] warn_alloc+0x24d/0x3a0 [ 618.727151][T13105] ? __pfx_warn_alloc+0x10/0x10 [ 618.727170][T13105] ? __pfx_stack_trace_save+0x10/0x10 [ 618.727203][T13105] ? kasan_save_stack+0x42/0x60 [ 618.727222][T13105] ? kasan_save_stack+0x33/0x60 [ 618.727240][T13105] ? kasan_save_track+0x14/0x30 [ 618.727258][T13105] ? __kasan_kmalloc+0xaa/0xb0 [ 618.727276][T13105] ? xskq_create+0x52/0x1d0 [ 618.727303][T13105] ? do_sock_setsockopt+0x222/0x480 [ 618.727332][T13105] ? __sys_setsockopt+0x1a0/0x230 [ 618.727355][T13105] ? __x64_sys_setsockopt+0xbd/0x160 [ 618.727387][T13105] __vmalloc_node_range_noprof+0x10dc/0x1530 [ 618.727428][T13105] ? xskq_create+0xfb/0x1d0 [ 618.727463][T13105] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 618.727502][T13105] ? xskq_create+0xfb/0x1d0 [ 618.727532][T13105] vmalloc_user_noprof+0x6b/0x90 [ 618.727561][T13105] ? xskq_create+0xfb/0x1d0 [ 618.727589][T13105] xskq_create+0xfb/0x1d0 [ 618.727619][T13105] xsk_setsockopt+0x7b7/0xa10 [ 618.727648][T13105] ? __pfx_xsk_setsockopt+0x10/0x10 [ 618.727687][T13105] ? selinux_socket_setsockopt+0x6a/0x80 [ 618.727714][T13105] ? __pfx_xsk_setsockopt+0x10/0x10 [ 618.727743][T13105] do_sock_setsockopt+0x222/0x480 [ 618.727773][T13105] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 618.727804][T13105] ? lock_acquire+0x2f/0xb0 [ 618.727854][T13105] __sys_setsockopt+0x1a0/0x230 [ 618.727886][T13105] __x64_sys_setsockopt+0xbd/0x160 [ 618.727911][T13105] ? do_syscall_64+0x91/0x250 [ 618.727937][T13105] ? lockdep_hardirqs_on+0x7c/0x110 [ 618.727961][T13105] do_syscall_64+0xcd/0x250 [ 618.727987][T13105] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 618.728014][T13105] RIP: 0033:0x7f1d7fb8d169 [ 618.728032][T13105] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 618.728051][T13105] RSP: 002b:00007f1d809b0038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 618.728071][T13105] RAX: ffffffffffffffda RBX: 00007f1d7fda6240 RCX: 00007f1d7fb8d169 [ 618.728085][T13105] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000a [ 618.728098][T13105] RBP: 00007f1d7fc0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 618.728111][T13105] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 618.728123][T13105] R13: 0000000000000000 R14: 00007f1d7fda6240 R15: 00007ffd974842a8 [ 618.728153][T13105] [ 618.728161][T13105] Mem-Info: [ 618.992301][T13105] active_anon:24911 inactive_anon:0 isolated_anon:0 [ 618.992301][T13105] active_file:8291 inactive_file:49671 isolated_file:0 [ 618.992301][T13105] unevictable:768 dirty:165 writeback:0 [ 618.992301][T13105] slab_reclaimable:10852 slab_unreclaimable:105538 [ 618.992301][T13105] mapped:35082 shmem:21730 pagetables:1117 [ 618.992301][T13105] sec_pagetables:0 bounce:0 [ 618.992301][T13105] kernel_misc_reclaimable:0 [ 618.992301][T13105] free:1292351 free_pcp:1560 free_cma:0 [ 619.037953][T13105] Node 0 active_anon:99744kB inactive_anon:0kB active_file:33164kB inactive_file:198612kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:140528kB dirty:660kB writeback:0kB shmem:85684kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11828kB pagetables:4468kB sec_pagetables:0kB all_unreclaimable? no [ 619.070433][T13105] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 619.100693][T13105] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 619.127750][T13105] lowmem_reserve[]: 0 2487 2487 0 0 [ 619.133021][T13105] Node 0 DMA32 free:1242932kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:99736kB inactive_anon:0kB active_file:33164kB inactive_file:198512kB unevictable:1536kB writepending:660kB present:3129332kB managed:2547384kB mlocked:0kB bounce:0kB free_pcp:6088kB local_pcp:1268kB free_cma:0kB [ 619.163381][T13105] lowmem_reserve[]: 0 0 0 0 0 [ 619.168091][T13105] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 619.194761][T13105] lowmem_reserve[]: 0 0 0 0 0 [ 619.199449][T13105] Node 1 Normal free:3911112kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 619.228160][T13105] lowmem_reserve[]: 0 0 0 0 0 [ 619.232910][T13105] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 619.245604][T13105] Node 0 DMA32: 1*4kB (E) 129*8kB (UME) 41*16kB (E) 120*32kB (UE) 187*64kB (UME) 123*128kB (UME) 77*256kB (UME) 38*512kB (UME) 9*1024kB (UM) 5*2048kB (UME) 281*4096kB (UM) = 1242844kB [ 619.265011][T13105] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 619.276484][T13105] Node 1 Normal: 208*4kB (UME) 45*8kB (UME) 38*16kB (UME) 172*32kB (UME) 83*64kB (UME) 31*128kB (UME) 19*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 4*2048kB (UME) 946*4096kB (UM) = 3911112kB [ 619.295076][T13105] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 619.304642][T13105] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 619.313948][T13105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 619.323508][T13105] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 619.332813][T13105] 79767 total pagecache pages [ 619.337463][T13105] 0 pages in swap cache [ 619.341618][T13105] Free swap = 124552kB [ 619.345751][T13105] Total swap = 124996kB [ 619.349895][T13105] 2097051 pages RAM [ 619.353718][T13105] 0 pages HighMem/MovableOnly [ 619.358390][T13105] 428547 pages reserved [ 619.362557][T13105] 0 pages cma reserved [ 619.430438][T13103] delete_channel: no stack [ 619.464116][T13103] syz.6.1731: attempt to access beyond end of device [ 619.464116][T13103] nbd6: rw=0, sector=6, nr_sectors = 2 limit=0 [ 619.481992][ T29] audit: type=1400 audit(1740451498.206:1228): avc: denied { write } for pid=13102 comm="syz.6.1731" path="socket:[40530]" dev="sockfs" ino=40530 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 619.530974][T13103] ADFS-fs (nbd6): error: unable to read block 3, try 0 [ 619.596202][T13112] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1732'. [ 619.618071][T13112] sp0: Synchronizing with TNC [ 620.323013][T13108] [U] [ 620.961125][T13115] fuse: Unknown parameter 'func' [ 620.967946][T13115] fuse: Unknown parameter 'func' [ 621.882676][T13123] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input66 [ 624.144103][T13143] openvswitch: netlink: Multiple metadata blocks provided [ 625.063267][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 625.291659][ T970] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 625.622378][ T970] usb 4-1: Using ep0 maxpacket: 16 [ 625.751930][ T970] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 625.783046][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 625.839408][ T970] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 625.854904][ T970] usb 4-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 625.904030][ T970] usb 4-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 625.942961][ T970] usb 4-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 626.018658][T13158] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1745'. [ 626.051113][T13158] sp0: Synchronizing with TNC [ 626.770281][T13155] [U] [ 627.382207][ T970] usb 4-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 627.390230][ T970] usb 4-1: Manufacturer: syz [ 627.456835][ T970] usb 4-1: config 0 descriptor?? [ 627.482503][ T970] usb 4-1: can't set config #0, error -71 [ 627.523690][ T970] usb 4-1: USB disconnect, device number 49 [ 627.607274][T13164] sg_write: data in/out 4348/42 bytes for SCSI command 0x0-- guessing data in; [ 627.607274][T13164] program syz.3.1747 not setting count and/or reply_len properly [ 627.626183][ T29] audit: type=1400 audit(1740451506.356:1229): avc: denied { setopt } for pid=13162 comm="syz.3.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 627.736324][T13168] overlayfs: missing 'lowerdir' [ 627.961474][ T970] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 629.732971][ T970] usb 4-1: Using ep0 maxpacket: 32 [ 629.761490][ T970] usb 4-1: New USB device found, idVendor=13d8, idProduct=0020, bcdDevice=f7.31 [ 629.770558][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 629.898277][T13183] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1752'. [ 630.896824][ T29] audit: type=1400 audit(1740451509.646:1230): avc: denied { shutdown } for pid=13162 comm="syz.3.1747" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 630.897522][ T970] usb 4-1: config 0 descriptor?? [ 631.367628][ T970] usb 4-1: can't set config #0, error -71 [ 631.421431][ T970] usb 4-1: USB disconnect, device number 50 [ 632.565949][T13219] openvswitch: netlink: Multiple metadata blocks provided [ 633.905755][ T29] audit: type=1400 audit(1740451512.196:1231): avc: denied { read } for pid=13221 comm="syz.6.1760" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 633.938487][T13204] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input67 [ 633.981374][T13232] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 635.721404][ T46] usb 1-1: new high-speed USB device number 67 using dummy_hcd [ 635.931558][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 635.945223][ T46] usb 1-1: config 0 interface 0 altsetting 101 endpoint 0x81 has invalid wMaxPacketSize 0 [ 636.023916][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 636.117599][ T46] usb 1-1: New USB device found, idVendor=04b4, idProduct=0001, bcdDevice= 0.00 [ 636.240059][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 636.383862][ T46] usb 1-1: config 0 descriptor?? [ 636.841902][ T970] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 636.943661][ T46] cypress 0003:04B4:0001.001E: hidraw0: USB HID v20.00 Device [HID 04b4:0001] on usb-dummy_hcd.0-1/input0 [ 637.096810][ T46] usb 1-1: USB disconnect, device number 67 [ 637.161670][ T970] usb 4-1: Using ep0 maxpacket: 32 [ 637.168487][ T970] usb 4-1: config 0 has an invalid interface number: 67 but max is 0 [ 637.199820][ T970] usb 4-1: config 0 has no interface number 0 [ 637.213317][ T970] usb 4-1: New USB device found, idVendor=0424, idProduct=9901, bcdDevice=c2.57 [ 637.231449][ T970] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 637.240423][ T970] usb 4-1: Product: syz [ 637.296030][ T970] usb 4-1: Manufacturer: syz [ 637.309503][ T970] usb 4-1: SerialNumber: syz [ 637.514548][ T970] usb 4-1: config 0 descriptor?? [ 637.532598][ T970] smsc95xx v2.0.0 [ 638.107628][T13279] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1774'. [ 638.107662][T13282] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1774'. [ 638.411580][ T46] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 638.760185][ T46] usb 3-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 638.815683][T13262] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 638.900274][ T46] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 639.011943][T13262] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 639.031836][ T46] usb 3-1: Product: syz [ 639.047387][ T46] usb 3-1: Manufacturer: syz [ 639.052342][ T6304] usb 7-1: new high-speed USB device number 22 using dummy_hcd [ 639.086181][ T46] usb 3-1: SerialNumber: syz [ 639.119425][ T46] usb 3-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 639.181515][ T3073] usb 3-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 639.213322][ T970] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): EEPROM read operation timeout [ 639.231479][ T970] smsc95xx 4-1:0.67 (unnamed net_device) (uninitialized): Failed to write reg index 0x00000014: -71 [ 639.231858][ T6304] usb 7-1: device descriptor read/64, error -71 [ 639.242475][ T970] smsc95xx 4-1:0.67: probe with driver smsc95xx failed with error -71 [ 639.245207][ T970] usb 4-1: USB disconnect, device number 51 [ 639.289469][T13289] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 639.555533][ T970] usb 3-1: USB disconnect, device number 59 [ 639.691494][ T6304] usb 7-1: new high-speed USB device number 23 using dummy_hcd [ 640.031269][ T6304] usb 7-1: device descriptor read/64, error -71 [ 640.142397][ T6304] usb usb7-port1: attempt power cycle [ 640.415623][ T3073] ath9k_htc 3-1:1.0: ath9k_htc: Target is unresponsive [ 640.479161][ T3073] ath9k_htc: Failed to initialize the device [ 640.531798][ T6304] usb 7-1: new high-speed USB device number 24 using dummy_hcd [ 640.614667][ T6304] usb 7-1: device descriptor read/8, error -71 [ 640.843894][ T970] usb 3-1: ath9k_htc: USB layer deinitialized [ 641.241575][ T970] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 641.734526][T13322] bond3: entered allmulticast mode [ 641.745880][T13322] 8021q: adding VLAN 0 to HW filter on device bond3 [ 641.760470][ T970] usb 3-1: config 0 has an invalid interface number: 111 but max is 0 [ 641.783907][ T970] usb 3-1: config 0 has an invalid descriptor of length 217, skipping remainder of the config [ 641.831581][ T970] usb 3-1: config 0 has no interface number 0 [ 641.860175][ T970] usb 3-1: config 0 interface 111 altsetting 10 has 0 endpoint descriptors, different from the interface descriptor's value: 26 [ 641.891721][ T970] usb 3-1: config 0 interface 111 has no altsetting 0 [ 641.911448][ T970] usb 3-1: New USB device found, idVendor=0471, idProduct=0304, bcdDevice=e4.df [ 641.921563][ T6304] usb 7-1: new high-speed USB device number 25 using dummy_hcd [ 641.930765][ T970] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 641.964518][ T6304] usb 7-1: Using ep0 maxpacket: 32 [ 641.968471][ T970] usb 3-1: config 0 descriptor?? [ 641.971418][ T6304] usb 7-1: unable to get BOS descriptor or descriptor too short [ 641.984949][ T6304] usb 7-1: config 128 has an invalid interface number: 127 but max is 3 [ 641.994535][ T6304] usb 7-1: config 128 has an invalid descriptor of length 0, skipping remainder of the config [ 642.025994][ T6304] usb 7-1: config 128 has 1 interface, different from the descriptor's value: 4 [ 642.054737][ T6304] usb 7-1: config 128 has no interface number 0 [ 642.073454][ T6304] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 642.114381][T13336] syz.3.1788: vmalloc error: size 16105472, failed to allocated page array size 31456, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 642.141408][ T6304] usb 7-1: config 128 interface 127 altsetting 14 endpoint 0x5 has invalid wMaxPacketSize 0 [ 642.151264][T13336] CPU: 0 UID: 0 PID: 13336 Comm: syz.3.1788 Not tainted 6.14.0-rc4-syzkaller #0 [ 642.151288][T13336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 642.151302][T13336] Call Trace: [ 642.151308][T13336] [ 642.151315][T13336] dump_stack_lvl+0x16c/0x1f0 [ 642.151341][T13336] warn_alloc+0x24d/0x3a0 [ 642.151363][T13336] ? __pfx_warn_alloc+0x10/0x10 [ 642.151396][T13336] ? __get_vm_area_node+0x1b0/0x2f0 [ 642.151421][T13336] ? __get_vm_area_node+0x1dc/0x2f0 [ 642.151452][T13336] __vmalloc_node_range_noprof+0x1102/0x1530 [ 642.151477][T13336] ? __pfx___mutex_trylock_common+0x10/0x10 [ 642.151500][T13336] ? __kasan_kmalloc+0xaa/0xb0 [ 642.151524][T13336] ? __vcalloc_noprof+0x4d/0x80 [ 642.151552][T13336] ? kvm_set_memslot+0x34/0x1380 [ 642.151576][T13336] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 642.151602][T13336] ? __pfx___mutex_lock+0x10/0x10 [ 642.151631][T13336] ? __vcalloc_noprof+0x4d/0x80 [ 642.151656][T13336] __vmalloc_noprof+0x6d/0x90 [ 642.151682][T13336] ? __vcalloc_noprof+0x4d/0x80 [ 642.151708][T13336] __vcalloc_noprof+0x4d/0x80 [ 642.151731][T13336] kvm_set_memslot+0xee3/0x1380 [ 642.151755][T13336] ? kasan_save_track+0x14/0x30 [ 642.151775][T13336] kvm_set_memory_region+0xea1/0x1630 [ 642.151806][T13336] ? __pfx_kvm_set_memory_region+0x10/0x10 [ 642.151828][T13336] ? __might_fault+0xe3/0x190 [ 642.151857][T13336] kvm_vm_ioctl+0x1551/0x3d70 [ 642.151887][T13336] ? __pfx_mark_lock+0x10/0x10 [ 642.151916][T13336] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 642.151953][T13336] ? find_held_lock+0x2d/0x110 [ 642.151975][T13336] ? tomoyo_path_number_perm+0x298/0x590 [ 642.151998][T13336] ? __pfx_lock_release+0x10/0x10 [ 642.152025][T13336] ? tomoyo_path_number_perm+0x46d/0x590 [ 642.152052][T13336] ? tomoyo_path_number_perm+0x190/0x590 [ 642.152076][T13336] ? __pfx_tomoyo_path_number_perm+0x10/0x10 [ 642.152098][T13336] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 642.152126][T13336] ? do_vfs_ioctl+0x513/0x1990 [ 642.152150][T13336] ? __pfx_do_vfs_ioctl+0x10/0x10 [ 642.152204][T13336] ? selinux_file_ioctl+0x180/0x270 [ 642.152229][T13336] ? selinux_file_ioctl+0xb4/0x270 [ 642.152255][T13336] ? __pfx_kvm_vm_ioctl+0x10/0x10 [ 642.152283][T13336] __x64_sys_ioctl+0x190/0x200 [ 642.152309][T13336] do_syscall_64+0xcd/0x250 [ 642.152332][T13336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 642.152356][T13336] RIP: 0033:0x7fb00bf8d169 [ 642.152375][T13336] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 642.152392][T13336] RSP: 002b:00007fb00cd73038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 642.152410][T13336] RAX: ffffffffffffffda RBX: 00007fb00c1a5fa0 RCX: 00007fb00bf8d169 [ 642.152422][T13336] RDX: 0000400000000080 RSI: 000000004020ae46 RDI: 0000000000000004 [ 642.152433][T13336] RBP: 00007fb00c00e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 642.152443][T13336] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 642.152454][T13336] R13: 0000000000000000 R14: 00007fb00c1a5fa0 R15: 00007ffd17b62a58 [ 642.152479][T13336] [ 642.152614][T13336] Mem-Info: [ 642.177588][ T6304] usb 7-1: config 128 interface 127 has no altsetting 0 [ 642.182777][T13336] active_anon:20012 inactive_anon:0 isolated_anon:0 [ 642.182777][T13336] active_file:9678 inactive_file:49681 isolated_file:0 [ 642.182777][T13336] unevictable:768 dirty:67 writeback:21 [ 642.182777][T13336] slab_reclaimable:10871 slab_unreclaimable:106053 [ 642.182777][T13336] mapped:32432 shmem:16907 pagetables:1093 [ 642.182777][T13336] sec_pagetables:0 bounce:0 [ 642.182777][T13336] kernel_misc_reclaimable:0 [ 642.182777][T13336] free:1293100 free_pcp:2238 free_cma:0 [ 642.200982][ T6304] usb 7-1: New USB device found, idVendor=0582, idProduct=295c, bcdDevice=d4.55 [ 642.201919][T13336] Node 0 active_anon:80048kB inactive_anon:0kB active_file:38712kB inactive_file:198652kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:129728kB dirty:268kB writeback:84kB shmem:66092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11844kB pagetables:4472kB sec_pagetables:0kB all_unreclaimable? no [ 642.214678][ T6304] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 642.219637][T13336] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 642.226175][ T6304] usb 7-1: Product: syz [ 642.255476][T13336] Node 0 [ 642.259859][ T6304] usb 7-1: Manufacturer: syz [ 642.264414][T13336] DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.633809][ T6304] usb 7-1: SerialNumber: syz [ 642.640759][T13336] lowmem_reserve[]: 0 2487 2487 0 0 [ 642.666727][T13336] Node 0 DMA32 free:1241348kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:80240kB inactive_anon:0kB active_file:38712kB inactive_file:198552kB unevictable:1536kB writepending:352kB present:3129332kB managed:2547384kB mlocked:0kB bounce:0kB free_pcp:8688kB local_pcp:1220kB free_cma:0kB [ 642.701496][T13336] lowmem_reserve[]: 0 0 0 0 0 [ 642.706511][T13336] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.734116][T13336] lowmem_reserve[]: 0 0 0 0 0 [ 642.739038][T13336] Node 1 Normal free:3911112kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 642.778730][T13336] lowmem_reserve[]: 0 0 0 0 0 [ 642.785248][T13336] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 642.799533][ T970] usb 3-1: string descriptor 0 read error: -71 [ 642.810324][ T970] usb 3-1: USB disconnect, device number 60 [ 642.817943][T13336] Node 0 DMA32: 1394*4kB (UME) 752*8kB (UME) 364*16kB (UME) 318*32kB (UME) 126*64kB (UME) 51*128kB (UME) 70*256kB (UME) 36*512kB (UME) 7*1024kB (UM) 5*2048kB (UME) 277*4096kB (UM) = 1230536kB [ 642.854256][T13336] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 642.911421][T13336] Node 1 Normal: 208*4kB (UME) 45*8kB (UME) 38*16kB (UME) 172*32kB (UME) 83*64kB (UME) 31*128kB (UME) 19*256kB (UME) 9*512kB (UME) 2*1024kB (UM) 4*2048kB (UME) 946*4096kB (UM) = 3911112kB [ 642.946793][T13336] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 642.966607][ T6304] usb 7-1: USB disconnect, device number 25 [ 642.988231][T13336] Node 0 hugepages_total=4 hugepages_free=4 hugepages_surp=0 hugepages_size=2048kB [ 643.005158][T13336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 643.015175][T13336] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 643.032911][T13336] 73404 total pagecache pages [ 643.041376][T13336] 0 pages in swap cache [ 643.048108][T13336] Free swap = 124560kB [ 643.052984][T13336] Total swap = 124996kB [ 643.073901][T13336] 2097051 pages RAM [ 643.078118][T13336] 0 pages HighMem/MovableOnly [ 643.274023][T13336] 428547 pages reserved [ 643.278446][T13336] 0 pages cma reserved [ 644.801936][ T29] audit: type=1400 audit(1740451523.556:1232): avc: denied { shutdown } for pid=13365 comm="syz.2.1795" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 645.578792][T13381] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1799'. [ 645.582157][T13382] ip6gre1: entered allmulticast mode [ 645.873764][T13382] overlayfs: missing 'workdir' [ 645.925154][T13381] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 646.007635][T13380] bridge0: port 3(netdevsim2) entered blocking state [ 646.014454][T13380] bridge0: port 3(netdevsim2) entered disabled state [ 646.021248][T13380] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 646.029309][T13380] netdevsim netdevsim3 netdevsim2: entered promiscuous mode [ 646.386610][ T29] audit: type=1400 audit(1740451524.136:1233): avc: denied { setattr } for pid=13385 comm="syz.6.1801" path="/dev/mixer" dev="devtmpfs" ino=1288 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sound_device_t tclass=chr_file permissive=1 [ 647.084424][ T29] audit: type=1326 audit(1740451524.826:1234): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=13395 comm="syz.3.1803" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fb00bf8d169 code=0x0 [ 648.297613][ T5877] usb 1-1: new full-speed USB device number 68 using dummy_hcd [ 648.658881][ T970] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 648.684913][ T29] audit: type=1400 audit(1740451526.446:1235): avc: denied { mount } for pid=13415 comm="syz.6.1810" name="/" dev="cgroup2" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 648.733651][ T5877] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 648.753789][ T5877] usb 1-1: New USB device found, idVendor=05f3, idProduct=0240, bcdDevice=1b.24 [ 648.777285][ T5877] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 648.789081][ T5877] usb 1-1: Product: syz [ 648.817367][T13423] overlay: Unknown parameter 'smackfsfloor' [ 648.827757][ T970] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 648.846397][ T5877] usb 1-1: Manufacturer: syz [ 648.851083][ T5877] usb 1-1: SerialNumber: syz [ 648.856104][ T970] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 649.046001][ T5877] usb 1-1: config 0 descriptor?? [ 649.125471][ T970] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 649.134835][ T970] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 649.145905][ T5877] powermate 1-1:0.0: probe with driver powermate failed with error -22 [ 649.154422][ T970] usb 4-1: SerialNumber: syz [ 649.455111][T13401] tmpfs: Unknown parameter 'msol1bind:0-NaavɋB?6'܉/$rV' [ 649.482527][ T5877] usb 1-1: USB disconnect, device number 68 [ 650.005430][ T29] audit: type=1400 audit(1740451527.766:1236): avc: denied { unmount } for pid=10137 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cgroup_t tclass=filesystem permissive=1 [ 650.111788][T13439] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1815'. [ 650.361592][ T5877] usb 1-1: new high-speed USB device number 69 using dummy_hcd [ 650.424517][ T970] usb 4-1: 0:2 : does not exist [ 650.441106][ T970] usb 4-1: USB disconnect, device number 52 [ 650.483113][T13445] lo speed is unknown, defaulting to 1000 [ 650.501561][ T5877] usb 1-1: device descriptor read/64, error -71 [ 650.601593][ T25] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 650.741718][ T5877] usb 1-1: new high-speed USB device number 70 using dummy_hcd [ 650.881468][ T5877] usb 1-1: device descriptor read/64, error -71 [ 650.934850][ T25] usb 3-1: config 0 has an invalid interface number: 68 but max is 0 [ 650.949229][ T25] usb 3-1: config 0 has no interface number 0 [ 650.957190][ T25] usb 3-1: New USB device found, idVendor=03fd, idProduct=ebbe, bcdDevice=b6.43 [ 650.972143][ T25] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 650.980279][ T25] usb 3-1: Product: syz [ 650.990774][ T25] usb 3-1: Manufacturer: syz [ 651.024041][ T25] usb 3-1: SerialNumber: syz [ 651.240430][ T25] usb 3-1: config 0 descriptor?? [ 651.560684][ T25] usb 3-1: USB disconnect, device number 61 [ 651.633648][ T5877] usb usb1-port1: attempt power cycle [ 652.637526][ T5877] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 652.674027][ T5877] usb 1-1: device descriptor read/8, error -71 [ 653.131598][ T3073] usb 4-1: new high-speed USB device number 53 using dummy_hcd [ 653.461826][ T3073] usb 4-1: Using ep0 maxpacket: 16 [ 653.537145][ T3073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 653.731709][ T5877] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 653.760207][ T3073] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 653.785520][ T5877] usb 1-1: device descriptor read/8, error -71 [ 653.792115][ T5940] usb 7-1: new full-speed USB device number 26 using dummy_hcd [ 653.851434][ T3073] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 653.911649][ T5877] usb usb1-port1: unable to enumerate USB device [ 653.952529][ T5940] usb 7-1: not running at top speed; connect to a high speed hub [ 653.969181][ T5940] usb 7-1: config 1 has an invalid descriptor of length 1, skipping remainder of the config [ 654.000108][ T5940] usb 7-1: config 1 interface 0 altsetting 11 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 654.071497][ T3073] usb 4-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 654.080566][ T3073] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 654.090381][ T3073] usb 4-1: config 0 descriptor?? [ 654.190145][ T5940] usb 7-1: config 1 interface 0 has no altsetting 0 [ 654.211714][ T5940] usb 7-1: New USB device found, idVendor=1b96, idProduct=0007, bcdDevice= 0.40 [ 654.220784][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 654.233679][ T5940] usb 7-1: Product: ࠝ [ 654.237861][ T5940] usb 7-1: Manufacturer: ⠁ [ 654.242566][ T5940] usb 7-1: SerialNumber: ఌ [ 655.143508][ T3073] microsoft 0003:045E:07DA.001F: unknown main item tag 0x6 [ 655.150783][ T3073] microsoft 0003:045E:07DA.001F: unknown main item tag 0x6 [ 655.167775][ T3073] microsoft 0003:045E:07DA.001F: unknown main item tag 0x6 [ 655.190359][ T3073] microsoft 0003:045E:07DA.001F: unknown main item tag 0x6 [ 655.197957][ T3073] microsoft 0003:045E:07DA.001F: unknown main item tag 0x6 [ 655.231206][ T3073] microsoft 0003:045E:07DA.001F: No inputs registered, leaving [ 655.315874][ T3073] microsoft 0003:045E:07DA.001F: hidraw0: USB HID v0.00 Device [HID 045e:07da] on usb-dummy_hcd.3-1/input0 [ 655.418627][ T3073] microsoft 0003:045E:07DA.001F: no inputs found [ 655.437774][ T3073] microsoft 0003:045E:07DA.001F: could not initialize ff, continuing anyway [ 655.721009][ T29] audit: type=1400 audit(1740451533.476:1237): avc: denied { write } for pid=13469 comm="syz.6.1824" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 656.105868][ T3073] usb 4-1: USB disconnect, device number 53 [ 656.551486][ T25] usb 1-1: new full-speed USB device number 73 using dummy_hcd [ 657.414823][ T5940] usbhid 7-1:1.0: couldn't find an input interrupt endpoint [ 657.477089][ T5940] usb 7-1: USB disconnect, device number 26 [ 657.783719][ T29] audit: type=1400 audit(1740451535.546:1238): avc: denied { remount } for pid=13518 comm="syz.2.1834" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 657.783968][T13519] tmpfs: Cannot disable swap on remount [ 658.477969][T13518] rtc_cmos 00:00: Alarms can be up to one day in the future [ 658.571944][ T5877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 658.580051][ T5877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 658.607963][ T5877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 658.625088][ T5877] rtc_cmos 00:00: Alarms can be up to one day in the future [ 658.656204][ T5877] rtc rtc0: __rtc_set_alarm: err=-22 [ 658.724472][ T29] audit: type=1400 audit(1740451536.476:1239): avc: denied { connect } for pid=13527 comm="syz.3.1837" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 658.804532][ T29] audit: type=1400 audit(1740451536.506:1240): avc: denied { ioctl } for pid=13527 comm="syz.3.1837" path="socket:[42519]" dev="sockfs" ino=42519 ioctlcmd=0x89e5 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 658.882793][ T3073] usb 7-1: new high-speed USB device number 27 using dummy_hcd [ 659.022929][ T3073] usb 7-1: device descriptor read/64, error -71 [ 659.285700][ T25] usb 1-1: unable to read config index 0 descriptor/all [ 659.292867][ T25] usb 1-1: can't read configurations, error -71 [ 660.319223][ T3073] usb 7-1: new high-speed USB device number 28 using dummy_hcd [ 660.461585][ T3073] usb 7-1: device descriptor read/64, error -71 [ 661.304514][ T3073] usb usb7-port1: attempt power cycle [ 662.135088][ T3073] usb 7-1: new high-speed USB device number 29 using dummy_hcd [ 662.147595][ T29] audit: type=1804 audit(1740451539.886:1241): pid=13563 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.1.1845" name="/newroot/379/file0" dev="tmpfs" ino=2039 res=1 errno=0 [ 662.212097][ T3073] usb 7-1: device descriptor read/8, error -71 [ 662.661706][ T3073] usb 7-1: new high-speed USB device number 30 using dummy_hcd [ 663.090156][T13570] loop6: detected capacity change from 0 to 524287999 [ 663.351375][ T3073] usb 7-1: device not accepting address 30, error -71 [ 663.359146][ T3073] usb usb7-port1: unable to enumerate USB device [ 663.791823][ T3073] usb 7-1: new full-speed USB device number 31 using dummy_hcd [ 664.083244][ T3073] usb 7-1: config index 0 descriptor too short (expected 63524, got 36) [ 664.112698][ T3073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 188, changing to 4 [ 664.124965][ T3073] usb 7-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 21322, setting to 1023 [ 664.336162][ T29] audit: type=1400 audit(1740451542.096:1242): avc: denied { listen } for pid=13593 comm="syz.3.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 664.357774][ T3073] usb 7-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 664.367909][ T3073] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 664.401419][ T29] audit: type=1400 audit(1740451542.096:1243): avc: denied { connect } for pid=13593 comm="syz.3.1857" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 665.337915][ T3073] usb 7-1: Product: syz [ 665.347060][ T3073] usb 7-1: Manufacturer: syz [ 665.357230][ T3073] usb 7-1: SerialNumber: syz [ 665.372344][ T3073] usb 7-1: config 0 descriptor?? [ 665.600141][ T3073] usb 7-1: 0:0 : invalid sync pipe. bmAttributes 99, bLength 9, bSynchAddress 3d [ 665.658276][ T29] audit: type=1400 audit(1740451543.416:1244): avc: denied { create } for pid=13609 comm="syz.0.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 665.682310][T13613] netlink: 'syz.0.1861': attribute type 2 has an invalid length. [ 665.737087][ T29] audit: type=1400 audit(1740451543.416:1245): avc: denied { write } for pid=13609 comm="syz.0.1861" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 665.861897][ T3073] usb 7-1: USB disconnect, device number 31 [ 665.941996][ T9] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 665.991477][ T29] audit: type=1400 audit(1740451543.736:1246): avc: denied { read } for pid=13620 comm="syz.1.1863" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 666.012268][ T5940] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 666.086088][ T9] usb 1-1: device descriptor read/64, error -71 [ 666.161546][ T5940] usb 4-1: Using ep0 maxpacket: 32 [ 666.173461][ T5940] usb 4-1: config 33 has an invalid descriptor of length 88, skipping remainder of the config [ 666.516619][ T5940] usb 4-1: config 33 has 0 interfaces, different from the descriptor's value: 9 [ 666.564621][T13630] cgroup: Invalid name [ 667.239266][ T5940] usb 4-1: string descriptor 0 read error: -71 [ 667.249467][ T5940] usb 4-1: New USB device found, idVendor=046d, idProduct=c090, bcdDevice= 0.40 [ 667.261581][ T5940] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 667.321250][ T9] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 667.326991][ T3073] usb 7-1: new high-speed USB device number 32 using dummy_hcd [ 667.340809][ T5940] usb 4-1: rejected 1 configuration due to insufficient available bus power [ 667.352741][ T5940] usb 4-1: no configuration chosen from 1 choice [ 667.362173][ T5940] usb 4-1: USB disconnect, device number 54 [ 667.630669][ T9] usb 1-1: device descriptor read/64, error -71 [ 667.665945][ T3073] usb 7-1: config 48 interface 0 altsetting 98 bulk endpoint 0x4 has invalid maxpacket 1024 [ 667.676652][ T3073] usb 7-1: config 48 interface 0 altsetting 98 bulk endpoint 0x9 has invalid maxpacket 1024 [ 668.631118][ T9] usb usb1-port1: attempt power cycle [ 668.642490][ T3073] usb 7-1: config 48 interface 0 has no altsetting 0 [ 668.665019][ T3073] usb 7-1: New USB device found, idVendor=1784, idProduct=0006, bcdDevice=bb.2f [ 669.216049][ T5831] Bluetooth: hci0: command 0x0405 tx timeout [ 669.232892][ T3073] usb 7-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 669.372890][ T3073] usb 7-1: Product: syz [ 669.377090][ T3073] usb 7-1: Manufacturer: syz [ 669.419844][ T3073] usb 7-1: SerialNumber: syz [ 669.431435][ T29] audit: type=1400 audit(1740451547.176:1247): avc: denied { accept } for pid=13650 comm="syz.0.1871" lport=20000 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 669.541737][T13630] raw-gadget.1 gadget.6: fail, usb_ep_enable returned -22 [ 670.904145][ T3073] usb 7-1: can't set config #48, error -71 [ 670.923379][ T3073] usb 7-1: USB disconnect, device number 32 [ 671.097330][ T9] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 671.257359][ T9] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 5 [ 671.266509][ T9] usb 1-1: config 0 has no interface number 0 [ 671.272698][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 671.293915][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid maxpacket 58112, setting to 1024 [ 671.325505][ T9] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 671.429207][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 671.462583][ T9] usb 1-1: config 0 descriptor?? [ 671.736109][T13672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1874'. [ 672.387641][T13673] input: syz0 as /devices/virtual/input/input69 [ 674.252464][ T9] usbhid 1-1:0.1: can't add hid device: -71 [ 674.268735][ T9] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 674.289294][ T9] usb 1-1: USB disconnect, device number 78 [ 674.325143][T13698] netlink: 'syz.1.1881': attribute type 9 has an invalid length. [ 674.361705][T13698] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1881'. [ 674.393451][T13696] netlink: 180 bytes leftover after parsing attributes in process `syz.1.1881'. [ 675.976604][ T6304] usb 7-1: new high-speed USB device number 33 using dummy_hcd [ 676.409007][ T6304] usb 7-1: config 17 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 676.787656][ T6304] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 676.821627][ T6304] usb 7-1: config 17 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 59391, setting to 1024 [ 676.846734][ T6304] usb 7-1: New USB device found, idVendor=0458, idProduct=5003, bcdDevice= 0.00 [ 676.869607][ T6304] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 677.092566][T13709] raw-gadget.0 gadget.6: fail, usb_ep_enable returned -22 [ 677.360843][T13709] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 677.475411][T13709] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 677.624409][T13709] netlink: 'syz.6.1884': attribute type 39 has an invalid length. [ 679.374854][ T6304] aiptek 7-1:17.0: Aiptek using 400 ms programming speed [ 679.383560][ T6304] input: Aiptek as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:17.0/input/input70 [ 679.441696][ T6304] usb 7-1: USB disconnect, device number 33 [ 679.447672][ C1] aiptek 7-1:17.0: aiptek_irq - usb_submit_urb failed with result -19 [ 679.877589][ T46] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 680.128148][ T46] usb 1-1: config 0 has an invalid interface number: 183 but max is 0 [ 680.207722][ T46] usb 1-1: config 0 has no interface number 0 [ 680.224994][ T46] usb 1-1: New USB device found, idVendor=04e6, idProduct=0009, bcdDevice= 2.00 [ 680.262508][ T46] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 680.302111][ T46] usb 1-1: config 0 descriptor?? [ 681.681589][ T9] usb 3-1: new high-speed USB device number 62 using dummy_hcd [ 681.841460][ T9] usb 3-1: Using ep0 maxpacket: 32 [ 681.848388][ T9] usb 3-1: unable to get BOS descriptor or descriptor too short [ 681.860957][ T9] usb 3-1: New USB device found, idVendor=0471, idProduct=0302, bcdDevice=bc.45 [ 681.874996][ T9] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.891646][ T9] usb 3-1: Product: syz [ 681.895883][ T9] usb 3-1: Manufacturer: syz [ 681.900489][ T9] usb 3-1: SerialNumber: syz [ 682.123341][ T9] pwc: Philips PCA645VC USB webcam detected. [ 682.136276][ T9] pwc: send_video_command error -71 [ 682.147833][ T9] pwc: Failed to set video mode CIF@30 fps; return code = -71 [ 682.170869][ T9] Philips webcam 3-1:7.0: probe with driver Philips webcam failed with error -71 [ 682.182570][ T9] usb 3-1: USB disconnect, device number 62 [ 682.187127][ T46] usb 1-1: string descriptor 0 read error: -71 [ 682.243650][ T46] usb-storage 1-1:0.183: USB Mass Storage device detected [ 682.324891][ T46] usb 1-1: USB disconnect, device number 79 [ 682.552621][T13781] netlink: 'syz.3.1902': attribute type 10 has an invalid length. [ 682.560557][T13781] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1902'. [ 682.731098][T13782] x_tables: duplicate underflow at hook 1 [ 684.035377][ T5940] IPVS: starting estimator thread 0... [ 684.111660][ T3073] usb 3-1: new full-speed USB device number 63 using dummy_hcd [ 684.221887][T13797] IPVS: using max 24 ests per chain, 57600 per kthread [ 684.272295][ T29] audit: type=1400 audit(1740451561.996:1248): avc: denied { setattr } for pid=13790 comm="syz.0.1903" path="socket:[44182]" dev="sockfs" ino=44182 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 684.317759][ T29] audit: type=1400 audit(1740451562.076:1249): avc: denied { read } for pid=13790 comm="syz.0.1903" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 684.363310][ T3073] usb 3-1: config index 0 descriptor too short (expected 63524, got 36) [ 684.391444][ T3073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has an invalid bInterval 188, changing to 4 [ 684.449304][ T3073] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0xB has invalid maxpacket 21322, setting to 1023 [ 684.463586][ T3073] usb 3-1: New USB device found, idVendor=045e, idProduct=0283, bcdDevice=99.0b [ 684.479629][ T3073] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 684.494226][ T3073] usb 3-1: Product: syz [ 684.498478][ T3073] usb 3-1: Manufacturer: syz [ 684.509894][ T3073] usb 3-1: SerialNumber: syz [ 684.521208][ T3073] usb 3-1: config 0 descriptor?? [ 684.537412][ T3073] usb 3-1: 0:0 : invalid sync pipe. bmAttributes 99, bLength 9, bSynchAddress 3d [ 684.663559][ T5940] usb 7-1: new high-speed USB device number 34 using dummy_hcd [ 685.031451][ T5940] usb 7-1: Using ep0 maxpacket: 8 [ 685.041777][ T5940] usb 7-1: unable to get BOS descriptor or descriptor too short [ 685.064508][ T5940] usb 7-1: config 0 has an invalid interface number: 88 but max is 0 [ 685.099030][ T5940] usb 7-1: config 0 has no interface number 0 [ 685.117498][ T5940] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has an invalid bInterval 0, changing to 7 [ 685.147968][ T5940] usb 7-1: config 0 interface 88 altsetting 8 endpoint 0x86 has invalid wMaxPacketSize 0 [ 685.172927][ T5940] usb 7-1: config 0 interface 88 has no altsetting 0 [ 685.193848][ T5940] usb 7-1: New USB device found, idVendor=0460, idProduct=0004, bcdDevice=96.31 [ 685.255398][ T5940] usb 7-1: New USB device strings: Mfr=1, Product=84, SerialNumber=3 [ 685.363420][ T5940] usb 7-1: Product: syz [ 685.417518][ T5940] usb 7-1: SerialNumber: syz [ 685.592554][ T5940] usb 7-1: config 0 descriptor?? [ 685.814588][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.871102][T13803] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 685.890363][T13803] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 685.931257][ T5940] input: syz as /devices/platform/dummy_hcd.6/usb7/7-1/7-1:0.88/input/input71 [ 685.976803][ T5940] usb 7-1: USB disconnect, device number 34 [ 686.486906][ T3073] usb 3-1: USB disconnect, device number 63 [ 687.702684][ T970] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 688.062329][ T970] usb 4-1: Using ep0 maxpacket: 16 [ 688.101254][ T970] usb 4-1: config 0 has an invalid interface number: 8 but max is 0 [ 688.117595][ T970] usb 4-1: config 0 has no interface number 0 [ 688.131629][ T970] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 7 [ 688.181419][ T970] usb 4-1: config 0 interface 8 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 688.482939][ T970] usb 4-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 688.512090][ T970] usb 4-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 688.520206][ T970] usb 4-1: Product: syz [ 688.561394][ T29] audit: type=1400 audit(1740451566.306:1250): avc: denied { read } for pid=13843 comm="syz.1.1922" dev="sockfs" ino=44268 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 688.561400][ T970] usb 4-1: SerialNumber: syz [ 688.644821][ T970] usb 4-1: config 0 descriptor?? [ 688.665388][ T970] cm109 4-1:0.8: invalid payload size 0, expected 4 [ 688.689223][ T970] input: CM109 USB driver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.8/input/input72 [ 688.904336][ C0] cm109 4-1:0.8: cm109_urb_ctl_callback: usb_submit_urb (urb_irq) failed -90 [ 688.986401][T13858] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input73 [ 689.412367][T13861] IPVS: set_ctl: invalid protocol: 33 172.20.20.28:20002 [ 690.471605][ T3073] usb 7-1: new full-speed USB device number 35 using dummy_hcd [ 690.488643][T13873] ptrace attach of "./syz-executor exec"[5826] was attempted by "./syz-executor exec"[13873] [ 690.662745][ T3073] usb 7-1: New USB device found, idVendor=05d1, idProduct=2001, bcdDevice= 2.00 [ 690.688903][ T3073] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 691.053160][ T3073] usb 7-1: config 0 descriptor?? [ 691.069992][ T3073] ftdi_sio 7-1:0.0: FTDI USB Serial Device converter detected [ 691.164936][ T970] usb 4-1: USB disconnect, device number 55 [ 691.198107][ T970] cm109 4-1:0.8: cm109_toggle_buzzer_sync: usb_control_msg() failed -19 [ 691.357154][ T3073] usb 7-1: Detected FT232A [ 691.368184][ T3073] usb 7-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 691.386903][ T3073] usb 7-1: USB disconnect, device number 35 [ 692.191856][ T3073] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 692.231702][ T3073] ftdi_sio 7-1:0.0: device disconnected [ 693.519251][T13918] mkiss: ax0: crc mode is auto. [ 694.046730][ T9] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 695.504667][T13950] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1947'. [ 696.056507][T13949] overlayfs: failed to create directory ./bus/work (errno: 13); mounting read-only [ 696.070681][ T29] audit: type=1400 audit(1740451573.816:1251): avc: denied { read } for pid=13948 comm="syz.6.1949" name="btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 696.181509][T13949] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 696.181537][ T29] audit: type=1400 audit(1740451573.816:1252): avc: denied { open } for pid=13948 comm="syz.6.1949" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 696.220998][ T29] audit: type=1400 audit(1740451573.816:1253): avc: denied { ioctl } for pid=13948 comm="syz.6.1949" path="/dev/btrfs-control" dev="devtmpfs" ino=1311 ioctlcmd=0x9405 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 696.252324][ T29] audit: type=1400 audit(1740451573.816:1254): avc: denied { mounton } for pid=13948 comm="syz.6.1949" path="/148/file0/bus" dev="ramfs" ino=44507 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 696.317688][T13949] overlayfs: failed to get uuid (/file1, err=-95); falling back to uuid=null. [ 696.561581][T13961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1951'. [ 697.221546][T13985] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1960'. [ 697.299206][T13987] sp0: Synchronizing with TNC [ 697.976826][T13980] [U] [ 698.591475][ T46] usb 3-1: new low-speed USB device number 64 using dummy_hcd [ 698.784894][ T46] usb 3-1: device descriptor read/64, error -71 [ 699.911668][ T46] usb 3-1: new low-speed USB device number 65 using dummy_hcd [ 700.071435][ T46] usb 3-1: device descriptor read/64, error -71 [ 700.207226][ T46] usb usb3-port1: attempt power cycle [ 700.258326][ T29] audit: type=1400 audit(1740451578.016:1255): avc: denied { read } for pid=14007 comm="syz.0.1966" laddr=fe80::12 lport=59966 faddr=fe80::bb scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 700.282835][T14014] xt_hashlimit: size too large, truncated to 1048576 [ 700.351801][T14020] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1969'. [ 700.408206][T14015] lo speed is unknown, defaulting to 1000 [ 700.641572][ T46] usb 3-1: new high-speed USB device number 66 using dummy_hcd [ 700.702167][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 700.708879][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x8D has an invalid bInterval 42, changing to 9 [ 700.758839][ T46] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 700.815633][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 700.853126][ T46] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 246 [ 700.890994][ T46] usb 3-1: New USB device found, idVendor=05ac, idProduct=8215, bcdDevice=8f.58 [ 700.905220][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 700.940891][ T46] usb 3-1: config 0 descriptor?? [ 700.946708][T14018] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 701.204194][T14035] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1973'. [ 701.984373][T14037] Falling back ldisc for ttyprintk. [ 702.042524][T10138] Bluetooth: hci5: Opcode 0x0c03 failed: -71 [ 702.051018][ T5940] usb 3-1: USB disconnect, device number 66 [ 702.088729][T14041] openvswitch: netlink: Key type 273 is out of range max 32 [ 702.378309][T14043] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1975'. [ 704.258496][ T29] audit: type=1400 audit(1740451582.016:1256): avc: denied { ioctl } for pid=14058 comm="syz.6.1979" path="socket:[44705]" dev="sockfs" ino=44705 ioctlcmd=0x8935 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 706.045518][T14086] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1986'. [ 706.291129][T14086] sp0: Synchronizing with TNC [ 706.510938][T14082] [U] [ 708.157903][T14109] /dev/loop1: Can't open blockdev [ 708.971750][ T46] usb 1-1: new full-speed USB device number 81 using dummy_hcd [ 709.704588][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x6 has invalid maxpacket 1023, setting to 64 [ 709.782649][ T46] usb 1-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xBA, changing to 0x8A [ 709.814583][ T46] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x8A has invalid maxpacket 121, setting to 64 [ 709.843683][ T46] usb 1-1: New USB device found, idVendor=2294, idProduct=425b, bcdDevice=a2.10 [ 709.853806][T14126] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 709.861564][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 709.869688][ T46] usb 1-1: Product: syz [ 709.874720][ T46] usb 1-1: Manufacturer: syz [ 709.885316][ T46] usb 1-1: SerialNumber: syz [ 709.905548][ T46] usb 1-1: config 0 descriptor?? [ 709.911522][T14119] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 709.918814][T14119] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 709.929691][ T46] usb 1-1: ucan: probing device on interface #0 [ 710.090794][T14136] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1998'. [ 710.349647][ T46] usb 1-1: ucan: device reported invalid device info [ 710.364856][ T46] usb 1-1: ucan: probe failed; try to update the device firmware [ 710.377982][ T29] audit: type=1400 audit(1740451588.136:1257): avc: denied { setopt } for pid=14131 comm="syz.1.1999" lport=45661 faddr=::ffff:172.20.255.187 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sctp_socket permissive=1 [ 710.408020][ T29] audit: type=1400 audit(1740451588.136:1258): avc: denied { getopt } for pid=14131 comm="syz.1.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 710.457588][T14138] sp0: Synchronizing with TNC [ 710.844411][T14130] [U] [ 712.412486][ T970] usb 1-1: USB disconnect, device number 81 [ 713.942624][ T29] audit: type=1400 audit(1740451591.096:1259): avc: denied { ioctl } for pid=14158 comm="syz.6.2004" path="socket:[44890]" dev="sockfs" ino=44890 ioctlcmd=0x7a0 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=llc_socket permissive=1 [ 714.031774][ T5940] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 714.435975][ T5940] usb 3-1: config 220 has an invalid interface number: 76 but max is 2 [ 714.476998][ T5940] usb 3-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 714.493819][ T5940] usb 3-1: config 220 has an invalid descriptor of length 86, skipping remainder of the config [ 714.508526][ T5940] usb 3-1: config 220 has no interface number 2 [ 714.510957][ T29] audit: type=1400 audit(1740451592.266:1260): avc: denied { sqpoll } for pid=14166 comm="syz.0.2009" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 714.557714][ T5940] usb 3-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 714.721582][ T5940] usb 3-1: config 220 interface 0 has no altsetting 0 [ 714.742408][ T5940] usb 3-1: config 220 interface 76 has no altsetting 0 [ 714.749353][ T5940] usb 3-1: config 220 interface 1 has no altsetting 0 [ 714.784312][ T5940] usb 3-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 714.802266][T14180] netlink: 'syz.3.2011': attribute type 3 has an invalid length. [ 714.810116][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 714.818881][T14180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2011'. [ 714.828380][ T5940] usb 3-1: Product: syz [ 714.832804][ T5940] usb 3-1: Manufacturer: syz [ 714.841194][ T5940] usb 3-1: SerialNumber: syz [ 715.074025][ T5940] usb 3-1: selecting invalid altsetting 0 [ 715.080279][ T5940] usb 3-1: Found UVC 7.01 device syz (8086:0b07) [ 715.101487][ T5940] usb 3-1: No valid video chain found. [ 715.112896][ T5940] usb 3-1: selecting invalid altsetting 0 [ 715.126488][ T5940] usbtest 3-1:220.1: probe with driver usbtest failed with error -22 [ 716.029603][ T5940] usb 3-1: USB disconnect, device number 67 [ 716.590243][T14191] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2013'. [ 716.647146][T14191] sp0: Synchronizing with TNC [ 717.355282][T14189] [U] [ 718.793669][T14214] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input74 [ 719.001568][ T5940] usb 3-1: new high-speed USB device number 68 using dummy_hcd [ 719.201481][ T5940] usb 3-1: Using ep0 maxpacket: 8 [ 719.210943][ T5940] usb 3-1: New USB device found, idVendor=04a5, idProduct=3003, bcdDevice=3a.b2 [ 719.230569][ T5940] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 719.251729][ T5940] usb 3-1: Product: syz [ 719.260615][ T5940] usb 3-1: Manufacturer: syz [ 719.266125][ T5940] usb 3-1: SerialNumber: syz [ 719.277140][ T5940] usb 3-1: config 0 descriptor?? [ 719.635702][ T5940] gspca_main: sunplus-2.14.0 probing 04a5:3003 [ 720.510423][ T5940] gspca_sunplus: reg_w_riv err -110 [ 720.515789][ T5940] sunplus 3-1:0.0: probe with driver sunplus failed with error -110 [ 721.145790][ T5940] usb 3-1: USB disconnect, device number 68 [ 721.377455][T14235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2026'. [ 721.463534][T14237] sp0: Synchronizing with TNC [ 722.147013][T14231] [U] [ 723.312600][T14243] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=14243 comm=syz.1.2029 [ 724.861710][ T9] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 725.083591][ T5940] usb 7-1: new high-speed USB device number 36 using dummy_hcd [ 725.291431][ T9] usb 4-1: device descriptor read/64, error -71 [ 725.398150][ T5940] usb 7-1: New USB device found, idVendor=1b80, idProduct=e396, bcdDevice=a7.b1 [ 725.417497][ T5940] usb 7-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 725.443385][ T5940] usb 7-1: config 0 descriptor?? [ 725.462733][T14273] netlink: 'syz.1.2036': attribute type 29 has an invalid length. [ 725.465152][ T5940] usb 7-1: dvb_usb_v2: usb_bulk_msg() failed=-22 [ 725.502507][ T5940] dvb_usb_af9015 7-1:0.0: probe with driver dvb_usb_af9015 failed with error -22 [ 725.531465][ T9] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 725.671418][ T9] usb 4-1: device descriptor read/64, error -71 [ 725.857994][T14279] gtp0: entered promiscuous mode [ 725.863145][T14279] gtp0: entered allmulticast mode [ 725.895693][ T6304] usb 7-1: USB disconnect, device number 36 [ 726.557809][ T9] usb usb4-port1: attempt power cycle [ 727.488882][ T6304] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 727.791029][ T6304] usb 1-1: device descriptor read/64, error -71 [ 728.005498][T14313] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2047'. [ 728.051856][ T6304] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 728.057834][T14315] bridge_slave_0: left allmulticast mode [ 728.065565][T14315] bridge_slave_0: left promiscuous mode [ 728.072864][T14315] bridge0: port 1(bridge_slave_0) entered disabled state [ 728.084775][T14315] bridge_slave_1: left allmulticast mode [ 728.090532][T14315] bridge_slave_1: left promiscuous mode [ 728.097531][T14315] bridge0: port 2(bridge_slave_1) entered disabled state [ 728.120060][T14315] bond0: (slave bond_slave_0): Releasing backup interface [ 728.129839][T14315] bond0: (slave bond_slave_1): Releasing backup interface [ 728.152870][T14315] team0: Port device team_slave_0 removed [ 728.164728][T14315] team0: Port device team_slave_1 removed [ 728.211467][ T6304] usb 1-1: device descriptor read/64, error -71 [ 728.275873][T14315] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 728.323163][T14315] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 728.347925][ T6304] usb usb1-port1: attempt power cycle [ 729.482102][T14331] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2053'. [ 729.499706][T14331] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2053'. [ 729.541422][ T6304] usb 1-1: new high-speed USB device number 84 using dummy_hcd [ 729.573945][ T6304] usb 1-1: device descriptor read/8, error -71 [ 729.831598][ T6304] usb 1-1: new high-speed USB device number 85 using dummy_hcd [ 729.852093][ T6304] usb 1-1: device descriptor read/8, error -71 [ 729.972835][ T6304] usb usb1-port1: unable to enumerate USB device [ 834.991318][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 834.998317][ C1] rcu: 0-...!: (1 GPs behind) idle=a834/1/0x4000000000000000 softirq=59981/59982 fqs=2 [ 835.010098][ C1] rcu: (detected by 1, t=10502 jiffies, g=54605, q=93 ncpus=2) [ 835.017763][ C1] Sending NMI from CPU 1 to CPUs 0: [ 835.017797][ C0] NMI backtrace for cpu 0 [ 835.017809][ C0] CPU: 0 UID: 0 PID: 14340 Comm: syz.6.2056 Not tainted 6.14.0-rc4-syzkaller #0 [ 835.017826][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 835.017837][ C0] RIP: 0010:taprio_set_budgets+0x181/0x310 [ 835.017865][ C0] Code: 0f 4c 8b 70 20 0f 87 6e 01 00 00 4c 89 e8 48 c1 e8 03 42 80 3c 38 00 0f 85 4f 01 00 00 49 69 45 00 e8 03 00 00 31 d2 49 f7 f6 <49> 89 c6 e8 97 20 50 f8 49 83 fc 10 0f 87 e3 00 00 00 be 04 00 00 [ 835.017879][ C0] RSP: 0018:ffffc90000007d10 EFLAGS: 00000046 [ 835.017893][ C0] RAX: 0000000000000000 RBX: ffff888032eed484 RCX: ffffffff8969bf0a [ 835.017904][ C0] RDX: 0000000000000000 RSI: 0000000000000008 RDI: ffff888077d732e0 [ 835.017913][ C0] RBP: 0000000000000001 R08: 0000000000000000 R09: ffffed100efae65c [ 835.017923][ C0] R10: ffff888077d732e7 R11: 0000000000000003 R12: 0000000000000001 [ 835.017933][ C0] R13: ffff888032eed408 R14: 0000000000000190 R15: dffffc0000000000 [ 835.017943][ C0] FS: 00007efc31c086c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 835.017959][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 835.017970][ C0] CR2: 000000110c2ff2e9 CR3: 0000000058304000 CR4: 00000000003526f0 [ 835.017980][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 835.017989][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 835.017999][ C0] Call Trace: [ 835.018006][ C0] [ 835.018016][ C0] ? nmi_cpu_backtrace+0x1d8/0x390 [ 835.018043][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 835.018063][ C0] ? nmi_handle+0x1ac/0x5d0 [ 835.018086][ C0] ? taprio_set_budgets+0x181/0x310 [ 835.018107][ C0] ? default_do_nmi+0x6a/0x160 [ 835.018136][ C0] ? exc_nmi+0x170/0x1e0 [ 835.018157][ C0] ? end_repeat_nmi+0xf/0x53 [ 835.018181][ C0] ? taprio_set_budgets+0x13a/0x310 [ 835.018203][ C0] ? taprio_set_budgets+0x181/0x310 [ 835.018224][ C0] ? taprio_set_budgets+0x181/0x310 [ 835.018245][ C0] ? taprio_set_budgets+0x181/0x310 [ 835.018266][ C0] [ 835.018271][ C0] [ 835.018280][ C0] advance_sched+0x5e1/0xc60 [ 835.018308][ C0] ? __pfx_advance_sched+0x10/0x10 [ 835.018329][ C0] __hrtimer_run_queues+0x20a/0xae0 [ 835.018349][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 835.018365][ C0] ? read_tsc+0x9/0x20 [ 835.018385][ C0] hrtimer_interrupt+0x392/0x8e0 [ 835.018406][ C0] __sysvec_apic_timer_interrupt+0x10f/0x400 [ 835.018431][ C0] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 835.018449][ C0] [ 835.018455][ C0] [ 835.018461][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 835.018482][ C0] RIP: 0010:__sanitizer_cov_trace_pc+0x5a/0x70 [ 835.018506][ C0] Code: 35 8b 82 2c 16 00 00 85 c0 74 2b 8b 82 08 16 00 00 83 f8 02 75 20 48 8b 8a 10 16 00 00 8b 92 0c 16 00 00 48 8b 01 48 83 c0 01 <48> 39 d0 73 07 48 89 01 48 89 34 c1 c3 cc cc cc cc 0f 1f 44 00 00 [ 835.018537][ C0] RSP: 0018:ffffc9000c44f0b8 EFLAGS: 00000206 [ 835.018550][ C0] RAX: 0000000000012f33 RBX: 0000000000000000 RCX: ffffc90014c89000 [ 835.018559][ C0] RDX: 0000000000080000 RSI: ffffffff8a04f7b8 RDI: 0000000000000005 [ 835.018569][ C0] RBP: ffffc9000c44f1c8 R08: 0000000000000005 R09: 00000000fffffffd [ 835.018579][ C0] R10: 00000000fffffffd R11: 0000000000000002 R12: 00000000fffffffd [ 835.018589][ C0] R13: ffff88802379f8b8 R14: 1ffff92001889e27 R15: 0000000000000000 [ 835.018603][ C0] ? find_match+0xc8/0x15d0 [ 835.018623][ C0] find_match+0xc8/0x15d0 [ 835.018639][ C0] ? hlock_class+0x4e/0x130 [ 835.018655][ C0] ? mark_lock+0xb5/0xc60 [ 835.018678][ C0] ? __pfx_find_match+0x10/0x10 [ 835.018698][ C0] __find_rr_leaf+0x141/0xe00 [ 835.018717][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 835.018735][ C0] ? __pfx___find_rr_leaf+0x10/0x10 [ 835.018753][ C0] ? fib6_node_lookup+0x125/0x180 [ 835.018769][ C0] ? __pfx_fib6_node_lookup+0x10/0x10 [ 835.018791][ C0] fib6_table_lookup+0x57e/0xa30 [ 835.018815][ C0] ? __pfx_fib6_table_lookup+0x10/0x10 [ 835.018833][ C0] ? trace_lock_acquire+0xf0/0x1f0 [ 835.018852][ C0] ? lock_acquire+0x2f/0xb0 [ 835.018871][ C0] ? ip6_pol_route+0x186/0x1120 [ 835.018891][ C0] ip6_pol_route+0x1cd/0x1120 [ 835.018910][ C0] ? __pfx_ip6_pol_route+0x10/0x10 [ 835.018933][ C0] ? __pfx___lock_acquire+0x10/0x10 [ 835.018955][ C0] ? __pfx_ip6_pol_route_output+0x10/0x10 [ 835.018974][ C0] fib6_rule_lookup+0x386/0x720 [ 835.018993][ C0] ? __pfx_fib6_rule_lookup+0x10/0x10 [ 835.019011][ C0] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 835.019032][ C0] ? rcu_is_watching+0x12/0xc0 [ 835.019052][ C0] ? dev_get_by_index_rcu+0x102/0x140 [ 835.019073][ C0] ip6_route_output_flags+0x1d0/0x640 [ 835.019091][ C0] ip6_dst_lookup_tail.constprop.0+0x1159/0x2150 [ 835.019116][ C0] ? __pfx_ip6_dst_lookup_tail.constprop.0+0x10/0x10 [ 835.019143][ C0] ? hlock_class+0x4e/0x130 [ 835.019162][ C0] ? find_held_lock+0x2d/0x110 [ 835.019180][ C0] ip6_dst_lookup_flow+0x99/0x1d0 [ 835.019199][ C0] ? __pfx_ip6_dst_lookup_flow+0x10/0x10 [ 835.019221][ C0] sctp_v6_get_dst+0x6a3/0x2050 [ 835.019242][ C0] ? mark_held_locks+0x9f/0xe0 [ 835.019266][ C0] ? __pfx_sctp_v6_get_dst+0x10/0x10 [ 835.019294][ C0] ? rcu_is_watching+0x12/0xc0 [ 835.019312][ C0] ? sctp_transport_route+0x12e/0x350 [ 835.019334][ C0] sctp_transport_route+0x12e/0x350 [ 835.019358][ C0] sctp_assoc_add_peer+0x743/0x1530 [ 835.019381][ C0] sctp_connect_new_asoc+0x209/0x790 [ 835.019404][ C0] ? __pfx_sctp_connect_new_asoc+0x10/0x10 [ 835.019424][ C0] ? release_sock+0x21/0x220 [ 835.019445][ C0] ? lock_acquire+0x2f/0xb0 [ 835.019464][ C0] ? sctp_inet6_send_verify+0x119/0x390 [ 835.019488][ C0] __sctp_connect+0x3f5/0xc60 [ 835.019510][ C0] ? sctp_inet_connect+0xac/0x200 [ 835.019530][ C0] ? __pfx___sctp_connect+0x10/0x10 [ 835.019551][ C0] ? __pfx_sctp_inet_connect+0x10/0x10 [ 835.019573][ C0] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 835.019597][ C0] ? __pfx_sctp_inet_connect+0x10/0x10 [ 835.019616][ C0] sctp_inet_connect+0x15f/0x200 [ 835.019637][ C0] __sys_connect_file+0x13e/0x1a0 [ 835.019657][ C0] __sys_connect+0x14f/0x170 [ 835.019675][ C0] ? __pfx___sys_connect+0x10/0x10 [ 835.019692][ C0] ? __pfx___seccomp_filter+0x10/0x10 [ 835.019718][ C0] __x64_sys_connect+0x72/0xb0 [ 835.019736][ C0] do_syscall_64+0xcd/0x250 [ 835.019755][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 835.019776][ C0] RIP: 0033:0x7efc30d8d169 [ 835.019790][ C0] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 835.019804][ C0] RSP: 002b:00007efc31c08038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 835.019818][ C0] RAX: ffffffffffffffda RBX: 00007efc30fa5fa0 RCX: 00007efc30d8d169 [ 835.019829][ C0] RDX: 000000000000001c RSI: 0000400000000000 RDI: 0000000000000003 [ 835.019839][ C0] RBP: 00007efc30e0e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 835.019848][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 835.019858][ C0] R13: 0000000000000000 R14: 00007efc30fa5fa0 R15: 00007ffe066dc348 [ 835.019874][ C0] [ 835.020793][ C1] rcu: rcu_preempt kthread starved for 10485 jiffies! g54605 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 835.727071][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 835.737038][ C1] rcu: RCU grace-period kthread stack dump: [ 835.742919][ C1] task:rcu_preempt state:R running task stack:27552 pid:17 tgid:17 ppid:2 task_flags:0x208040 flags:0x00004000 [ 835.756422][ C1] Call Trace: [ 835.759706][ C1] [ 835.762641][ C1] __schedule+0xf43/0x5890 [ 835.767067][ C1] ? __pfx___lock_acquire+0x10/0x10 [ 835.772289][ C1] ? __pfx___schedule+0x10/0x10 [ 835.777146][ C1] ? schedule+0x298/0x350 [ 835.781473][ C1] ? __pfx_lock_release+0x10/0x10 [ 835.786507][ C1] ? lock_acquire+0x2f/0xb0 [ 835.791013][ C1] ? schedule+0x1fd/0x350 [ 835.795350][ C1] schedule+0xe7/0x350 [ 835.799421][ C1] schedule_timeout+0x124/0x280 [ 835.804278][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 835.809660][ C1] ? __pfx_process_timeout+0x10/0x10 [ 835.814956][ C1] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 835.820769][ C1] ? prepare_to_swait_event+0xf3/0x470 [ 835.826239][ C1] rcu_gp_fqs_loop+0x1eb/0xb00 [ 835.831014][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 835.836303][ C1] ? rcu_gp_init+0xc82/0x1630 [ 835.840994][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 835.846206][ C1] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 835.852022][ C1] rcu_gp_kthread+0x271/0x380 [ 835.856706][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 835.861913][ C1] ? lockdep_hardirqs_on+0x7c/0x110 [ 835.867118][ C1] ? __kthread_parkme+0x148/0x220 [ 835.872144][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 835.877352][ C1] kthread+0x3af/0x750 [ 835.881427][ C1] ? __pfx_kthread+0x10/0x10 [ 835.886025][ C1] ? __pfx_kthread+0x10/0x10 [ 835.890620][ C1] ret_from_fork+0x45/0x80 [ 835.895039][ C1] ? __pfx_kthread+0x10/0x10 [ 835.899633][ C1] ret_from_fork_asm+0x1a/0x30 [ 835.904411][ C1] [ 835.907428][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 835.913759][ C1] CPU: 1 UID: 0 PID: 4182 Comm: kworker/u8:8 Not tainted 6.14.0-rc4-syzkaller #0 [ 835.922879][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 835.932940][ C1] Workqueue: events_unbound toggle_allocation_gate [ 835.939456][ C1] RIP: 0010:smp_call_function_many_cond+0x4cb/0x12c0 [ 835.946131][ C1] Code: 4d 48 b8 00 00 00 00 00 fc ff df 4d 89 fc 4c 89 fd 49 c1 ec 03 83 e5 07 49 01 c4 83 c5 03 e8 7c 0e 0c 00 f3 90 41 0f b6 04 24 <40> 38 c5 7c 08 84 c0 0f 85 e8 0b 00 00 8b 43 08 31 ff 83 e0 01 41 [ 835.965739][ C1] RSP: 0018:ffffc9000eb97928 EFLAGS: 00000293 [ 835.971809][ C1] RAX: 0000000000000000 RBX: ffff8880b8646a00 RCX: ffffffff81add19a [ 835.979779][ C1] RDX: ffff888034c1a440 RSI: ffffffff81add174 RDI: 0000000000000005 [ 835.987752][ C1] RBP: 0000000000000003 R08: 0000000000000005 R09: 0000000000000000 [ 835.995807][ C1] R10: 0000000000000001 R11: 0000000000000006 R12: ffffed10170c8d41 [ 836.003774][ C1] R13: 0000000000000001 R14: ffff8880b873fe80 R15: ffff8880b8646a08 [ 836.011741][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 836.020677][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 836.027283][ C1] CR2: 00007efc31c07f98 CR3: 000000000df80000 CR4: 00000000003526f0 [ 836.035288][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 836.043371][ C1] DR3: 000000000000000c DR6: 00000000ffff0ff0 DR7: 0000000000000400 [ 836.051612][ C1] Call Trace: [ 836.054892][ C1] [ 836.057733][ C1] ? rcu_check_gp_kthread_starvation+0x31b/0x450 [ 836.064501][ C1] ? do_raw_spin_unlock+0x172/0x230 [ 836.069701][ C1] ? rcu_sched_clock_irq+0x247a/0x3310 [ 836.075168][ C1] ? timekeeping_advance+0x72e/0xa90 [ 836.080459][ C1] ? __pfx_rcu_sched_clock_irq+0x10/0x10 [ 836.086095][ C1] ? __asan_memcpy+0x3c/0x60 [ 836.090703][ C1] ? rcu_is_watching+0x12/0xc0 [ 836.095472][ C1] ? update_process_times+0x178/0x2d0 [ 836.100852][ C1] ? __pfx_update_process_times+0x10/0x10 [ 836.106580][ C1] ? update_wall_time+0x1c/0x40 [ 836.111436][ C1] ? tick_nohz_handler+0x376/0x530 [ 836.116652][ C1] ? __pfx_tick_nohz_handler+0x10/0x10 [ 836.122108][ C1] ? __hrtimer_run_queues+0x5fb/0xae0 [ 836.127489][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 836.133205][ C1] ? read_tsc+0x9/0x20 [ 836.137284][ C1] ? hrtimer_interrupt+0x392/0x8e0 [ 836.142408][ C1] ? __sysvec_apic_timer_interrupt+0x10f/0x400 [ 836.148570][ C1] ? sysvec_apic_timer_interrupt+0x9f/0xc0 [ 836.154381][ C1] [ 836.157309][ C1] [ 836.160238][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 836.166433][ C1] ? smp_call_function_many_cond+0x4ea/0x12c0 [ 836.172511][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 836.178584][ C1] ? smp_call_function_many_cond+0x4cb/0x12c0 [ 836.184651][ C1] ? smp_call_function_many_cond+0x4c4/0x12c0 [ 836.190726][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 836.195769][ C1] on_each_cpu_cond_mask+0x40/0x90 [ 836.200911][ C1] text_poke_bp_batch+0x22b/0x760 [ 836.205974][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 836.211015][ C1] ? __pfx_text_poke_bp_batch+0x10/0x10 [ 836.216572][ C1] ? text_poke_queue+0xef/0x180 [ 836.221440][ C1] ? arch_jump_label_transform_queue+0xc0/0x120 [ 836.227690][ C1] text_poke_finish+0x30/0x40 [ 836.232366][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 836.238346][ C1] jump_label_update+0x1d7/0x400 [ 836.243305][ C1] static_key_enable_cpuslocked+0x1b7/0x270 [ 836.249201][ C1] static_key_enable+0x1a/0x20 [ 836.253970][ C1] toggle_allocation_gate+0xfc/0x260 [ 836.259264][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 836.265156][ C1] ? trace_lock_acquire+0x14e/0x1f0 [ 836.270355][ C1] ? process_one_work+0x921/0x1ba0 [ 836.275557][ C1] ? lock_acquire+0x2f/0xb0 [ 836.280064][ C1] ? process_one_work+0x921/0x1ba0 [ 836.285207][ C1] process_one_work+0x9c5/0x1ba0 [ 836.290179][ C1] ? __pfx_batadv_nc_worker+0x10/0x10 [ 836.295574][ C1] ? __pfx_process_one_work+0x10/0x10 [ 836.300960][ C1] ? assign_work+0x1a0/0x250 [ 836.305558][ C1] worker_thread+0x6c8/0xf00 [ 836.310166][ C1] ? __pfx_worker_thread+0x10/0x10 [ 836.315286][ C1] kthread+0x3af/0x750 [ 836.319358][ C1] ? __pfx_kthread+0x10/0x10 [ 836.323950][ C1] ? lock_acquire+0x2f/0xb0 [ 836.328464][ C1] ? __pfx_kthread+0x10/0x10 [ 836.333060][ C1] ret_from_fork+0x45/0x80 [ 836.337483][ C1] ? __pfx_kthread+0x10/0x10 [ 836.342339][ C1] ret_from_fork_asm+0x1a/0x30 [ 836.347117][ C1]