last executing test programs: 3m29.572685491s ago: executing program 1 (id=226): r0 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r0, 0x7b1, &(0x7f0000000240)={&(0x7f0000000b40)=[0xe, 0x7, 0xffffff80, 0x10000, 0x5, 0x7fff, 0x200, 0x3ff, 0x3, 0x5, 0x7ff, 0xfd0, 0x4, 0x8, 0x5, 0x1, 0x2, 0x1, 0x5, 0x5, 0x7, 0x6, 0x2, 0x62b3, 0x3, 0x8, 0xffff, 0xfffffff8, 0x1, 0x1, 0x4800000, 0x93, 0x3, 0x5, 0x80000, 0xfffffffa, 0x0, 0xfffff001, 0x40, 0xc224, 0x7, 0xf528, 0x0, 0x0, 0xaa, 0x0, 0x7, 0x3, 0x32ec696d, 0xffffff01, 0xd2, 0xfffffff8, 0x8, 0x5, 0xf, 0x2, 0xffffff8f, 0x9, 0x7fffffff, 0x7, 0x2a, 0xfffffff8, 0x6, 0x0, 0x81, 0xfffffffd, 0x2, 0x9, 0x9, 0x4, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0x6, 0x4981, 0x9, 0xb, 0x5, 0x2, 0x6, 0x1000, 0x3, 0x1, 0x2, 0x8000, 0xfffffffc, 0x1683, 0x5, 0xf1c8, 0x1, 0x80, 0x40, 0x2, 0x0, 0x2, 0x2, 0x3, 0x1, 0x9, 0x3, 0x5, 0x3, 0x40, 0x6, 0x2, 0x3, 0x0, 0x4, 0x0, 0x7, 0x0, 0x3, 0x9, 0xe6, 0xfffff001, 0xffffffd8, 0x10000, 0x5, 0xff, 0x8000, 0x62, 0x6, 0x7, 0xa, 0x2, 0x2b1a9d32, 0x3, 0x4165, 0x5000000, 0x6, 0x8, 0x3, 0x4, 0xc, 0x8, 0x4, 0x7, 0x7fffffff, 0x4, 0x3, 0x8, 0x5, 0x11107899, 0x9, 0x0, 0x81, 0x9, 0x4, 0x8, 0x71d, 0x6, 0x9, 0x4, 0x1, 0x1000, 0x4, 0x0, 0x8, 0xb5, 0x6, 0x1, 0x5, 0x0, 0x6, 0x8000, 0xfffffff7, 0x4, 0x800, 0x10001, 0x5, 0x5, 0x9, 0x1f, 0x1, 0x8, 0x80000001, 0x2, 0x4, 0xc6f, 0x4bb2, 0xcb0, 0x8, 0x6, 0x6, 0x1b44, 0x2, 0x1, 0x4, 0x5, 0x1c0000, 0x7, 0x9, 0xf, 0x0, 0x2, 0x7, 0xdf, 0x4, 0x2, 0x4, 0x6, 0xffffff01, 0x8, 0x6, 0x2, 0x7fffffff, 0x3, 0x1, 0x100, 0x8, 0x3, 0x2, 0x8, 0xfffffff7, 0x80000001, 0x5, 0x1ff, 0x7f5c, 0x5, 0x447, 0x4, 0x3, 0x6, 0x5, 0xa, 0xbdae, 0xc, 0x25, 0x1, 0xfffffe00, 0x1ff, 0x7fe0, 0x332, 0x6, 0x8000, 0xff, 0x3, 0xffff, 0x1, 0x5, 0xbdc, 0x7, 0x200, 0x1, 0x80000001, 0xe5a3, 0x0, 0x7fffffff, 0x1, 0x4, 0x5, 0x2a, 0x5, 0x2, 0xff, 0xffffd16c, 0x4, 0x0, 0x2, 0x80000000, 0x4, 0x1, 0x6, 0x2, 0x9, 0xffffffff, 0x10000, 0x2, 0x7, 0x2, 0x6, 0x1, 0x899b, 0x401, 0x2, 0x1, 0x15b9ab2e, 0x7, 0x2525ede6, 0xfffffffe, 0x5, 0xffff, 0x5, 0x1000, 0x4, 0x6, 0x73, 0x9, 0x2d6, 0x8, 0x4, 0x58c6, 0x80, 0x10, 0x1, 0x0, 0x8b, 0x8, 0x40, 0x40, 0x6, 0xeb, 0x0, 0xffffffff, 0x3, 0x6, 0x6, 0x0, 0x8, 0xee, 0x1, 0x6, 0x7ff, 0x9, 0x238, 0x8, 0x0, 0x4240, 0x0, 0x180, 0x80000000, 0x0, 0x9, 0x5, 0x6, 0x9, 0x7fff, 0x8, 0x0, 0x5, 0xb5, 0x1000, 0x8000, 0x2, 0x7, 0x1, 0x0, 0x6, 0x9, 0x1, 0x1, 0xceeb, 0x6, 0xd, 0x3, 0x2, 0x4, 0x2, 0xba80, 0x401, 0x4, 0x1, 0x21, 0x7, 0x10000, 0x5, 0x6, 0xfffffe00, 0x10100000, 0x630, 0x5, 0xf2, 0x4, 0x36, 0x30000, 0x5, 0x5, 0x5, 0x8001, 0x3, 0x2, 0x7, 0x88, 0xffff7fff, 0x200, 0x0, 0xff, 0x3, 0x8, 0x2, 0x7ff, 0x6fb, 0x1, 0x7f, 0x7774, 0x9, 0x6, 0xa, 0x6, 0x66, 0x118, 0xfffffffd, 0x2, 0x7, 0xd, 0x5, 0x3c67, 0x5, 0x6, 0xa1, 0x3429, 0x5, 0x8, 0x81, 0x7, 0x40, 0xf1, 0xfff, 0x7, 0xfffffff9, 0x5, 0x6, 0x7a, 0x10001, 0x2, 0x5, 0xc0000000, 0x2, 0xfffffffe, 0x81, 0x4, 0x5, 0x2, 0xff, 0x3, 0xc, 0x81, 0xc932, 0x6, 0x6, 0x2, 0x4, 0x9, 0x400, 0x0, 0xb, 0x80000001, 0x1000, 0x4, 0x6, 0x200, 0x8, 0x52fe, 0x0, 0x400, 0x93da, 0xffffffff, 0xc, 0x3, 0xffff, 0xfffffffa, 0xfffffffb, 0x3, 0xfff, 0x5, 0x1, 0x68925db5, 0x5, 0x5, 0x1e, 0x1, 0x9, 0x8, 0x9e23, 0x8, 0x5, 0x4493, 0x2, 0x2, 0xfa4, 0x7fff, 0x3, 0x7, 0x5, 0x2, 0x6, 0x8, 0x3, 0x96c, 0x5, 0x3, 0x5, 0xfffffffc, 0x5, 0x9, 0x2, 0x8000, 0x3, 0x2, 0x3, 0x9, 0x9, 0xc, 0x329352a6, 0x9, 0x735, 0x101, 0x3, 0x9, 0xca, 0x5, 0x9c25, 0x9, 0x80, 0x6, 0x2, 0x1, 0x1ff, 0x9, 0x3, 0x3, 0x0, 0x7fffffff, 0x1, 0x0, 0x2, 0x5, 0xe0000000, 0x4, 0x2, 0x9, 0x0, 0x1ca, 0x5, 0x800, 0x7, 0x8000, 0xe, 0xa, 0x8, 0x9a99, 0x3, 0x9, 0x9, 0x36f8000, 0x8001, 0x9cbe, 0x10, 0xffffdd28, 0x200, 0x8, 0x4, 0x9, 0x3, 0x7, 0x3, 0x2, 0xd0, 0xaae, 0x3ff, 0xffff, 0x4, 0x101, 0x7, 0x20, 0x8, 0x7fff, 0xffa6, 0x1000, 0x6, 0x9, 0x6, 0x2, 0x0, 0x3, 0x9, 0x4, 0x9, 0x0, 0x4, 0x200, 0x2, 0x5, 0xd, 0x4, 0x2, 0x7, 0x4, 0x3, 0x80000000, 0x2, 0x5, 0xbd2, 0x8001, 0x9a6a, 0x5c, 0x6, 0x7ff, 0xb, 0x6, 0x80, 0x1d70cca7, 0xfb0, 0x1, 0x1, 0xa94, 0xfffffff7, 0x10001, 0x0, 0x3, 0x9, 0x2de13bd1, 0x9, 0x9, 0x4, 0x2, 0x7, 0x3, 0x0, 0x6, 0xfff, 0x6, 0x6, 0x10, 0x5, 0x1d6d, 0x1, 0x8, 0x0, 0x634b, 0x101, 0x8, 0xf, 0xe21f, 0xe, 0x0, 0x4, 0x9, 0x1, 0x6, 0x2, 0x9, 0x6, 0x6, 0x8, 0xfffffffe, 0x0, 0x80000001, 0xfdd, 0x8, 0x6be1, 0x7, 0x1000, 0x5, 0x5, 0x9, 0x7, 0xff, 0x0, 0x2, 0x6310, 0x20e7, 0x8, 0x3, 0x1000, 0xe7d8, 0x1, 0x800, 0x0, 0x9, 0x101, 0x6, 0x9, 0x6, 0x7c, 0x8, 0x8, 0x5c, 0x9, 0x4, 0x4, 0x6000, 0xfffffff8, 0x5, 0xffffffff, 0x4c10, 0x668, 0x8, 0x2, 0x80, 0x7762, 0x7, 0x100, 0x8, 0xb, 0x6, 0xfff00000, 0x0, 0x3, 0x1, 0x4, 0x0, 0x7, 0x7, 0x7, 0x4, 0xd2, 0x2, 0x9, 0x8, 0x2, 0x6, 0xf, 0xffff, 0xa, 0x5, 0x6fd, 0xfffffff7, 0x8001, 0x31, 0x4, 0x7ff, 0x2, 0x1, 0xffff, 0x4, 0x5, 0x96, 0xf, 0x99, 0xc348, 0xfffffe01, 0xdb, 0x0, 0xa35, 0xd123, 0xc, 0x3, 0x3, 0x4, 0x9, 0x6, 0x4, 0x3, 0x5, 0x6, 0xde43, 0xf6, 0x1, 0x4, 0x423, 0x8, 0x5, 0x1, 0x0, 0x7, 0x0, 0x5, 0x9, 0x1, 0x1, 0xfffffeff, 0x3, 0x8000, 0x7, 0x10001, 0x5, 0x1, 0x3, 0x1, 0x9, 0xfff, 0x7, 0x8, 0x6, 0x0, 0x7, 0xe, 0x959, 0x6, 0x1, 0xffffff01, 0x31cb, 0x9, 0x8, 0x3, 0x7fe00000, 0x10001, 0x8, 0x80000000, 0x9, 0x200, 0x40, 0x101, 0x0, 0x4, 0xb, 0x2, 0x80, 0x6, 0x5, 0x5, 0x4, 0xeb7, 0x4, 0x3, 0x3, 0xfffffff1, 0x123ccf78, 0x77d1, 0x8f, 0xfffffff9, 0x8, 0x9, 0x9, 0xa, 0x5, 0x416, 0xf, 0x7f80, 0x7, 0xa, 0x9, 0x8933, 0x6, 0x81, 0x7, 0x6, 0x9, 0x8000, 0x2, 0x81, 0x9, 0x7fffffff, 0x5, 0x7, 0x0, 0x6, 0x9, 0xa8a, 0x5, 0x2, 0xe7e, 0x7, 0xcc5d, 0x0, 0x9e3, 0xffffffff, 0x1, 0x8, 0x7fff, 0x3, 0x6, 0x5, 0x9, 0x7, 0x101, 0x0, 0x3, 0x7ff, 0x3, 0x3ff, 0x468, 0x1, 0xdf, 0x4, 0x0, 0x7, 0x9, 0x1, 0x1, 0x7, 0x3, 0x6, 0x80000000, 0x9, 0x33334fb3, 0x8, 0x3, 0x3, 0x4, 0x4, 0x5, 0x7fff, 0x12, 0x0, 0x3, 0x9, 0x3, 0x2, 0x6, 0x7, 0x0, 0x1, 0x8, 0x4, 0x6, 0x7, 0x55, 0x1, 0xb90, 0xfffff0f1, 0x5, 0x4300, 0x7fffffff, 0x4, 0x47, 0x7b0, 0x8001, 0x0, 0xff, 0x400, 0x8, 0x5, 0xca4, 0x8, 0x9247, 0xacc9, 0x0, 0x0, 0xfffffffa, 0x0, 0x7, 0x6, 0x2, 0x4, 0x5, 0x8, 0x2, 0xfffffffa, 0x2, 0x3, 0x1, 0x6, 0x0, 0x8, 0x8, 0x3, 0x2, 0xfffffeb4, 0x32, 0xe9a7, 0x9, 0xffffffff, 0x1000, 0x3, 0x40, 0x61, 0x3, 0xd, 0x9, 0x0, 0x2, 0x3, 0x9, 0x7, 0x1, 0x1000, 0x3, 0xe0ea, 0xccfb, 0x6, 0xe, 0x10, 0x4, 0x8, 0x80, 0x4, 0x25, 0x5, 0x5, 0x6, 0xfffffffb, 0x2, 0x0, 0x9, 0x8, 0x384, 0x7ff, 0x4, 0x4, 0x9a, 0x3, 0x0, 0xc07, 0x80, 0x5, 0x10, 0x9, 0xffffffff, 0x1, 0x5, 0x0, 0x3bba, 0x7, 0x2, 0x9, 0xc0fb, 0x400, 0xff, 0xfffffaec, 0x2e2a, 0x8, 0x4, 0x65e, 0x3ae9, 0x1, 0x3, 0x2e, 0x4, 0x7, 0x5, 0x5, 0xf5, 0x8, 0xa2, 0x2, 0xfffffff8, 0x8, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x7, 0x2, 0x5, 0x7, 0x6, 0x80, 0x4], 0x4, 0x400, 0xa9f}) 3m29.528091959s ago: executing program 1 (id=227): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c599f830b1"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/74, 0x4a}], 0x3a}, 0x2043) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x62b09e0c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 3m27.494203175s ago: executing program 1 (id=235): syz_usb_connect$hid(0x0, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="12010000000000108117980800000000000109022400010000000009040000020308000009210000010122290a090581"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f0000000100)=0x3915, 0x4) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0xb00) syz_open_dev$cec(&(0x7f00000003c0), 0x0, 0x0) syz_open_dev$evdev(0x0, 0x40, 0x2101) 3m23.055164491s ago: executing program 1 (id=252): socketpair$unix(0x1, 0x3, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat(0xffffffffffffff9c, &(0x7f0000000080)='./file1\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f00000001c0)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f0000000040)='./file0/file0\x00', &(0x7f0000000340)='./file0/file0\x00', 0x0, 0x89101a, 0x0) mount$bind(0x0, &(0x7f0000000240)='./file0/file0\x00', 0x0, 0x80000, 0x0) r2 = openat$fuse(0xffffffffffffff9c, &(0x7f0000002080), 0x2, 0x0) read$FUSE(r2, &(0x7f00000021c0)={0x2020, 0x0, 0x0, 0x0}, 0x2020) mount$fuse(0x0, &(0x7f00000020c0)='./file0\x00', &(0x7f0000002100), 0x40, &(0x7f0000000500)={{'fd', 0x3d, r2}, 0x2c, {'rootmode', 0x3d, 0x4000}, 0x2c, {}, 0x2c, {}, 0x2c, {[{@max_read={'max_read', 0x3d, 0x8000}}], [{@euid_gt={'euid>', r3}}]}}) mount$fuse(0x0, 0x0, 0x0, 0x2b38094, &(0x7f0000000400)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=0x0]) mount(0x0, &(0x7f0000000380)='./file1\x00', &(0x7f0000000040)='autofs\x00', 0x0, &(0x7f0000000400)) chdir(&(0x7f0000000080)='./file1\x00') open(&(0x7f0000000000)='.\x00', 0x520280, 0x0) r4 = syz_open_dev$swradio(&(0x7f0000000040), 0x1, 0x2) ioctl$VIDIOC_S_FREQUENCY(r4, 0x402c5639, &(0x7f0000000080)={0x20000002, 0x4, 0x8000000}) quotactl_fd$Q_QUOTAON(r0, 0xffffffff80000202, 0xee01, &(0x7f0000000100)='./file2\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) close_range(r1, 0xffffffffffffffff, 0x0) 3m22.804498577s ago: executing program 1 (id=253): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x11, 0x3, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffc}}, &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = openat$iommufd(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$IOMMU_IOAS_ALLOC(r1, 0x3b81, &(0x7f0000000100)={0xc, 0x0, 0x0}) ioctl$IOMMU_OPTION$IOMMU_OPTION_HUGE_PAGES(r1, 0x3b87, &(0x7f0000000080)={0x18, 0x1, 0x0, 0x2f0, r2, 0x8000000000000000}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) syz_emit_vhci(&(0x7f0000000000)=ANY=[@ANYBLOB="043e0612"], 0x9) rt_sigaction(0x4, &(0x7f0000000040)={0x0, 0x40000000, 0x0, {[0x2000000080000003]}}, 0x0, 0x8, &(0x7f00000002c0)) open$dir(0x0, 0x101800, 0x0) 3m22.484522605s ago: executing program 1 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057e89720f20c5062ae100102030109021200010000000009909a1ee5dab36a19", @ANYRES16=0x0, @ANYRES32], 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000240)) r6 = syz_io_uring_setup(0x2fdd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_getnetconf={0x14, 0x52, 0x921}, 0x14}}, 0x0) 3m21.810910493s ago: executing program 32 (id=257): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x1e, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800"/15, @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$unix(r3, &(0x7f00000006c0)={0x0, 0x0, 0x0}, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="1201000057e89720f20c5062ae100102030109021200010000000009909a1ee5dab36a19", @ANYRES16=0x0, @ANYRES32], 0x0) r5 = socket(0x10, 0x3, 0x0) socketpair(0x1, 0x80001, 0x0, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)) socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000240)) r6 = syz_io_uring_setup(0x2fdd, &(0x7f0000000080)={0x0, 0x0, 0x10100}, &(0x7f0000000100)=0x0, &(0x7f0000000180)=0x0) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r9, &(0x7f0000000040)=ANY=[@ANYRES64=r6], 0x118) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x11, r9, 0x0) syz_io_uring_submit(r7, r8, &(0x7f0000000000)=@IORING_OP_SEND={0x1a, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0}) io_uring_enter(r6, 0x2d3e, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)=@mpls_getnetconf={0x14, 0x52, 0x921}, 0x14}}, 0x0) 43.925517653s ago: executing program 2 (id=749): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_DELRULE={0x20, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) r1 = socket$inet6(0xa, 0x1, 0x9) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) r3 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000240)={'syz_tun\x00', 0x0}) bind$packet(r3, &(0x7f0000000300)={0x11, 0x0, r4, 0x1, 0x0, 0x6, @remote}, 0x14) syz_emit_ethernet(0x6a, &(0x7f0000000100)={@local, @empty, @void, {@ipv4={0x8100, @udp={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x4, 0x0, @empty, @multicast1}, {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "36f47592d56be13573849e0b6470ef9e63c0f43f2b789b38", "9dcb2e782e9ce8308e1e7a70e0ab363ca84babe05a39621f648c5e286da55df2"}}}}}}, 0x0) r5 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r5, 0x800448d2, &(0x7f00000000c0)={0x1, &(0x7f0000000600)=[{@none}]}) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e20, 0xd0, @mcast1, 0x2}, 0x1c) 43.723191147s ago: executing program 2 (id=751): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000240000000000119078ac1e0001e0000001000017c10010906101000000d482449a"], 0x0) socket$inet(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) accept$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 42.051146791s ago: executing program 2 (id=755): r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) r3 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000080), 0x841) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(r3, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0xbf00, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7b, 0x3, "f6a6946c9832508c"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c68a67a1f0000000bb84841d9010200000000000000000000389619a94df396797a3000000000050081003de02fa454624e9fb49e573307f807000000300008800c00078007001a00242e0000100007800c0018400000001000000009100007800c001b40000000000000001004"], 0x5c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d000701000000000000000001"], 0x528}}, 0xc000) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433", 0x4}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r4 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r4, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) r5 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r5, &(0x7f0000000340)={0x1d, r6, 0x2}, 0x18) 42.042946273s ago: executing program 3 (id=756): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) openat$qrtrtun(0xffffffffffffff9c, &(0x7f0000000080), 0x0) epoll_create(0x5) syz_open_procfs(0x0, &(0x7f00000000c0)='fd/3\x00') socket$inet_mptcp(0x2, 0x1, 0x106) socket$inet_tcp(0x2, 0x1, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f00000002c0), 0x800, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$tipc(0x1e, 0x5, 0x0) io_uring_setup(0x40001329, &(0x7f0000000700)={0x0, 0x5132, 0x10, 0x2, 0x3a0}) ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) socket$inet(0x2, 0x3, 0x2) syz_kvm_setup_cpu$x86(0xffffffffffffffff, 0xffffffffffffffff, &(0x7f0000005000/0x18000)=nil, &(0x7f0000000380)=[@text32={0x20, &(0x7f00000001c0)="b8050000000f01c10f46a78900000066ba2100b067ee66ba2000b000ee6d2f2f800000c00f3266bac0000f3066b808008ed0660f38806f008ee0", 0x3a}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_CREATE_IRQCHIP(r3, 0xae60) ioctl$KVM_CREATE_PIT2(r3, 0x4040ae77, &(0x7f0000000040)={0x74}) syz_open_procfs(0x0, &(0x7f00000001c0)='maps\x00') r4 = ioctl$KVM_CREATE_VCPU(r3, 0xae41, 0x0) ioctl$KVM_SET_PIT(r3, 0x8048ae66, &(0x7f0000000080)={[{0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x9}, {0x800, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}]}) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) ioctl$KVM_SET_REGS(r4, 0x4090ae82, &(0x7f0000000200)={[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2004cb], 0x0, 0x200}) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000000)) ioctl$KVM_RUN(r4, 0xae80, 0x0) 41.868848643s ago: executing program 2 (id=757): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) 41.819488604s ago: executing program 2 (id=758): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0x9, "00004700000040f400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) socket$inet(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000300)='sched_switch\x00'}, 0x10) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 41.630845642s ago: executing program 3 (id=759): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r0 = socket(0x1, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r1, &(0x7f0000000180), 0x0}, 0x20) poll(&(0x7f0000000300)=[{r0, 0x1114}], 0x1, 0x8001) 40.593103901s ago: executing program 3 (id=762): syz_clone(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = openat$sw_sync(0xffffffffffffff9c, &(0x7f0000000240), 0x80280, 0x0) fsconfig$FSCONFIG_SET_FD(0xffffffffffffffff, 0x5, &(0x7f0000000200)='\\/})\\\\],\x00', 0x0, r0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000000340)=""/102392, 0x18ff8) shmctl$IPC_RMID(0x0, 0x0) r2 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TIOCSETD(r2, 0x5423, &(0x7f0000000140)=0x7) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0xff) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x9003000000000000, 0x40, &(0x7f0000000b40)=@raw={'raw\x00', 0x2, 0x3, 0x2a0, 0x0, 0x178, 0x178, 0x178, 0x178, 0x230, 0x230, 0x230, 0x230, 0x230, 0x3, 0x0, {[{{@uncond, 0x0, 0x130, 0x150, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "d9d9e63590ab5471c46924e95540949f0cd7e2b0a94d71d9d944acb7f0a1297674a95b30cee19db4c1725572ba928385b1635c89b58ae9a0e1ea500b26f006da3fa8a134552f7980e92de5a784cd4f46e799e191835d7d5ea776f04bef524e22f0bb6ed4b00f44ceb936943e13fa1caa6b4b159c673db1efa9a08b1ddc74ce6c", 0x43, 0x3}}]}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0x98, 0xb8, 0x0, {}, [@common=@inet=@set2={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x300) r4 = socket$alg(0x26, 0x5, 0x0) r5 = openat$dlm_control(0xffffffffffffff9c, &(0x7f00000000c0), 0x103002, 0x0) sendto$unix(r5, &(0x7f0000000180)="e51ff0464890ebefc8cea6503b5a01a7176a66d75dc141", 0x17, 0x24000800, &(0x7f0000019340)=@abs={0x1, 0x0, 0x4e20}, 0x6e) bind$alg(r4, 0x0, 0x0) r6 = socket$tipc(0x1e, 0x2, 0x0) r7 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r6, 0x10f, 0x87, &(0x7f0000000180)={0x42, 0x1}, 0x10) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x2}, 0x10) socket$tipc(0x1e, 0x2, 0x0) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0x401eb94) socket$netlink(0x10, 0x3, 0x0) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r5, 0x0, 0x0) socket$tipc(0x1e, 0x2, 0x0) 39.832359302s ago: executing program 3 (id=764): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000008000000000fc0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r4, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r5 = socket(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f0000000580), 0x0, 0x0) sysfs$2(0x2, 0xffffffffffffffff, &(0x7f0000000480)=""/190) 39.169629034s ago: executing program 2 (id=766): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_mptcp_buf(r0, 0x11c, 0x4, 0x0, &(0x7f00000000c0)) syz_emit_ethernet(0x32, &(0x7f00000002c0)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa0800450000240000000000119078ac1e0001e0000001000017c10010906101000000d482449a"], 0x0) socket$inet(0x2, 0x2, 0x0) syz_open_dev$tty1(0xc, 0x4, 0x1) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) syz_open_dev$MSR(&(0x7f0000000080), 0x0, 0x0) unshare(0x22020600) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x15, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x9) socket$inet_mptcp(0x2, 0x1, 0x106) epoll_create1(0x0) accept$inet6(r2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000100), r3) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r4, @ANYBLOB="010000000000fbdbdf250100000008000200000000000500050000000000080003000100000048000180050002002000000006000100020000000800060003000000080003"], 0x84}}, 0x20000000) 38.588410619s ago: executing program 3 (id=767): mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) mkdir(&(0x7f00000004c0)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000000), 0x0, &(0x7f0000000400)={[{@workdir={'workdir', 0x3d, './bus'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@upperdir={'upperdir', 0x3d, './file1'}}]}) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='./file0\x00', 0x0, 0x0) mknodat(r0, &(0x7f00000003c0)='./file0\x00', 0x0, 0x0) r1 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) mkdir(&(0x7f0000000240)='./bus\x00', 0x0) chdir(&(0x7f00000003c0)='./bus\x00') renameat2(r1, &(0x7f00000001c0)='./file0\x00', r1, &(0x7f0000000200)='./bus/file0\x00', 0x0) r2 = syz_open_procfs(0x0, &(0x7f0000000180)='wchan\x00') preadv(r2, &(0x7f0000000040)=[{&(0x7f0000000340)=""/174, 0xae}], 0x64, 0x0, 0x0) link(&(0x7f0000000000)='./file0\x00', &(0x7f0000000100)='./file1\x00') r3 = open(&(0x7f00000000c0)='.\x00', 0x0, 0x0) getdents64(r3, &(0x7f0000000180)=""/105, 0x69) openat$rfkill(0xffffffffffffff9c, &(0x7f0000000040), 0x801, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r4, 0x6, 0x14, &(0x7f0000000140)=0x1, 0x4) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) r5 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000000000407d1e9c3100000000000109022400010000000009040000120300000009210000000122070009058103"], 0x0) syz_usb_control_io(r5, 0x0, 0x0) syz_usb_control_io(r5, &(0x7f0000000400)={0x2c, &(0x7f0000000380)={0x0, 0xc, 0x76, {0x76, 0x0, "5a7da3291738b9465f1a4d0fa6c979389bb8fcd452a74a40733975404fc025cb56cf7769e13b8cb161c2f279915d711166c725e278d6eb300a7b091c5cb4996dc817a4e5cb0af1cfbd47d4ba8728cde113655611c660d5fd6054bd9dd354c8107c273084d644b7b22b00"/116}}, 0x0, 0x0, 0x0, 0x0}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, '\x00', "ed86a155b66f481507086fe637736e4c", "8968e562", "842546172794808f"}, 0x28) sendfile(r4, r6, &(0x7f0000000100)=0x10, 0x10001) io_setup(0x3, &(0x7f00000003c0)) 36.411229311s ago: executing program 3 (id=771): r0 = gettid() timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000340)={{0x77359400}, {0x0, 0x3938700}}, 0x0) r1 = eventfd(0x8800a6) r2 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r2, &(0x7f0000000280)={0x0, 0x18, 0xfa00, {0x7, &(0x7f0000000240)={0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000b80)={0x5, 0x10, 0xfa00, {&(0x7f0000000980), r3, 0x2}}, 0x18) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000b6ee9c26adaba5c701000000ca3ffca20d85f6fa859806100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="03000000feffffff0400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="299d000221180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = add_key$keyring(0x0, &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r9 = request_key(&(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000700)={'syz', 0x0}, &(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff}, 0x13f}}, 0x20) write$RDMA_USER_CM_CMD_QUERY_ROUTE(r2, &(0x7f0000000b80)={0x5, 0x10, 0xfa00, {&(0x7f0000000980), r3, 0x2}}, 0x18) write$eventfd(r1, &(0x7f0000000000)=0xfffffffffffffff7, 0x8) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$UHID_CREATE2(r4, &(0x7f0000000180)=ANY=[], 0x118) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) r5 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="01000000b6ee9c26adaba5c701000000ca3ffca20d85f6fa859806100000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=r4, @ANYBLOB="03000000feffffff0400"/28], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="299d000221180000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = add_key$keyring(0x0, &(0x7f00000005c0)={'syz', 0x3}, 0x0, 0x0, 0xfffffffffffffffd) r9 = request_key(&(0x7f0000000600)='dns_resolver\x00', &(0x7f0000000700)={'syz', 0x0}, &(0x7f0000000ac0)='C\x13\xfc2\x95WD\xaa\xba^\x90\xfd\x8d\xc2\xb1[\x81\xda\xda\xd6\x8c\xc99\xec\x0e*||\xe4\xb3\xc4\xb6\v\xaa\x15\x86,\xac\x8d\x89cu\x10\xdc\x93\x9b\xb4\x93\xafE*:\xe4\xdd\xa5\xa75\xb8\x1e;7\xb7.V\xdcrw[\r\x98\x93j\x9c\xf6\xf8\x99\xefF_\xcd\xdf!b\xc5\xec\ntb\xff\b\xaaF?!\x9f\a\x1a\x03\f\xe94\x1deU\x06zS\xc9\xb4\xa7@\xa1\\B\xc2@\r_b\x9a\xeb\b\xa4(V\xd6/N\xc5\xc6f\xb1\x95Z\xe5w^\xd8\xe7J\x80\xf7\xae\xafuv\x84\x9eG\xd1\xe7\x9b\xf0_9\xc2\x9b\xfd\xc3\xf3\xe4\x95P\xf1m\xcf\xc2\xe1\xe6\xa6\x8c\x11\xfb\xb8S\x8b\x92\\\asW-Ee\x02\x00\x00\x00\xd0;Q\xc1~\x89\xec\xc8\x9b\x88\a\xf2\x93\x82(\x8b\x00\xd8\xb4T\x80\x95\x93i|\xc0\x00\x04\x00\x00\x00\x00\x00\x00v\xef\xee+\xab\x9c\x00^R\xb2n?i=\xbe\x16\x8a\xbf\xe3\xcdB\xed\xe14\xe8\xd0\xb7\xff\xfeQ\x1c\x85n8\x1b\xc1\b\x00\x00\x00\x00\x00\x00\x00\x17\x94\xdfW\x92z\xbe\xb2R)\xf1K\xd7\xaf\x99\xf6d\xe8\xec\xb7\xbd+T3\xa6\xa9\xfaY-1qs\x82\xefn*\x96\xc9\x1e\xf4\xd1\x02Dt\xc0\x19\xf7\x89\x96.D [F\xeeYW\x95\x13\xc7;\xb5\x13^\x13\xcb\xf0C\x9c\xabf\x1daCS2\x02\xb0\xef\xc7\x8c\x9e\xed\a\n0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000340)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f000000040000000400000012"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r6}, &(0x7f00000006c0), &(0x7f0000000700)=r5}, 0x20) sendmsg$inet(r4, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) ioctl$TIOCGPTPEER(r0, 0x5441, 0x786d) 18.987242812s ago: executing program 5 (id=782): socket$kcm(0x2, 0x200000000000001, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0xfb84e000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3, 0x0, 0x7fffffffffffffff}, 0x18) userfaultfd(0x80001) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0x10, &(0x7f00000000c0)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x8, 0xba, &(0x7f0000000140)=""/186, 0x41000, 0x3, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x37, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TIOCSTI(r4, 0x5412, &(0x7f0000000200)=0xdc) 17.852522751s ago: executing program 5 (id=784): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() syz_open_dev$usbfs(0x0, 0x5, 0x1072c1) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) syz_open_dev$evdev(&(0x7f0000000080), 0x2000000000000, 0x802) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(0x0, 0x0, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(0xffffffffffffffff, 0x47f6, 0x0, 0x0, 0x0, 0x0) 15.960952194s ago: executing program 5 (id=787): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() syz_open_dev$usbfs(0x0, 0x5, 0x1072c1) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 15.356164373s ago: executing program 5 (id=788): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000001a40)=@base={0x9, 0x4, 0x3c16, 0x1, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={0x0, r0}, 0x18) r1 = syz_io_uring_setup(0x629, &(0x7f0000000140)={0x0, 0x2117, 0x400, 0x1}, 0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, 0x0, 0x0, 0x4) syz_io_uring_submit(0x0, r2, &(0x7f00000002c0)=@IORING_OP_OPENAT2={0x1c, 0x0, 0x0, 0xffffffffffffff9c, &(0x7f00000004c0)={0x0, 0x0, 0x32}, &(0x7f0000000500)='./file0\x00', 0x18}) io_uring_enter(r1, 0x47f6, 0x0, 0x0, 0x0, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) syz_open_procfs(0x0, &(0x7f00000004c0)='net/ip6_flowlabel\x00') prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sendmsg$IEEE802154_LIST_PHY(0xffffffffffffffff, 0x0, 0x20000800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f0000000500)=@ringbuf={{}, {}, {}, [@ringbuf_query={{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = openat$sysfs(0xffffffffffffff9c, 0x0, 0x169a82, 0x0) sendfile(r4, r4, 0x0, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r5, 0x800448d5, &(0x7f0000000000)) 11.984393153s ago: executing program 5 (id=793): r0 = openat$procfs(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/partitions\x00', 0x0, 0x0) r1 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000040)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) sendfile(r1, r0, &(0x7f0000002080)=0x64, 0x23b) ioctl$SNDCTL_TMR_START(r0, 0x5402) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x5, &(0x7f0000000100)=ANY=[@ANYBLOB="070000000900000000000000213f0000c50000000e800000850000000e00000091"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='mmap_lock_acquire_returned\x00', r2}, 0x10) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x1000005, 0x13, 0xffffffffffffffff, 0x4c71d000) r3 = socket$unix(0x1, 0x1, 0x0) bind$unix(r3, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r3, 0x0) mount$9p_unix(&(0x7f0000000080)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f00000000c0)='\xe9\x1fq\x89Y\x1e\x923aK\x00', &(0x7f0000000040), 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB='trans=unix']) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) prctl$PR_SET_IO_FLUSHER(0x43, 0xf7fffffffffffffd) syz_usb_connect(0x0, 0x36, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fe07124081173809499b0102030109022400010000000009040000028b8647000905e8ff040000000009050a", @ANYRES16], 0x0) close(0x3) r4 = syz_open_dev$sndpcmc(&(0x7f0000000040), 0x0, 0x446000) ioctl$SNDRV_PCM_IOCTL_HW_PARAMS_OLD(r4, 0x4143, 0x0) syz_open_dev$sndpcmp(&(0x7f0000000000), 0x2, 0x200) madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0x9) 9.99589095s ago: executing program 0 (id=797): io_setup(0x7, &(0x7f00000000c0)=0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_timeval(r1, 0x1, 0x14, &(0x7f0000000000)={0x0, 0xea60}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setscheduler(0x0, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x8) r2 = openat$sndseq(0xffffffffffffff9c, &(0x7f00000000c0), 0x163881) ioctl$SNDRV_SEQ_IOCTL_SET_CLIENT_POOL(r2, 0x4058534c, &(0x7f0000000100)={0x2080, 0x0, 0x0, 0x2, 0x0, 0x6}) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) io_submit(0x0, 0x0, 0x0) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) epoll_pwait(0xffffffffffffffff, 0x0, 0x0, 0xfffffffffffffff7, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) r4 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r4, &(0x7f00000002c0)={0xa, 0x4e21, 0x4, @remote, 0x1}, 0x1c) sendmmsg(r4, &(0x7f00000092c0), 0x4ff, 0x0) r5 = openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) write$dsp(r5, &(0x7f00000001c0)="5cba", 0x2) ioctl$SNDCTL_DSP_SYNC(r5, 0x5001, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x9b}, 0x0) r6 = openat$cachefiles(0xffffffffffffff9c, &(0x7f0000000080), 0x10400, 0x0) io_submit(r0, 0x2, &(0x7f00000005c0)=[&(0x7f00000001c0)={0x0, 0x4, 0x0, 0x0, 0x0, r1, &(0x7f0000000100)="02", 0x1}, &(0x7f0000000140)={0x0, 0x0, 0x2, 0x5, 0x0, r6, 0x0}]) 9.087978032s ago: executing program 0 (id=798): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/45, 0x2d, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, 0x0, 0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00'}, 0x10) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r3 = syz_open_dev$MSR(0x0, 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x800, 0xfffffffd}, &(0x7f0000000340), &(0x7f0000000280)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)=[0x20000000245c], 0x0, 0xffffffffffffffff, 0x20000294, 0x1}}, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='exfat\x00', 0x0, 0x0) 8.050590975s ago: executing program 0 (id=799): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x3, &(0x7f0000000300)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000139209f422ca2f1d3568c5"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) sched_setaffinity(0x0, 0x0, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000000)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_sha512\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) recvmsg(r5, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)=""/74, 0x4a}], 0x3a}, 0x2043) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0xf, 0x4, 0x8, 0x62b09e0c, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 7.784509632s ago: executing program 4 (id=800): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0x9, "00004700000040f400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 7.141373089s ago: executing program 6 (id=774): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00') socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x3, 0x20000000, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2b) sendfile(r5, r0, 0x0, 0x4000000053d2) 6.864986363s ago: executing program 7 (id=779): r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x39f494df748967f7, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0xbf00, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7b, 0x3, "f6a6946c9832508c"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c68a67a1f0000000bb84841d9010200000000000000000000389619a94df396797a3000000000050081003de02fa454624e9fb49e573307f807000000300008800c00078007001a00242e0000100007800c0018400000001000000009100007800c001b40000000000000001004"], 0x5c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d000701000000000000000001"], 0x528}}, 0xc000) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433", 0x4}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x2}, 0x18) 6.594804684s ago: executing program 7 (id=801): seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0xa, &(0x7f0000000200)={0x2f, 0x0}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x8, &(0x7f0000000080)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002840)=""/102392, 0x18ff8) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) r2 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f0000000240)={&(0x7f0000000b40)=[0xe, 0x7, 0xffffff80, 0x10000, 0x5, 0x7fff, 0x200, 0x3ff, 0x3, 0x5, 0x7ff, 0xfd0, 0x4, 0x8, 0x5, 0x1, 0x2, 0x1, 0x5, 0x5, 0x7, 0x6, 0x2, 0x62b3, 0x3, 0x8, 0xffff, 0xfffffff8, 0x1, 0x1, 0x4800000, 0x93, 0x3, 0x5, 0x80000, 0xfffffffa, 0x0, 0xfffff001, 0x40, 0xc224, 0x7, 0xf528, 0x0, 0x0, 0xaa, 0x0, 0x7, 0x3, 0x32ec696d, 0xffffff01, 0xd2, 0xfffffff8, 0x8, 0x5, 0xf, 0x2, 0xffffff8f, 0x9, 0x7fffffff, 0x7, 0x2a, 0xfffffff8, 0x6, 0x0, 0x81, 0xfffffffd, 0x2, 0x9, 0x9, 0x4, 0xfffffffd, 0x101, 0x0, 0x2, 0x1, 0x6, 0x4981, 0x9, 0xb, 0x5, 0x2, 0x6, 0x1000, 0x3, 0x1, 0x2, 0x8000, 0xfffffffc, 0x1683, 0x5, 0xf1c8, 0x1, 0x80, 0x40, 0x2, 0x0, 0x2, 0x2, 0x3, 0x1, 0x9, 0x3, 0x5, 0x3, 0x40, 0x6, 0x2, 0x3, 0x0, 0x4, 0x0, 0x7, 0x0, 0x3, 0x9, 0xe6, 0xfffff001, 0xffffffd8, 0x10000, 0x5, 0xff, 0x8000, 0x62, 0x6, 0x7, 0xa, 0x2, 0x2b1a9d32, 0x3, 0x4165, 0x5000000, 0x6, 0x8, 0x3, 0x4, 0xc, 0x8, 0x4, 0x7, 0x7fffffff, 0x4, 0x3, 0x8, 0x5, 0x11107899, 0x9, 0x0, 0x81, 0x9, 0x4, 0x8, 0x71d, 0x6, 0x9, 0x4, 0x1, 0x1000, 0x4, 0x0, 0x8, 0xb5, 0x6, 0x1, 0x5, 0x0, 0x6, 0x8000, 0xfffffff7, 0x4, 0x800, 0x10001, 0x5, 0x5, 0x9, 0x1f, 0x1, 0x8, 0x80000001, 0x2, 0x4, 0xc6f, 0x4bb2, 0xcb0, 0x8, 0x6, 0x6, 0x1b44, 0x2, 0x1, 0x4, 0x5, 0x1c0000, 0x7, 0x9, 0xf, 0x0, 0x2, 0x7, 0xdf, 0x4, 0x2, 0x4, 0x6, 0xffffff01, 0x8, 0x6, 0x2, 0x7fffffff, 0x3, 0x1, 0x100, 0x8, 0x3, 0x2, 0x8, 0xfffffff7, 0x80000001, 0x5, 0x1ff, 0x7f5c, 0x5, 0x447, 0x4, 0x3, 0x6, 0x5, 0xa, 0xbdae, 0xc, 0x25, 0x1, 0xfffffe00, 0x1ff, 0x7fe0, 0x332, 0x6, 0x8000, 0xff, 0x3, 0xffff, 0x1, 0x5, 0xbdc, 0x7, 0x200, 0x1, 0x80000001, 0xe5a3, 0x0, 0x7fffffff, 0x1, 0x4, 0x5, 0x2a, 0x5, 0x2, 0xff, 0xffffd16c, 0x4, 0x0, 0x2, 0x80000000, 0x4, 0x1, 0x6, 0x2, 0x9, 0xffffffff, 0x10000, 0x2, 0x7, 0x2, 0x6, 0x1, 0x899b, 0x401, 0x2, 0x1, 0x15b9ab2e, 0x7, 0x2525ede6, 0xfffffffe, 0x5, 0xffff, 0x5, 0x1000, 0x4, 0x6, 0x73, 0x9, 0x2d6, 0x8, 0x4, 0x58c6, 0x80, 0x10, 0x1, 0x0, 0x8b, 0x8, 0x40, 0x40, 0x6, 0xeb, 0x0, 0xffffffff, 0x3, 0x6, 0x6, 0x0, 0x8, 0xee, 0x1, 0x6, 0x7ff, 0x9, 0x238, 0x8, 0x0, 0x4240, 0x0, 0x180, 0x80000000, 0x0, 0x9, 0x5, 0x6, 0x9, 0x7fff, 0x8, 0x0, 0x5, 0xb5, 0x1000, 0x8000, 0x2, 0x7, 0x1, 0x0, 0x6, 0x9, 0x1, 0x1, 0xceeb, 0x6, 0xd, 0x3, 0x2, 0x4, 0x2, 0xba80, 0x401, 0x4, 0x1, 0x21, 0x7, 0x10000, 0x5, 0x6, 0xfffffe00, 0x10100000, 0x630, 0x5, 0xf2, 0x4, 0x36, 0x30000, 0x5, 0x5, 0x5, 0x8001, 0x3, 0x2, 0x7, 0x88, 0xffff7fff, 0x200, 0x0, 0xff, 0x3, 0x8, 0x2, 0x7ff, 0x6fb, 0x1, 0x7f, 0x7774, 0x9, 0x6, 0xa, 0x6, 0x66, 0x118, 0xfffffffd, 0x2, 0x7, 0xd, 0x5, 0x3c67, 0x5, 0x6, 0xa1, 0x3429, 0x5, 0x8, 0x81, 0x7, 0x40, 0xf1, 0xfff, 0x7, 0xfffffff9, 0x5, 0x6, 0x7a, 0x10001, 0x2, 0x5, 0xc0000000, 0x2, 0xfffffffe, 0x81, 0x4, 0x5, 0x2, 0xff, 0x3, 0xc, 0x81, 0xc932, 0x6, 0x6, 0x2, 0x4, 0x9, 0x400, 0x0, 0xb, 0x80000001, 0x1000, 0x4, 0x6, 0x200, 0x8, 0x52fe, 0x0, 0x400, 0x93da, 0xffffffff, 0xc, 0x3, 0xffff, 0xfffffffa, 0xfffffffb, 0x3, 0xfff, 0x5, 0x1, 0x68925db5, 0x5, 0x5, 0x1e, 0x1, 0x9, 0x8, 0x9e23, 0x8, 0x5, 0x4493, 0x2, 0x2, 0xfa4, 0x7fff, 0x3, 0x7, 0x5, 0x2, 0x6, 0x8, 0x3, 0x96c, 0x5, 0x3, 0x5, 0xfffffffc, 0x5, 0x9, 0x2, 0x8000, 0x3, 0x2, 0x3, 0x9, 0x9, 0xc, 0x329352a6, 0x9, 0x735, 0x101, 0x3, 0x9, 0xca, 0x5, 0x9c25, 0x9, 0x80, 0x6, 0x2, 0x1, 0x1ff, 0x9, 0x3, 0x3, 0x0, 0x7fffffff, 0x1, 0x0, 0x2, 0x5, 0xe0000000, 0x4, 0x2, 0x9, 0x0, 0x1ca, 0x5, 0x800, 0x7, 0x8000, 0xe, 0xa, 0x8, 0x9a99, 0x3, 0x9, 0x9, 0x36f8000, 0x8001, 0x9cbe, 0x10, 0xffffdd28, 0x200, 0x8, 0x4, 0x9, 0x3, 0x7, 0x3, 0x2, 0xd0, 0xaae, 0x3ff, 0xffff, 0x4, 0x101, 0x7, 0x20, 0x8, 0x7fff, 0xffa6, 0x1000, 0x6, 0x9, 0x6, 0x2, 0x0, 0x3, 0x9, 0x4, 0x9, 0x0, 0x4, 0x200, 0x2, 0x5, 0xd, 0x4, 0x2, 0x7, 0x4, 0x3, 0x80000000, 0x2, 0x5, 0xbd2, 0x8001, 0x9a6a, 0x5c, 0x6, 0x7ff, 0xb, 0x6, 0x80, 0x1d70cca7, 0xfb0, 0x1, 0x1, 0xa94, 0xfffffff7, 0x10001, 0x0, 0x3, 0x9, 0x2de13bd1, 0x9, 0x9, 0x4, 0x2, 0x7, 0x3, 0x0, 0x6, 0xfff, 0x6, 0x6, 0x10, 0x5, 0x1d6d, 0x1, 0x8, 0x0, 0x634b, 0x101, 0x8, 0xf, 0xe21f, 0xe, 0x0, 0x4, 0x9, 0x1, 0x6, 0x2, 0x9, 0x6, 0x6, 0x8, 0xfffffffe, 0x0, 0x80000001, 0xfdd, 0x8, 0x6be1, 0x7, 0x1000, 0x5, 0x5, 0x9, 0x7, 0xff, 0x0, 0x2, 0x6310, 0x20e7, 0x8, 0x3, 0x1000, 0xe7d8, 0x1, 0x800, 0x0, 0x9, 0x101, 0x6, 0x9, 0x6, 0x7c, 0x8, 0x8, 0x5c, 0x9, 0x4, 0x4, 0x6000, 0xfffffff8, 0x5, 0xffffffff, 0x4c10, 0x668, 0x8, 0x2, 0x80, 0x7762, 0x7, 0x100, 0x8, 0xb, 0x6, 0xfff00000, 0x0, 0x3, 0x1, 0x4, 0x0, 0x7, 0x7, 0x7, 0x4, 0xd2, 0x2, 0x9, 0x8, 0x2, 0x6, 0xf, 0xffff, 0xa, 0x5, 0x6fd, 0xfffffff7, 0x8001, 0x31, 0x4, 0x7ff, 0x2, 0x1, 0xffff, 0x4, 0x5, 0x96, 0xf, 0x99, 0xc348, 0xfffffe01, 0xdb, 0x0, 0xa35, 0xd123, 0xc, 0x3, 0x3, 0x4, 0x9, 0x6, 0x4, 0x3, 0x5, 0x6, 0xde43, 0xf6, 0x1, 0x4, 0x423, 0x8, 0x5, 0x1, 0x0, 0x7, 0x0, 0x5, 0x9, 0x1, 0x1, 0xfffffeff, 0x3, 0x8000, 0x7, 0x10001, 0x5, 0x1, 0x3, 0x1, 0x9, 0xfff, 0x7, 0x8, 0x6, 0x0, 0x7, 0xe, 0x959, 0x6, 0x1, 0xffffff01, 0x31cb, 0x9, 0x8, 0x3, 0x7fe00000, 0x10001, 0x8, 0x80000000, 0x9, 0x200, 0x40, 0x101, 0x0, 0x4, 0xb, 0x2, 0x80, 0x6, 0x5, 0x5, 0x4, 0xeb7, 0x4, 0x3, 0x3, 0xfffffff1, 0x123ccf78, 0x77d1, 0x8f, 0xfffffff9, 0x8, 0x9, 0x9, 0xa, 0x5, 0x416, 0xf, 0x7f80, 0x7, 0xa, 0x9, 0x8933, 0x6, 0x81, 0x7, 0x6, 0x9, 0x8000, 0x2, 0x81, 0x9, 0x7fffffff, 0x5, 0x7, 0x0, 0x6, 0x9, 0xa8a, 0x5, 0x2, 0xe7e, 0x7, 0xcc5d, 0x0, 0x9e3, 0xffffffff, 0x1, 0x8, 0x7fff, 0x3, 0x6, 0x5, 0x9, 0x7, 0x101, 0x0, 0x3, 0x7ff, 0x3, 0x3ff, 0x468, 0x1, 0xdf, 0x4, 0x0, 0x7, 0x9, 0x1, 0x1, 0x7, 0x3, 0x6, 0x80000000, 0x9, 0x33334fb3, 0x8, 0x3, 0x3, 0x4, 0x4, 0x5, 0x7fff, 0x12, 0x0, 0x3, 0x9, 0x3, 0x2, 0x6, 0x7, 0x0, 0x1, 0x8, 0x4, 0x6, 0x7, 0x55, 0x1, 0xb90, 0xfffff0f1, 0x5, 0x4300, 0x7fffffff, 0x4, 0x47, 0x7b0, 0x8001, 0x0, 0xff, 0x400, 0x8, 0x5, 0xca4, 0x8, 0x9247, 0xacc9, 0x0, 0x0, 0xfffffffa, 0x0, 0x7, 0x6, 0x2, 0x4, 0x5, 0x8, 0x2, 0xfffffffa, 0x2, 0x3, 0x1, 0x6, 0x0, 0x8, 0x8, 0x3, 0x2, 0xfffffeb4, 0x32, 0xe9a7, 0x9, 0xffffffff, 0x1000, 0x3, 0x40, 0x61, 0x3, 0xd, 0x9, 0x0, 0x2, 0x3, 0x9, 0x7, 0x1, 0x1000, 0x3, 0xe0ea, 0xccfb, 0x6, 0xe, 0x10, 0x4, 0x8, 0x80, 0x4, 0x25, 0x5, 0x5, 0x6, 0xfffffffb, 0x2, 0x0, 0x9, 0x8, 0x384, 0x7ff, 0x4, 0x4, 0x9a, 0x3, 0x0, 0xc07, 0x80, 0x5, 0x10, 0x9, 0xffffffff, 0x1, 0x5, 0x0, 0x3bba, 0x7, 0x2, 0x9, 0xc0fb, 0x400, 0xff, 0xfffffaec, 0x2e2a, 0x8, 0x4, 0x65e, 0x3ae9, 0x1, 0x3, 0x2e, 0x4, 0x7, 0x5, 0x5, 0xf5, 0x8, 0xa2, 0x2, 0xfffffff8, 0x8, 0x0, 0x5, 0x2, 0x2, 0x6, 0x0, 0x7, 0x2, 0x5, 0x7, 0x6, 0x80, 0x4], 0x4, 0x400, 0xa9f}) connect$pppoe(0xffffffffffffffff, &(0x7f0000000040)={0x18, 0x0, {0x1, @remote, 'ip6gretap0\x00'}}, 0x1e) ioctl$PPPOEIOCSFWD(0xffffffffffffffff, 0x4008b100, &(0x7f0000000000)={0x18, 0x0, {0x2, @local, 'syzkaller0\x00'}}) futex(&(0x7f0000000280)=0x1, 0x6, 0x2, &(0x7f0000000b00), 0x0, 0x2) syz_open_procfs(0x0, &(0x7f0000000000)='net/vlan/vlan0\x00') socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) socket$packet(0x11, 0x3, 0x300) r3 = creat(&(0x7f00000005c0)='./file0\x00', 0x0) close(r3) mount$9p_fd(0x0, 0x0, &(0x7f00000007c0), 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRESHEX=r3, @ANYBLOB="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", @ANYRESHEX=r1, @ANYBLOB=',\x00']) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000032000107fcffffff0000000006"], 0x14}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000}, 0x0) 6.063536001s ago: executing program 7 (id=802): socket$inet6(0xa, 0x3, 0x7) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x18) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000940)=ANY=[@ANYBLOB="180700"/15, @ANYRES32=r4], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NFULNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r5, 0x0, 0x0}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000900)={'bridge0\x00', @remote}) r7 = ioctl$KVM_CREATE_VCPU(0xffffffffffffffff, 0xae41, 0x1) ioctl$KVM_NMI(r7, 0xae9a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000001c0000001c00000003000000010000000000000e0200000000000000000000000000000504000000002e"], 0x0, 0x37, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)={0x1c, r9, 0x701, 0x0, 0x0, {0x16}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x1c}}, 0x0) 5.615379366s ago: executing program 0 (id=803): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) getpid() syz_open_dev$usbfs(0x0, 0x5, 0x1072c1) r0 = syz_open_dev$sndctrl(&(0x7f0000000100), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_SUBSCRIBE_EVENTS(r0, 0xc0045516, &(0x7f00000000c0)=0x81) getpid() ioctl$SNDRV_CTL_IOCTL_ELEM_ADD(r0, 0xc1105517, 0x0) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000000)='comm\x00') mknod$loop(&(0x7f0000000180)='./file0\x00', 0x6000, 0x0) r2 = creat(&(0x7f00000000c0)='./file0\x00', 0x0) r3 = dup2(r2, r2) ioctl$BLKTRACESETUP(r3, 0xc0481273, &(0x7f00000001c0)={'\x00', 0x40, 0xa, 0x401, 0x40000004, 0x10}) ioctl$BLKTRACESTART(r2, 0x1274, 0x0) ioctl$BLKTRACESETUP(r3, 0x1276, 0x0) r4 = syz_io_uring_setup(0x110, &(0x7f0000000140)={0x0, 0xfad6}, &(0x7f0000000240)=0x0, &(0x7f0000000280)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r5, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r5, r6, &(0x7f00000002c0)=@IORING_OP_POLL_ADD={0x6, 0x0, 0x0, @fd_index=0x3}) io_uring_enter(r4, 0x47f6, 0x0, 0x0, 0x0, 0x0) 5.486155638s ago: executing program 6 (id=804): timer_create(0x3, 0x0, &(0x7f0000044000)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100008b}, 0x0) sched_setscheduler(0x0, 0x1, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r0 = getpid() sched_setscheduler(r0, 0x1, &(0x7f0000000100)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mkdir(&(0x7f00000020c0)='./file0\x00', 0x0) mount(0x0, 0x0, 0x0, 0x0, 0x0) mknod(0x0, 0x8001420, 0x0) r3 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r3, 0x1, 0x0, 0x0, 0x0) r4 = fsopen(&(0x7f0000000040)='afs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r4, 0x1, &(0x7f0000000000)='source', &(0x7f0000000840)='%\\,:\x85X\\\x03\xa6\xd7}\xcd\xeb*\xb1\xa8\xb7\x81\xc8\xcbR\xa8?\x97 \xcbz&\x17\xa4\xfd^\xe1I\x11X\x90\x03\xb7W\x05\xb0\x99\x10F0\xb5YP9\xc3\xe2M\xaa\x81\xfev:\xe40\x9e\xdb\x98\xb4\xd0\xdcE\x14\x910\x1b.G\xab\x86\xdfy\xe6\xde11_H]\xe2\xc3\xb2fa\x7f\x8c\xf3\xc6\x85\xc9\xd6j\xff\xaa\xdbWD\x87\xe3\\mUSy\x0f\x82qW\fE\xd15ec>:D+', 0x0) mount$afs(&(0x7f0000000040)=ANY=[@ANYBLOB='#ayz1:'], &(0x7f0000000080)='./file0\x00', &(0x7f00000000c0), 0x0, 0x0) r5 = socket(0x25, 0x1, 0x0) recvmsg$can_raw(r5, &(0x7f0000001400)={0x0, 0x0, 0x0}, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_SIOCGIFCONF(r6, 0x8912, &(0x7f0000000100)=@buf={0xcc, &(0x7f0000000000)="e973a18482b733ac10e16ccba6c3fb74be6ac96eed692776d3a02d8daaf6c9a4cd78b826cea4dd108d8ca293cb3c65b58ab99d56566a11a31f0a7c38610824eb38cf01f9267d91b0c5bce003b6fe84b3aa7b35eb4ed5c85e88ae5c03def8e1a1800da6605b658d88d7e194207728baf0f020fde6d8bc39c30aeb3eb348989a45da74542f937b4b2053f770cd5fcffc0272ff359efb85685a7f6c77d767ac520e7c631b9fa043630b4d9488b9523bc01d78ba540a26cdb741bd997aa02a7c9a8d19e324f91970ed2811d456ab"}) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000200)={'netdevsim0\x00', &(0x7f0000000280)=@ethtool_pauseparam={0x13}}) r7 = memfd_secret(0x0) fchmod(r7, 0x134) 4.899820008s ago: executing program 4 (id=805): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="18001a0000002000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b7000000000000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) r6 = openat$uhid(0xffffffffffffff9c, 0x0, 0x802, 0x0) r7 = syz_open_procfs(0x0, &(0x7f0000000200)='maps\x00') sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={0x0, 0xa0}}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_BEARER_ENABLE(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="99289ba97c5d48e905", @ANYRESOCT=r3, @ANYRES32, @ANYRESHEX=r5, @ANYRES8=r2, @ANYRES32=r6, @ANYRESHEX=r6, @ANYRES32=r6], 0x6c}, 0x1, 0x0, 0x0, 0x80}, 0x0) r9 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r9, @ANYBLOB="140001"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) sendmmsg(r8, &(0x7f0000000000), 0x4000000000001f2, 0x0) r10 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x2) r11 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r10, &(0x7f0000000040)={0x1000000d}) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="40000000200001002abd7000ffe3e264800a57a88ed6dbdf250a801007130000040500000008001000b202000014000100fe80000000000000000300000000003f2af09b533925c65117c38bc63661d4b316c6321d54890ecaf3960ae7639c1e9b84cbefdbb9541298ba07007a58f78686b67a804ed23c226d3a2901a44463efab16653438a1be7ee5636274f2c417f3dd20ac60bcbd5ac84bd43b8fdd140a5e65b326d2ad304e89bca5e15850f43f26f295"], 0x40}}, 0x40100) ioctl$KVM_SET_USER_MEMORY_REGION(r7, 0xc0686611, &(0x7f0000000180)={0x68, 0x0, 0x3f, 0x2000, &(0x7f00001b6000/0x2000)=nil}) socket$nl_generic(0x10, 0x3, 0x10) ioctl$UFFDIO_API(0xffffffffffffffff, 0xc018aa3f, &(0x7f00000000c0)={0xaa, 0x749}) 4.717141079s ago: executing program 7 (id=806): ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8931, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 3.768954253s ago: executing program 4 (id=807): r0 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file1\x00', 0x143042, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) recvfrom$unix(r0, &(0x7f0000000100)=""/45, 0x2d, 0x1, 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, 0x0) r2 = socket$kcm(0xa, 0x3, 0x3a) sendmsg$kcm(r2, 0x0, 0x60) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x18) ioctl$SNDRV_PCM_IOCTL_PREPARE(r0, 0x4140, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) sched_setaffinity(0x0, 0xfffffef7, &(0x7f0000000740)=0x410000002) socket$inet6_tcp(0xa, 0x1, 0x0) syz_io_uring_setup(0x10d, &(0x7f0000000200)={0x0, 0x0, 0x800, 0xfffffffd}, &(0x7f0000000340), &(0x7f0000000280)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000feffff10850000000700000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f00000012c0)={r4, 0x0, 0x30, 0x0, @val=@uprobe_multi={&(0x7f0000000300)='./file0\x00', &(0x7f00000002c0)=[0x20000000245c], 0x0, 0xffffffffffffffff, 0x20000294, 0x1}}, 0x3c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) write$UHID_CREATE2(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x118) mount(&(0x7f0000000080)=@nbd={'/dev/nbd', 0x0}, &(0x7f0000000040)='./file1\x00', &(0x7f00000000c0)='exfat\x00', 0x0, 0x0) 3.712402012s ago: executing program 7 (id=808): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) openat$vga_arbiter(0xffffffffffffff9c, &(0x7f0000000000), 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1900000004000000080000000600000000000000", @ANYRES32, @ANYBLOB="0000000000000000008000000000fc0000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r5 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$KVM_CREATE_VM(r5, 0xae01, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x44}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="6400000010000305160000000000000000008847", @ANYRES32=0x0, @ANYBLOB="00000000000000004400128009000100626f6e6400000000340002800500010004000000050016000000000008001c000000000005000c00000000000a001a"], 0xc3}, 0x1, 0x100000000000000}, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f0000000580), 0x0, 0x0) socket(0x10, 0x3, 0x0) keyctl$instantiate(0xc, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB='new user:syz 000000000000000020'], 0x2a, 0xfffffffffffffffc) r7 = syz_open_procfs(0x0, &(0x7f0000000380)='net/wireless\x00') sysfs$2(0x2, 0xffffffffffffffff, &(0x7f0000000480)=""/190) kexec_load(0x0, 0x0, 0x0, 0x0) preadv(r7, &(0x7f00000002c0)=[{&(0x7f0000000680)=""/109, 0x6d}, {&(0x7f00000001c0)=""/226, 0xe2}, {&(0x7f00000003c0)=""/192, 0xc0}], 0x3, 0x2, 0x1) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="140100001400b99f000000000000c04b06"], 0x114}], 0x1}, 0x0) 3.088422514s ago: executing program 0 (id=809): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20000008b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$nullb(0xffffffffffffff9c, &(0x7f0000000040), 0x147c40, 0x0) preadv2(r3, &(0x7f0000000080)=[{&(0x7f0000001200)=""/4096, 0xffe00}], 0x5, 0x2000000, 0x0, 0x0) 1.939018544s ago: executing program 7 (id=810): r0 = syz_usb_connect$hid(0x5, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x110, 0x0, 0x0, 0x0, 0x40, 0x46a, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x8, 0x2, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0xaa, 0x1, {0x22, 0x2}}, {{{0x9, 0x5, 0x81, 0x3, 0x8, 0x6, 0xfe, 0x5}}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, &(0x7f0000000000)={0x24, 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="002202"], 0x0}, 0x0) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000980)={0x2}, 0x10) write(r1, &(0x7f0000000300)="240000001a005f0214f9f4070d0903001f000000fe050000000200000800040001000000", 0x24) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, r2) r3 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000340)=ANY=[@ANYBLOB="12010000000000406c256d0000000000000109022400010000000009040000010300000009210000000122050009058103"], 0x0) syz_usb_control_io$hid(r3, 0x0, 0x0) syz_usb_control_io(r3, &(0x7f0000000540)={0x2c, &(0x7f0000000200)={0x0, 0x0, 0x5, {0x5, 0x0, "a8c6df"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r4 = syz_usb_connect$hid(0x0, 0x36, &(0x7f0000000000)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x40, 0x56a, 0x331, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x22, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r4, 0x0, 0x0) syz_usb_control_io$hid(r4, &(0x7f00000002c0)={0x24, 0x0, 0x0, &(0x7f0000000200)={0x0, 0x22, 0x5, {[@global=@item_4={0x3, 0x1, 0x1, "67080109"}]}}, 0x0}, 0x0) clock_gettime(0x0, 0x0) select(0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_control_io$hid(r3, &(0x7f0000000100)={0x24, 0x0, &(0x7f0000000800)={0x0, 0x3, 0x2, @string={0x1}}, 0x0, 0x0}, 0x0) syz_usb_control_io$cdc_ncm(r3, 0x0, 0x0) 1.835910033s ago: executing program 4 (id=811): r0 = socket$kcm(0x10, 0x100000000002, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0xe, &(0x7f0000001100)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffffffffffe19, 0x0, 0xffffffffffffffff, 0x54, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000040)=r1, 0x4) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x6, 0x8, &(0x7f0000006680)) r2 = openat$ttyprintk(0xffffffffffffff9c, 0x0, 0x8801, 0x0) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000340)={{0x80}, 'port0\x00', 0x39f494df748967f7, 0x0, 0x0, 0x0, 0xffffffff}) ioctl$SNDRV_SEQ_IOCTL_CREATE_PORT(0xffffffffffffffff, 0xc0a85320, &(0x7f0000000180)={{0x80, 0x80}, 'port0\x00', 0xbf00, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x5}) ioctl$TCSETAF(r2, 0x5408, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x7b, 0x3, "f6a6946c9832508c"}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c68a67a1f0000000bb84841d9010200000000000000000000389619a94df396797a3000000000050081003de02fa454624e9fb49e573307f807000000300008800c00078007001a00242e0000100007800c0018400000001000000009100007800c001b40000000000000001004"], 0x5c}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d000701000000000000000001"], 0x528}}, 0xc000) writev(r2, &(0x7f0000000340)=[{&(0x7f0000000100)="1876d433", 0x4}], 0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x0, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_perm_addr={0x33}}) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_j1939(r4, &(0x7f0000000340)={0x1d, r5, 0x2}, 0x18) 1.612188104s ago: executing program 0 (id=812): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f0000000040)=ANY=[], &(0x7f0000000900)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)={{0x12, 0x1, 0x0, 0x0, 0xa4, 0x99, 0x40, 0x7d0, 0x4101, 0x3ffc, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x0, 0x51, 0xed, 0x15}}]}}]}}, 0x0) bpf$BPF_LINK_CREATE(0x1c, &(0x7f0000000080)={r0, 0xffffffffffffffff, 0x2d, 0x0, @val=@netfilter={0xa, 0x0, 0x5, 0x1}}, 0x20) r1 = openat$sndseq(0xffffffffffffff9c, &(0x7f0000000100), 0x0) r2 = openat$full(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) r3 = openat$sysctl(0xffffffffffffff9c, &(0x7f0000000080)='/sys/kernel/mm/ksm/run\x00', 0x1, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x200000005c832, 0xffffffffffffffff, 0x0) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) write$sysctl(r3, &(0x7f0000000000)='2\x00', 0x2) ioctl$SNDRV_SEQ_IOCTL_SET_PORT_INFO(r1, 0xc0a85320, 0x0) ioctl$IOCTL_VMCI_CTX_GET_CPT_STATE(r2, 0x7b1, &(0x7f00000001c0)={&(0x7f0000000fc0)=[0x7ff, 0x6, 0x8, 0x8000000, 0x4, 0x4, 0x9, 0x325, 0x9, 0x8000, 0x5, 0x2000000, 0x8, 0x6, 0x8, 0x3, 0x7, 0x6, 0x0, 0x4, 0x8, 0x6, 0x8, 0x7, 0xffffffff, 0x0, 0xc, 0x0, 0x622, 0x4, 0x4, 0xfffffeff, 0x1, 0xfff, 0xe323, 0xe2, 0x10001, 0xb2f, 0x1, 0xafd, 0x0, 0xfffffffb, 0x58d, 0x0, 0x6, 0x1, 0x5, 0x7, 0xa9, 0x6, 0xffffff12, 0x3, 0x4d5c, 0x401, 0xffffffd0, 0x5, 0x0, 0x8, 0x9, 0x6d, 0x3, 0x6, 0x5, 0x5, 0x1, 0x1, 0x4, 0x4, 0x95c3, 0xb013, 0x8000, 0x72f6, 0x9d9, 0x80, 0x8, 0x7, 0x3, 0x5, 0x3bb6, 0xfffffff8, 0x2, 0x6f, 0x3ff, 0x4, 0x8001, 0x40, 0x3, 0x728, 0x9, 0x9, 0x3, 0x3, 0x8, 0x7fffffff, 0x4, 0xd1, 0x3, 0x7fffffff, 0x7, 0x3, 0x3, 0xfffff000, 0x3ff, 0x0, 0x0, 0x7, 0xdc7b, 0x0, 0x3ff, 0x1, 0x7, 0x4, 0x7, 0xfffffff8, 0x0, 0x7, 0x6f107767, 0xff, 0x1, 0x4d, 0x6, 0x0, 0x3, 0x12, 0x3, 0x9, 0x400, 0x0, 0xffffff3a, 0x785a, 0x5, 0x4, 0x9, 0xffff, 0x0, 0x6, 0x6, 0x0, 0x5, 0x80, 0x2, 0x7, 0x3, 0x4, 0x2521fab1, 0x5, 0xe2, 0x7, 0xd0, 0x0, 0x0, 0xfffff41a, 0x1, 0x101, 0x7fff00, 0x1bb, 0x873, 0x3, 0x9, 0x9, 0x7b4093cd, 0x1, 0x0, 0x7ff, 0xff, 0xf, 0x7f, 0x200, 0x8, 0x8, 0x1, 0x80000000, 0x5b, 0x7, 0xfffffff6, 0xfffffffe, 0x3ff, 0x8000, 0x7, 0x8, 0x6, 0x9, 0x1, 0x6dbb, 0x81, 0x2, 0x1, 0x80000001, 0x8, 0x0, 0xb642, 0xf42d, 0x7, 0xb, 0x562, 0xd6e, 0x5, 0xf, 0x3, 0x7fffffff, 0x3, 0x5, 0x1000, 0x7, 0x5, 0xeb6b, 0x1, 0x7, 0x0, 0x4, 0x10001, 0x8, 0x7, 0x7ff, 0x3, 0x8, 0x4, 0x7fffffff, 0x9, 0x5, 0xd, 0x2c, 0x8001, 0x10000, 0x5, 0xda, 0x2, 0x401, 0x33, 0x3ff, 0x401, 0x7, 0x53ef, 0x8, 0x4, 0x200, 0xff7, 0x8, 0x5, 0x9, 0xac9, 0x1, 0x6, 0xb8, 0x6c, 0x800, 0x2, 0x3, 0x634d, 0x5, 0x1878, 0xfffffff9, 0x101, 0xc, 0x0, 0x9, 0xcb, 0x0, 0x1, 0xfff, 0x3, 0xffffffff, 0x6, 0x7fff, 0x1, 0x2, 0xfffffffe, 0x5, 0x9b4, 0xe2d, 0x5610000, 0x10, 0x1, 0x6, 0x4, 0x1, 0x7, 0x10, 0x9, 0x2, 0xc214, 0x2, 0x5601, 0xdb68, 0x5, 0x7, 0x0, 0xc22, 0x1, 0x401, 0xffff, 0x1ff, 0x7fffffff, 0x2, 0x4, 0x0, 0x400, 0x4, 0x0, 0x8, 0x6, 0x5, 0x0, 0x2, 0x401, 0x7, 0x9, 0x7, 0x7, 0x401, 0x1, 0x0, 0x76, 0x2, 0x4, 0xe83, 0xffff8190, 0x81, 0xa, 0x800, 0xc, 0x80000000, 0x6, 0x0, 0x1a4a4652, 0x3, 0x5, 0x4, 0x6, 0x0, 0xfffffffb, 0x5, 0x84b, 0xfffffc01, 0x5, 0x10001, 0x4, 0x10000000, 0x3, 0x9a81, 0x8001, 0xffffff7f, 0x8, 0x1000, 0x6, 0x4009418a, 0x1, 0x6, 0xffffffff, 0x4, 0x8, 0x5, 0x4, 0x7a72c18, 0x3, 0x401, 0x5, 0x4, 0x82, 0x9, 0x80, 0x9, 0x3, 0x180, 0x5, 0x8, 0x1, 0x2, 0x38c, 0x6, 0x5, 0x2a, 0xe508, 0x5, 0xfffffffb, 0x7a, 0x6711, 0x1, 0x32a8, 0x9, 0x4, 0x7dc, 0xc6f3, 0x7c4743c5, 0x3, 0x0, 0x3ff, 0x5d1, 0x4f, 0x7, 0x433, 0x862, 0x3aa, 0x7fff, 0x0, 0x77ea, 0xfffffe00, 0x2e0, 0x5e, 0xa77b, 0x7, 0x2, 0x6, 0x0, 0x1, 0x7, 0x5, 0xfffffff8, 0x9, 0x8, 0x4, 0x8, 0x0, 0xffff0001, 0x0, 0x5, 0x3, 0x8, 0xffffffff, 0x8, 0x4, 0x7, 0xd7, 0x3, 0x1, 0xf, 0xfff, 0xa84c, 0x8, 0x2, 0x1ff, 0x300000, 0x1, 0x2, 0x5c, 0xfb, 0x2c, 0x7, 0x6e, 0xffff, 0x5, 0xffffff41, 0xffffff62, 0x4, 0x6, 0x100, 0x3, 0xfff, 0x4, 0xfffffffb, 0x0, 0x239, 0x3, 0x3, 0x2, 0x4, 0x314364fb, 0x6, 0x1, 0x7, 0x5, 0x40, 0x3, 0x9, 0xffffffff, 0x1, 0x712ed7ed, 0x2, 0xb, 0x3, 0x7500, 0x8, 0xa, 0x8, 0xe, 0x40, 0x3, 0x6, 0x9, 0xcb, 0x80000001, 0x6, 0x0, 0x2, 0x2, 0xefe2, 0x0, 0x13c7ad53, 0xbf84, 0x463a, 0x0, 0xfffff1f3, 0x7, 0x0, 0xfffffffe, 0x6, 0x7ff, 0xb, 0x183, 0x441, 0x8000, 0xe, 0x4, 0x5, 0x3, 0x10, 0xb, 0x2, 0xffffff00, 0x8, 0x7efa, 0x4, 0x6, 0x0, 0x4, 0x7ff, 0x6, 0x8, 0x8, 0x7, 0x0, 0x7f, 0x6, 0x7, 0x9, 0x1fa4, 0x2cc, 0x9af, 0x6, 0x5, 0x6, 0x9, 0x8, 0x0, 0x4, 0x6, 0x1, 0xb87, 0xffff, 0x4, 0x9, 0x80000001, 0x1, 0x7, 0x8, 0x9, 0xfff, 0x0, 0xc00, 0x0, 0x2, 0x3, 0x8, 0x40, 0x3b6d, 0xab4, 0x1ff, 0x80000001, 0x6, 0xffffff00, 0x7, 0xf, 0x3, 0xffff, 0x401, 0x10, 0xfffff7d3, 0x8, 0x1, 0xa4e, 0x3, 0x8, 0x8, 0x5, 0x5, 0x5, 0x4, 0x81, 0x7, 0x1, 0x6, 0xffff0000, 0x101, 0x2, 0x4, 0x2, 0x9, 0x2, 0x4ba, 0x3ff, 0x10000, 0x2, 0x1, 0x1, 0x7, 0x7, 0x1, 0x56, 0xa, 0x3ff, 0xa, 0x81, 0xcdd, 0x5, 0x3, 0xfff, 0x3, 0x8, 0x847, 0x15, 0x6f8, 0x5, 0x4, 0x5, 0x3, 0x0, 0x4, 0x9, 0x3, 0xffffeb66, 0x814, 0x7ff, 0xffff5084, 0x3, 0x0, 0x2, 0x9, 0x7, 0x2, 0x6, 0x3, 0x26e8, 0x80000000, 0x0, 0x1, 0x0, 0x4, 0x0, 0x2, 0x5, 0x7, 0x0, 0x4, 0x9, 0x9, 0x8001, 0xfff, 0x2443028c, 0x1, 0xfffffffe, 0xffff, 0xa, 0x1, 0x9, 0x5, 0x6, 0x3, 0x5, 0x1, 0x2, 0x1, 0x8, 0x7, 0xc, 0x8ffd, 0x4d828400, 0x2, 0x7, 0x3ae, 0x80000001, 0x7, 0x1, 0x23c901f9, 0x4, 0xe0000000, 0xa, 0xfffffff8, 0x8001, 0x1000, 0xe387, 0x1, 0xf, 0xd55, 0xe, 0x72f, 0x2, 0x3ff, 0x200, 0x1000, 0x3, 0x669, 0x7, 0x3, 0x3, 0x9f, 0xc, 0x2, 0x0, 0xcbd8, 0x5, 0x400, 0x7, 0x1, 0xc6, 0x5a1, 0x4, 0x3, 0x6, 0x8001, 0x401, 0xf, 0x7, 0x6, 0x1, 0x6, 0x9, 0x0, 0x6, 0x2, 0x1, 0x101, 0x5, 0x4393, 0xfffffffd, 0x101, 0xfffffffd, 0x7fffffff, 0x0, 0x9, 0x6, 0x4, 0xfffeffff, 0x1ff, 0x5, 0x1, 0xfffffffd, 0x40, 0x3c8, 0x7, 0x4, 0x10d, 0x4, 0x8, 0x7, 0x8, 0x10000, 0x401, 0xa, 0x2, 0xfffffffc, 0x3, 0x0, 0x20c, 0x10, 0xe, 0x0, 0xc000, 0xfffffffa, 0x2, 0x0, 0x5, 0xa, 0x5, 0x200, 0x5, 0x5, 0x5, 0x0, 0xe, 0xad92, 0x1, 0xf, 0x40, 0xa3, 0x5a, 0x3, 0x800, 0x7, 0x4891, 0x8, 0xb308, 0x7, 0x7ff, 0xafd7, 0x380, 0x7, 0x3ff, 0x6, 0x100, 0x8ef, 0xffffffff, 0x100, 0x3, 0x8, 0x8, 0xc000, 0x6, 0x1, 0x5, 0x8dd, 0x7, 0x7, 0x4, 0xa60, 0x2, 0x1, 0x5, 0x5, 0x3, 0x9, 0x68, 0x1, 0x4, 0x40, 0x70, 0x10001, 0x1, 0x6, 0x9, 0x9, 0xfc, 0xa5, 0x3ff, 0x3, 0x7, 0x7fff, 0x1ff, 0x8, 0xffffff38, 0x256, 0x4, 0xff, 0x6, 0x3, 0x0, 0x0, 0x9, 0x3, 0x0, 0x6, 0x0, 0x10000, 0xef, 0xff, 0x200, 0x0, 0x3ff, 0x2, 0x200, 0xfffffffd, 0x10, 0x1, 0x4, 0x8, 0x0, 0x9, 0x5e, 0x3, 0x7, 0xf0f, 0xfffffff8, 0x7, 0x3, 0x9, 0x2, 0x10001, 0xfffffffb, 0x5, 0x3, 0x8, 0x7, 0x7547, 0x2, 0x5, 0x80, 0x4, 0x3, 0x1, 0x2, 0x6, 0xffffff81, 0x4, 0x7, 0x8a, 0x8, 0x5, 0x9, 0x2, 0xffffffff, 0x5efe, 0x9, 0x5, 0x6, 0x3, 0xfffffff1, 0x2, 0x9, 0x68, 0xfff, 0x6, 0x80000001, 0x1, 0xffffffff, 0x1, 0x612, 0x0, 0x155, 0xffffffff, 0x9, 0x5, 0x9, 0x0, 0x1, 0x1, 0x2, 0x0, 0x5, 0x6, 0x14f, 0x10001, 0x8, 0x73fce07a, 0x78, 0x3, 0x6, 0xfffffffa, 0x8, 0x3, 0xc, 0x7ff, 0x1b, 0x83, 0x6, 0x0, 0x2, 0x101, 0x7, 0x7f, 0x202, 0x6, 0x9, 0x8, 0x0, 0x6, 0x8a, 0x8001, 0x9, 0x80000001, 0xe5, 0x3, 0x2, 0x96f5, 0xfff, 0x8001, 0x628, 0x1, 0xb, 0x4, 0x4, 0x6a4, 0xfffffffc, 0x4, 0x7, 0x1000, 0xb379, 0x4, 0x4, 0x1, 0x7, 0x6, 0xffffffff, 0x7, 0x1, 0x67c0, 0x101, 0x1, 0x401, 0xfff, 0xe, 0x9, 0x8, 0xf, 0xffff, 0xf3c, 0xc7, 0x7ff, 0x6, 0x5da29b13, 0x4, 0x8, 0x400, 0x6, 0xff, 0x8, 0x3ff, 0x8, 0x5, 0x1, 0x4, 0x6, 0x5, 0x0, 0x9, 0x101, 0x7, 0x2, 0xfffffffe, 0x5, 0xc000000, 0x2, 0x9, 0xf16, 0xa, 0x5, 0x2, 0x9, 0xffff, 0xcc56, 0x8, 0x8, 0x1d08, 0xfff, 0x1, 0x400], 0x1, 0x400, 0x1000}) r4 = socket$inet6(0xa, 0x200000000003, 0x87) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x4d, @remote, 0x6f55}, 0x1c) syz_emit_ethernet(0xf2, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6030bb0000bc2b0000000000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) readv(r1, &(0x7f0000000080)=[{&(0x7f0000002600)=""/46, 0x2e}], 0x1) close_range(r1, r1, 0x0) r5 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) r6 = socket$igmp6(0xa, 0x3, 0x2) socket(0x2b, 0x800, 0x4) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r5, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x44004) 1.539631104s ago: executing program 4 (id=813): r0 = gettid() syz_emit_ethernet(0x375, &(0x7f00000003c0)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "0200", 0x33f, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x10, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030003004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af0502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c61bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee4df24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c6e119f0478bcde9ed5749dd7e4b326390300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c63"}, {0x19, 0x7, "b8a3e10000a3e1100000006f00ffc0ffff00000000600000ff0bc0fe000000000000000000000000d9a0274400"/55}, {0x0, 0x11, "3f14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e2eeb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05"}]}}}}}}, 0x0) timer_create(0x0, &(0x7f0000533fa0)={0x0, 0x21, 0x800000000004, @tid=r0}, &(0x7f0000bbdffc)) timer_settime(0x0, 0x0, &(0x7f0000000280)={{0x0, 0x989680}, {0x0, 0x989680}}, 0x0) futex_waitv(&(0x7f0000001080)=[{0x3, &(0x7f0000001040)=0x3, 0x82}], 0x1, 0x0, &(0x7f0000001100)={0x77359400}, 0x1) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) capset(&(0x7f0000000280)={0x20071026}, &(0x7f0000000340)) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f00000001c0)={0x1, &(0x7f0000000100)=[{}]}) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1, 0x3, &(0x7f00000002c0)=ANY=[], 0x0, 0x7, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r1, 0x4601, &(0x7f0000000100)={0x24d, 0xa, 0x0, 0x80, 0x3e, 0x180, 0x8, 0x0, {0x0, 0x300}, {}, {}, {}, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8}) 1.093929252s ago: executing program 6 (id=814): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000640)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$qrtr(0x2a, 0x2, 0x0) creat(&(0x7f0000000140)='./bus\x00', 0x0) r0 = open(&(0x7f0000000380)='./bus\x00', 0x0, 0x0) r1 = creat(&(0x7f0000000200)='./bus\x00', 0x84) syz_open_procfs(0x0, &(0x7f0000000400)='net/snmp6\x00') socket$inet_udp(0x2, 0x2, 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb703000008000000b703000000000020850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x18) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(0xffffffffffffffff, 0x111, 0x3, 0x20000000, 0x4) r5 = openat$cuse(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) write$FUSE_NOTIFY_STORE(r1, &(0x7f0000000240)=ANY=[@ANYBLOB, @ANYRES32=r0], 0x2b) sendfile(r5, r0, 0x0, 0x4000000053d2) 486.127437ms ago: executing program 4 (id=815): r0 = syz_usb_connect(0x0, 0x36, &(0x7f0000000280)={{0x12, 0x1, 0x141, 0xf2, 0xc5, 0x96, 0x20, 0x16d0, 0x10b8, 0xde8e, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0x0, 0x2, 0x2, 0x0, 0x83, 0xec, 0x0, [], [{{0x9, 0x5, 0x6, 0x2, 0x200, 0x2, 0x0, 0xa}}, {{0x9, 0x5, 0x82, 0x2, 0x200, 0x0, 0x1, 0x10}}]}}]}}]}}, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000780)={0x84, &(0x7f0000000000)={0x0, 0x30, 0x9, "00004700000040f400"}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socket$inet(0xa, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x300000000000000, &(0x7f0000000280)=@base={0x18, 0x4, 0x41, 0x0, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4003, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 0s ago: executing program 6 (id=816): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='sched_switch\x00'}, 0x18) syz_open_procfs(0xffffffffffffffff, &(0x7f00000001c0)='environ\x00') r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=@delpolicy={0x5c, 0x14, 0x1, 0x0, 0x25dfdbfb, {{@in=@multicast1, @in6=@loopback, 0x0, 0x0, 0x7, 0x4, 0x0, 0x80, 0xa0}}, [@mark={0xc, 0x15, {0x35075c, 0x2}}]}, 0x5c}}, 0x4004040) socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000180)=0x7ff, 0x4) kernel console output (not intermixed with test programs): 168.967112][ T46] gspca_spca500: reg write: error -32 [ 168.968193][ T46] gspca_spca500: reg write: error -32 [ 169.207582][ T29] audit: type=1326 audit(1734835146.135:458): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 169.207627][ T29] audit: type=1326 audit(1734835146.135:459): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 169.207659][ T29] audit: type=1326 audit(1734835146.135:460): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 169.207691][ T29] audit: type=1326 audit(1734835146.135:461): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 169.207722][ T29] audit: type=1326 audit(1734835146.135:462): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 169.207753][ T29] audit: type=1326 audit(1734835146.135:463): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 169.207784][ T29] audit: type=1326 audit(1734835146.144:464): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7516 comm="syz.3.375" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 169.301917][ T7524] netlink: 20 bytes leftover after parsing attributes in process `syz.0.377'. [ 169.432124][ T7530] Invalid source name [ 169.508034][ T46] usb 6-1: USB disconnect, device number 7 [ 169.602030][ T7530] UBIFS error (pid: 7530): cannot open "/dev/sg0", error -22 [ 169.772391][ T7535] FAULT_INJECTION: forcing a failure. [ 169.772391][ T7535] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.782721][ T7538] netlink: 20 bytes leftover after parsing attributes in process `syz.4.381'. [ 169.796374][ T7535] CPU: 0 UID: 0 PID: 7535 Comm: syz.0.380 Not tainted 6.13.0-rc3-syzkaller-00258-ge84a3bf7f4aa #0 [ 169.812344][ T7535] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.822403][ T7535] Call Trace: [ 169.825683][ T7535] [ 169.828610][ T7535] dump_stack_lvl+0x16c/0x1f0 [ 169.833298][ T7535] should_fail_ex+0x497/0x5b0 [ 169.837986][ T7535] _copy_to_user+0x32/0xd0 [ 169.842403][ T7535] put_itimerspec64+0x13d/0x1d0 [ 169.847259][ T7535] ? __pfx_put_itimerspec64+0x10/0x10 [ 169.852642][ T7535] __x64_sys_timer_settime+0x23b/0x2c0 [ 169.858114][ T7535] ? __pfx___x64_sys_timer_settime+0x10/0x10 [ 169.864110][ T7535] ? ksys_write+0x1ba/0x250 [ 169.868625][ T7535] do_syscall_64+0xcd/0x250 [ 169.873131][ T7535] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.879029][ T7535] RIP: 0033:0x7efce3d85d29 [ 169.883447][ T7535] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.903062][ T7535] RSP: 002b:00007efce4b2d038 EFLAGS: 00000246 ORIG_RAX: 00000000000000df [ 169.911484][ T7535] RAX: ffffffffffffffda RBX: 00007efce3f75fa0 RCX: 00007efce3d85d29 [ 169.919465][ T7535] RDX: 0000000020000100 RSI: 0000000000000001 RDI: 0000000000000000 [ 169.927442][ T7535] RBP: 00007efce4b2d090 R08: 0000000000000000 R09: 0000000000000000 [ 169.935415][ T7535] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000001 [ 169.943391][ T7535] R13: 0000000000000000 R14: 00007efce3f75fa0 R15: 00007fff8cb767a8 [ 169.951377][ T7535] [ 171.074235][ T9] usb 5-1: new high-speed USB device number 21 using dummy_hcd [ 171.240655][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 171.270638][ T9] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 171.311891][ T9] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 171.405798][ T9] usb 5-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 171.517662][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 171.548399][ T9] usb 5-1: config 0 descriptor?? [ 171.576703][ T46] usb 3-1: new high-speed USB device number 19 using dummy_hcd [ 171.737205][ T46] usb 3-1: Using ep0 maxpacket: 8 [ 171.746299][ T46] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 171.756094][ T46] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 171.798236][ T46] usb 3-1: config 0 has no interface number 0 [ 171.826076][ T46] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has an invalid bInterval 0, changing to 7 [ 171.893431][ T46] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0x8A has invalid wMaxPacketSize 0 [ 171.958072][ T46] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 171.986146][ T46] usb 3-1: config 0 interface 52 has no altsetting 0 [ 172.007903][ T46] usb 3-1: New USB device found, idVendor=06cb, idProduct=0003, bcdDevice=e8.00 [ 172.021424][ T46] usb 3-1: New USB device strings: Mfr=22, Product=149, SerialNumber=35 [ 172.028364][ T9] isku 0003:1E7D:319C.000A: invalid report_size 23040 [ 172.036748][ T9] isku 0003:1E7D:319C.000A: item 0 2 1 7 parsing failed [ 172.040732][ T46] usb 3-1: Product: syz [ 172.043959][ T9] isku 0003:1E7D:319C.000A: parse failed [ 172.053748][ T9] isku 0003:1E7D:319C.000A: probe with driver isku failed with error -22 [ 172.062722][ T46] usb 3-1: Manufacturer: syz [ 172.067818][ T46] usb 3-1: SerialNumber: syz [ 172.107752][ T46] usb 3-1: config 0 descriptor?? [ 172.112827][ T6607] usb 4-1: new high-speed USB device number 22 using dummy_hcd [ 172.293244][ T6607] usb 4-1: Using ep0 maxpacket: 16 [ 172.303173][ T6607] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 172.312303][ T6607] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 172.317319][ T8] usb 5-1: USB disconnect, device number 21 [ 172.320384][ T6607] usb 4-1: Product: syz [ 172.330417][ T6607] usb 4-1: Manufacturer: syz [ 172.335043][ T6607] usb 4-1: SerialNumber: syz [ 172.375037][ T6607] usb 4-1: config 0 descriptor?? [ 172.381433][ T7572] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 172.406089][ T7572] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 172.658461][ T6607] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 172.665932][ T6607] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 172.678625][ T6607] usb 4-1: USB disconnect, device number 22 [ 173.265904][ T9] usb 5-1: new high-speed USB device number 22 using dummy_hcd [ 173.406680][ T5823] Bluetooth: hci2: command 0x0401 tx timeout [ 173.413922][ T7569] Bluetooth: hci2: Opcode 0x0401 failed: -110 [ 173.428245][ T46] usb 3-1: Can not set alternate setting to 1, error: -71 [ 173.446219][ T46] synaptics_usb 3-1:0.52: probe with driver synaptics_usb failed with error -71 [ 173.469070][ T46] usb 3-1: USB disconnect, device number 19 [ 173.574860][ T7638] xt_connbytes: Forcing CT accounting to be enabled [ 173.611470][ T7638] Cannot find add_set index 0 as target [ 173.702269][ T9] usb 5-1: New USB device found, idVendor=20b7, idProduct=1540, bcdDevice=b7.5a [ 173.711514][ T9] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 173.727081][ T9] usb 5-1: Product: syz [ 174.424415][ T9] usb 5-1: Manufacturer: syz [ 174.429095][ T9] usb 5-1: SerialNumber: syz [ 174.445934][ T9] usb 5-1: config 0 descriptor?? [ 175.126606][ T9] usb 5-1: Firmware: major: 0, minor: 248, hardware type: UNKNOWN (5) [ 175.284228][ T29] kauditd_printk_skb: 22 callbacks suppressed [ 175.284242][ T29] audit: type=1400 audit(1734835151.850:487): avc: denied { setopt } for pid=7659 comm="syz.3.401" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 175.310641][ C1] vkms_vblank_simulate: vblank timer overrun [ 175.321717][ T7664] netlink: 1296 bytes leftover after parsing attributes in process `syz.3.401'. [ 175.341692][ T7664] openvswitch: netlink: Flow key attr not present in new flow. [ 175.721967][ T9] usb 5-1: failed to fetch extended address, random address set [ 175.729760][ T29] audit: type=1400 audit(1734835152.252:488): avc: denied { append } for pid=7626 comm="syz.4.394" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 175.783066][ T9] usb 5-1: atusb_probe: initialization failed, error = -524 [ 175.814548][ T29] audit: type=1400 audit(1734835152.261:489): avc: denied { read } for pid=7626 comm="syz.4.394" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 175.831936][ T9] atusb 5-1:0.0: probe with driver atusb failed with error -524 [ 176.008576][ T9] usb 5-1: USB disconnect, device number 22 [ 177.146557][ T46] usb 3-1: new low-speed USB device number 20 using dummy_hcd [ 177.438922][ T7686] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.446603][ T7686] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.454357][ T7686] bridge0: entered allmulticast mode [ 178.304012][ T29] audit: type=1400 audit(1734835154.656:490): avc: denied { create } for pid=7698 comm="syz.4.408" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 178.357071][ T29] audit: type=1400 audit(1734835154.656:491): avc: denied { name_bind } for pid=7698 comm="syz.4.408" src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:port_t tclass=rawip_socket permissive=1 [ 178.394407][ T29] audit: type=1400 audit(1734835154.656:492): avc: denied { node_bind } for pid=7698 comm="syz.4.408" saddr=224.0.0.1 src=20004 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=rawip_socket permissive=1 [ 178.424544][ T46] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 178.427566][ T29] audit: type=1400 audit(1734835154.787:493): avc: denied { read } for pid=7698 comm="syz.4.408" name="usbmon8" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.433775][ T46] usb 3-1: config 0 has no interface number 0 [ 178.460575][ T29] audit: type=1400 audit(1734835154.787:494): avc: denied { open } for pid=7698 comm="syz.4.408" path="/dev/usbmon8" dev="devtmpfs" ino=745 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.486034][ T29] audit: type=1400 audit(1734835154.787:495): avc: denied { ioctl } for pid=7698 comm="syz.4.408" path="/dev/usbmon8" dev="devtmpfs" ino=745 ioctlcmd=0x9208 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 178.645132][ T46] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 178.656197][ T46] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 178.666943][ T46] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 178.676075][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 178.687516][ T46] usb 3-1: config 0 descriptor?? [ 178.695027][ T7679] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 178.882140][ T46] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 179.318938][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.2.404'. [ 180.877703][ T8] usb 4-1: new high-speed USB device number 23 using dummy_hcd [ 181.091510][ T8] usb 4-1: Using ep0 maxpacket: 8 [ 181.167782][ T8] usb 4-1: New USB device found, idVendor=0ccd, idProduct=00b3, bcdDevice=2d.ea [ 181.209032][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 181.230406][ T8] usb 4-1: Product: syz [ 181.234594][ T8] usb 4-1: Manufacturer: syz [ 181.260830][ T8] usb 4-1: SerialNumber: syz [ 181.265960][ T5898] usb 3-1: USB disconnect, device number 20 [ 181.288635][ T8] usb 4-1: config 0 descriptor?? [ 181.381642][ T7732] FAULT_INJECTION: forcing a failure. [ 181.381642][ T7732] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 181.395275][ T7732] CPU: 1 UID: 0 PID: 7732 Comm: syz.2.417 Not tainted 6.13.0-rc3-syzkaller-00258-ge84a3bf7f4aa #0 [ 181.405866][ T7732] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 181.416007][ T7732] Call Trace: [ 181.419281][ T7732] [ 181.422206][ T7732] dump_stack_lvl+0x16c/0x1f0 [ 181.426892][ T7732] should_fail_ex+0x497/0x5b0 [ 181.431584][ T7732] _copy_from_user+0x2e/0xd0 [ 181.436183][ T7732] copy_msghdr_from_user+0x99/0x160 [ 181.441380][ T7732] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 181.447192][ T7732] ? __pfx___lock_acquire+0x10/0x10 [ 181.452400][ T7732] ___sys_recvmsg+0xdc/0x1a0 [ 181.456993][ T7732] ? __pfx____sys_recvmsg+0x10/0x10 [ 181.462192][ T7732] ? __pfx_lock_release+0x10/0x10 [ 181.467216][ T7732] ? trace_lock_acquire+0x14e/0x1f0 [ 181.472455][ T7732] do_recvmmsg+0x2f8/0x740 [ 181.476873][ T7732] ? __pfx_do_recvmmsg+0x10/0x10 [ 181.481819][ T7732] ? vfs_write+0x306/0x1150 [ 181.486328][ T7732] ? __mutex_unlock_slowpath+0x164/0x690 [ 181.491970][ T7732] ? __fget_files+0x206/0x3a0 [ 181.496658][ T7732] __x64_sys_recvmmsg+0x239/0x290 [ 181.501692][ T7732] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 181.507259][ T7732] do_syscall_64+0xcd/0x250 [ 181.511777][ T7732] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.517679][ T7732] RIP: 0033:0x7fa9d2785d29 [ 181.518046][ T8] usb 4-1: dvb_usb_v2: found a 'TerraTec NOXON DAB Stick' in warm state [ 181.522084][ T7732] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.522108][ T7732] RSP: 002b:00007fa9d3556038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 181.522127][ T7732] RAX: ffffffffffffffda RBX: 00007fa9d2975fa0 RCX: 00007fa9d2785d29 [ 181.522139][ T7732] RDX: 0000000000000001 RSI: 0000000020000f00 RDI: 0000000000000005 [ 181.522149][ T7732] RBP: 00007fa9d3556090 R08: 0000000000000000 R09: 0000000000000000 [ 181.522160][ T7732] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 181.590543][ T7732] R13: 0000000000000000 R14: 00007fa9d2975fa0 R15: 00007ffc90d62868 [ 181.598519][ T7732] [ 181.732067][ T7741] netlink: 80 bytes leftover after parsing attributes in process `syz.4.418'. [ 182.839197][ T7765] trusted_key: syz.0.423 sent an empty control message without MSG_MORE. [ 182.854560][ T7765] IPv6: syztnl0: Disabled Multicast RS [ 182.940176][ T7769] SELinux: Context system_u:object_r:cron_spool_t:s0 is not valid (left unmapped). [ 183.204630][ T29] audit: type=1400 audit(1734835159.249:496): avc: denied { relabelto } for pid=7768 comm="syz.5.424" name=E91F7189591E9233614B dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 183.413418][ T29] audit: type=1400 audit(1734835159.314:497): avc: denied { associate } for pid=7768 comm="syz.5.424" name=E91F7189591E9233614B dev="tmpfs" ino=175 scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon="system_u:object_r:cron_spool_t:s0" [ 183.485875][ T29] audit: type=1400 audit(1734835159.511:498): avc: denied { write } for pid=7768 comm="syz.5.424" name=E91F7189591E9233614B dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 183.753378][ T29] audit: type=1400 audit(1734835159.707:499): avc: denied { listen } for pid=7767 comm="syz.2.425" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 183.886690][ T8] usb 4-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 183.897113][ T8] dvbdev: DVB: registering new adapter (TerraTec NOXON DAB Stick) [ 183.906019][ T8] usb 4-1: media controller created [ 183.931547][ T7774] orangefs_mount: mount request failed with -4 [ 183.936686][ T8] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 184.018185][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.3.413'. [ 185.171741][ T8] i2c i2c-1: Added multiplexed i2c bus 2 [ 185.177491][ T8] rtl2832 1-0010: Realtek RTL2832 successfully attached [ 185.185129][ T8] usb 4-1: DVB: registering adapter 1 frontend 0 (Realtek RTL2832 (DVB-T))... [ 185.194939][ T8] dvbdev: dvb_create_media_entity: media entity 'Realtek RTL2832 (DVB-T)' registered. [ 185.487816][ T29] audit: type=1400 audit(1734835161.391:500): avc: denied { unlink } for pid=6902 comm="syz-executor" name=E91F7189591E9233614B dev="tmpfs" ino=175 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=sock_file permissive=1 trawcon="system_u:object_r:cron_spool_t:s0" [ 185.568929][ T8] DVB: Unable to find symbol r820t_attach() [ 186.614936][ T8] usb 4-1: USB disconnect, device number 23 [ 186.795724][ T7803] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=54 sclass=netlink_route_socket pid=7803 comm=syz.3.430 [ 187.981133][ T116] usb 6-1: new high-speed USB device number 8 using dummy_hcd [ 189.167230][ T8] usb 1-1: new high-speed USB device number 11 using dummy_hcd [ 189.387329][ T116] usb 6-1: Using ep0 maxpacket: 32 [ 189.480737][ T116] usb 6-1: device descriptor read/all, error -71 [ 190.435081][ T8] usb 1-1: new low-speed USB device number 12 using dummy_hcd [ 190.611115][ T8] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 190.671306][ T8] usb 1-1: config 0 has no interface number 0 [ 190.862157][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 190.899148][ T29] audit: type=1400 audit(1734835166.461:501): avc: denied { create } for pid=7834 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 191.308031][ T29] audit: type=1400 audit(1734835166.480:502): avc: denied { write } for pid=7834 comm="syz.3.442" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_crypto_socket permissive=1 [ 191.354893][ T7841] netlink: 72 bytes leftover after parsing attributes in process `syz.3.442'. [ 191.362494][ T8] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 191.394694][ T8] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 191.403881][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 191.413893][ T8] usb 1-1: config 0 descriptor?? [ 191.424056][ T7831] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 191.472122][ T8] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 191.914861][ T7831] netlink: 8 bytes leftover after parsing attributes in process `syz.0.438'. [ 192.588863][ T29] audit: type=1400 audit(1734835168.032:503): avc: denied { ioctl } for pid=7861 comm="syz.5.447" path="socket:[16985]" dev="sockfs" ino=16985 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 192.613596][ C0] vkms_vblank_simulate: vblank timer overrun [ 193.494785][ T46] usb 3-1: new full-speed USB device number 21 using dummy_hcd [ 193.608045][ T7875] FAULT_INJECTION: forcing a failure. [ 193.608045][ T7875] name failslab, interval 1, probability 0, space 0, times 0 [ 193.620894][ T7875] CPU: 0 UID: 0 PID: 7875 Comm: syz.4.450 Not tainted 6.13.0-rc3-syzkaller-00258-ge84a3bf7f4aa #0 [ 193.631485][ T7875] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 193.641542][ T7875] Call Trace: [ 193.644816][ T7875] [ 193.647734][ T7875] dump_stack_lvl+0x16c/0x1f0 [ 193.652425][ T7875] should_fail_ex+0x497/0x5b0 [ 193.657103][ T7875] ? fs_reclaim_acquire+0xae/0x150 [ 193.662223][ T7875] should_failslab+0xc2/0x120 [ 193.666900][ T7875] __kmalloc_noprof+0xcb/0x510 [ 193.671669][ T7875] ? __pfx_lock_release+0x10/0x10 [ 193.676691][ T7875] ? trace_lock_acquire+0x14e/0x1f0 [ 193.681895][ T7875] tomoyo_encode2+0x100/0x3e0 [ 193.686584][ T7875] tomoyo_encode+0x29/0x50 [ 193.691002][ T7875] tomoyo_mount_acl+0x145/0x880 [ 193.695857][ T7875] ? hlock_class+0x4e/0x130 [ 193.700365][ T7875] ? __lock_acquire+0x15a9/0x3c40 [ 193.705402][ T7875] ? __pfx_tomoyo_mount_acl+0x10/0x10 [ 193.710777][ T7875] ? __pfx___lock_acquire+0x10/0x10 [ 193.715969][ T7875] ? stack_trace_save+0x95/0xd0 [ 193.720823][ T7875] ? __pfx_lock_release+0x10/0x10 [ 193.725860][ T7875] ? trace_lock_acquire+0x14e/0x1f0 [ 193.731062][ T7875] ? tomoyo_mount_permission+0x149/0x420 [ 193.736692][ T7875] ? lock_acquire+0x2f/0xb0 [ 193.741189][ T7875] ? tomoyo_mount_permission+0x149/0x420 [ 193.746848][ T7875] tomoyo_mount_permission+0x16e/0x420 [ 193.752307][ T7875] ? tomoyo_mount_permission+0x149/0x420 [ 193.757937][ T7875] ? __pfx_tomoyo_mount_permission+0x10/0x10 [ 193.763926][ T7875] ? get_current_fs_domain+0x184/0x1f0 [ 193.769400][ T7875] security_sb_mount+0x9b/0x260 [ 193.774250][ T7875] path_mount+0x129/0x1f20 [ 193.778667][ T7875] ? kmem_cache_free+0x152/0x4c0 [ 193.783603][ T7875] ? __pfx_path_mount+0x10/0x10 [ 193.788463][ T7875] ? putname+0x13c/0x180 [ 193.792711][ T7875] __x64_sys_mount+0x294/0x320 [ 193.797473][ T7875] ? __pfx___x64_sys_mount+0x10/0x10 [ 193.802766][ T7875] do_syscall_64+0xcd/0x250 [ 193.807273][ T7875] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 193.813170][ T7875] RIP: 0033:0x7f7993b85d29 [ 193.817580][ T7875] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 193.837191][ T7875] RSP: 002b:00007f799492c038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 193.845602][ T7875] RAX: ffffffffffffffda RBX: 00007f7993d76160 RCX: 00007f7993b85d29 [ 193.853573][ T7875] RDX: 0000000020002100 RSI: 0000000020000000 RDI: 0000000000000000 [ 193.861542][ T7875] RBP: 00007f799492c090 R08: 0000000020000080 R09: 0000000000000000 [ 193.869511][ T7875] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 193.877472][ T7875] R13: 0000000000000000 R14: 00007f7993d76160 R15: 00007ffe82daba58 [ 193.885459][ T7875] [ 193.888484][ C0] vkms_vblank_simulate: vblank timer overrun [ 195.922253][ T46] usb 3-1: device descriptor read/all, error -71 [ 196.842957][ T6607] usb 1-1: USB disconnect, device number 12 [ 197.044523][ T7893] netlink: 20 bytes leftover after parsing attributes in process `syz.3.456'. [ 197.848743][ T6607] usb 5-1: new full-speed USB device number 23 using dummy_hcd [ 197.939795][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 197.946213][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 198.058775][ T6607] usb 5-1: config 0 has an invalid interface number: 55 but max is 0 [ 198.067687][ T6607] usb 5-1: config 0 has no interface number 0 [ 198.082948][ T6607] usb 5-1: config 0 interface 55 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 198.757287][ T6607] usb 5-1: config 0 interface 55 altsetting 0 has an endpoint descriptor with address 0xAB, changing to 0x8B [ 198.788654][ T6607] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 10 [ 198.904322][ T6607] usb 5-1: config 0 interface 55 altsetting 0 endpoint 0x8B has invalid maxpacket 120, setting to 64 [ 198.933795][ T6607] usb 5-1: config 0 interface 55 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 2 [ 198.991787][ T6607] usb 5-1: New USB device found, idVendor=0f11, idProduct=1080, bcdDevice=fc.6a [ 199.018868][ T6607] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 199.054398][ T6607] usb 5-1: config 0 descriptor?? [ 199.069548][ T7894] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 199.171263][ T6607] ldusb 5-1:0.55: LD USB Device #0 now attached to major 180 minor 0 [ 199.419256][ T29] audit: type=1400 audit(1734835174.430:504): avc: denied { connect } for pid=7916 comm="syz.3.464" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 199.457935][ T7917] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 199.473825][ T6725] Ignoring NSS change in VHT Operating Mode Notification from 08:02:11:00:00:00 with invalid nss 2 [ 199.485692][ T7917] netlink: 'syz.3.464': attribute type 1 has an invalid length. [ 199.517810][ T7917] netlink: 8 bytes leftover after parsing attributes in process `syz.3.464'. [ 199.540574][ T7918] netlink: 12 bytes leftover after parsing attributes in process `syz.3.464'. [ 199.576987][ T25] usb 5-1: USB disconnect, device number 23 [ 199.592528][ T25] ldusb 5-1:0.55: LD USB Device #0 now disconnected [ 199.707879][ T7920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.465'. [ 199.717084][ T7920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.465'. [ 199.725974][ T7920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.465'. [ 199.734819][ T7920] netlink: 36 bytes leftover after parsing attributes in process `syz.2.465'. [ 200.409474][ T9] usb 4-1: new high-speed USB device number 24 using dummy_hcd [ 200.589642][ T7931] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 200.596927][ T7931] overlayfs: failed to set xattr on upper [ 200.602744][ T7931] overlayfs: ...falling back to redirect_dir=nofollow. [ 200.609622][ T7931] overlayfs: ...falling back to index=off. [ 200.615728][ T7931] overlayfs: conflicting lowerdir path [ 200.623178][ T29] audit: type=1400 audit(1734835175.515:505): avc: denied { mounton } for pid=7928 comm="syz.2.469" path="/92/file0/bus" dev="ramfs" ino=15864 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:ramfs_t tclass=dir permissive=1 [ 200.647099][ T9] usb 4-1: Using ep0 maxpacket: 16 [ 200.708459][ T6607] usb 5-1: new high-speed USB device number 24 using dummy_hcd [ 201.116394][ T9] usb 4-1: config index 0 descriptor too short (expected 16456, got 72) [ 201.124762][ T9] usb 4-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 201.140323][ T9] usb 4-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 201.159854][ T9] usb 4-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 201.177211][ T9] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.185970][ T9] usb 4-1: Product: syz [ 201.190636][ T9] usb 4-1: Manufacturer: syz [ 201.195786][ T9] usb 4-1: SerialNumber: syz [ 201.203302][ T9] usb 4-1: config 0 descriptor?? [ 201.298797][ T6607] usb 5-1: Using ep0 maxpacket: 8 [ 201.306830][ T6607] usb 5-1: New USB device found, idVendor=0c45, idProduct=613b, bcdDevice=c4.6d [ 201.315973][ T6607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 201.326158][ T6607] usb 5-1: Product: syz [ 201.330411][ T6607] usb 5-1: Manufacturer: syz [ 201.357185][ T6607] usb 5-1: SerialNumber: syz [ 201.378239][ T6607] usb 5-1: config 0 descriptor?? [ 201.387173][ T6607] gspca_main: sonixj-2.14.0 probing 0c45:613b [ 201.485196][ T7938] input: syz0 as /devices/virtual/input/input8 [ 201.502765][ T46] usb 4-1: USB disconnect, device number 24 [ 201.532242][ T25] usb 1-1: new high-speed USB device number 13 using dummy_hcd [ 201.837612][ T25] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 201.851369][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 202.527313][ T25] usb 1-1: config 0 has no interface number 0 [ 202.533754][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 202.551832][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 202.591886][ T25] usb 1-1: config 0 descriptor?? [ 202.666819][ T7943] lo speed is unknown, defaulting to 1000 [ 202.762679][ T25] usb 1-1: reset high-speed USB device number 13 using dummy_hcd [ 202.833199][ T7953] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.852156][ T7953] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.959481][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.970712][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 202.985932][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 202.995458][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.008655][ T29] audit: type=1400 audit(1734835177.789:506): avc: denied { bind } for pid=7942 comm="syz.2.473" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 203.017787][ T7927] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 203.047955][ T7927] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 203.108523][ T9] usb 6-1: new high-speed USB device number 10 using dummy_hcd [ 203.365429][ T25] usb 1-1: USB disconnect, device number 13 [ 203.505843][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 203.516957][ T9] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 203.529432][ T9] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 203.543036][ T9] usb 6-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 203.552145][ T9] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.627224][ T25] usb 1-1: new full-speed USB device number 14 using dummy_hcd [ 203.665955][ T9] usb 6-1: config 0 descriptor?? [ 203.724830][ T29] audit: type=1326 audit(1734835178.443:507): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=7959 comm="syz.2.477" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa9d2785d29 code=0x7fdc0000 [ 203.786882][ T6607] usb 5-1: USB disconnect, device number 24 [ 203.820827][ T25] usb 1-1: config 0 has an invalid interface number: 250 but max is 0 [ 203.842964][ T25] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 203.874217][ T25] usb 1-1: config 0 has no interface number 0 [ 203.880339][ T25] usb 1-1: New USB device found, idVendor=0cf3, idProduct=1002, bcdDevice=4f.2c [ 203.905140][ T25] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 203.927132][ T25] usb 1-1: config 0 descriptor?? [ 204.089590][ T25] usb 1-1: reset full-speed USB device number 14 using dummy_hcd [ 204.126262][ T9] isku 0003:1E7D:319C.000B: invalid report_size 23040 [ 204.135763][ T9] isku 0003:1E7D:319C.000B: item 0 2 1 7 parsing failed [ 204.144207][ T9] isku 0003:1E7D:319C.000B: parse failed [ 204.169754][ T9] isku 0003:1E7D:319C.000B: probe with driver isku failed with error -22 [ 204.369935][ T9] usb 6-1: USB disconnect, device number 10 [ 204.883293][ T8] usb 5-1: new full-speed USB device number 25 using dummy_hcd [ 205.049474][ T7982] xt_limit: Overflow, try lower: 0/0 [ 205.379793][ T8] usb 5-1: config 1 interface 0 altsetting 7 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 205.512992][ T25] usb 1-1: USB disconnect, device number 14 [ 205.548335][ T8] usb 5-1: config 1 interface 0 has no altsetting 0 [ 205.563019][ T8] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 205.572451][ T8] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 205.580848][ T8] usb 5-1: Product: syz [ 205.586162][ T8] usb 5-1: Manufacturer: syz [ 205.593077][ T8] usb 5-1: SerialNumber: syz [ 205.872297][ T933] usb 6-1: new low-speed USB device number 11 using dummy_hcd [ 206.209392][ T7994] ntfs3(nullb0): Primary boot signature is not NTFS. [ 206.222278][ T7994] ntfs3(nullb0): try to read out of volume at offset 0x3e7ffffe00 [ 206.270982][ T933] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 206.279553][ T933] usb 6-1: config 0 has no interface number 0 [ 206.286196][ T933] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 206.297252][ T933] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 206.308046][ T933] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 206.317618][ T933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 206.331992][ T933] usb 6-1: config 0 descriptor?? [ 206.339244][ T7985] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 206.356459][ T933] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 206.387736][ T29] audit: type=1400 audit(1734835180.941:508): avc: denied { bind } for pid=7990 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.419258][ T29] audit: type=1400 audit(1734835180.941:509): avc: denied { write } for pid=7990 comm="syz.3.488" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 206.598106][ T7985] netlink: 8 bytes leftover after parsing attributes in process `syz.5.486'. [ 207.069551][ T9] usb 1-1: new high-speed USB device number 15 using dummy_hcd [ 207.433347][ T933] usb 4-1: new high-speed USB device number 25 using dummy_hcd [ 207.481780][ T9] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 207.679636][ T9] usb 1-1: New USB device found, idVendor=1532, idProduct=011b, bcdDevice= 0.00 [ 207.690972][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.703865][ T9] usb 1-1: config 0 descriptor?? [ 207.764062][ T8] cdc_ether 5-1:1.0: probe with driver cdc_ether failed with error -71 [ 207.784664][ T8] usb 5-1: USB disconnect, device number 25 [ 207.798062][ T933] usb 4-1: Using ep0 maxpacket: 8 [ 207.804931][ T933] usb 4-1: config 0 has an invalid interface number: 176 but max is 2 [ 207.815420][ T933] usb 4-1: config 0 has no interface number 1 [ 207.822330][ T933] usb 4-1: New USB device found, idVendor=05c6, idProduct=9205, bcdDevice=29.ac [ 207.832712][ T933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 207.842968][ T933] usb 4-1: config 0 descriptor?? [ 208.285603][ T933] usb 4-1: Could not set interface, error -71 [ 208.302472][ T933] usb 4-1: USB disconnect, device number 25 [ 208.427269][ T6607] usb 5-1: new high-speed USB device number 26 using dummy_hcd [ 208.452326][ T9] razer 0003:1532:011B.000C: failed to enable macro keys: -71 [ 208.462860][ T9] razer 0003:1532:011B.000C: hidraw0: USB HID v0.00 Device [HID 1532:011b] on usb-dummy_hcd.0-1/input0 [ 208.479058][ T9] usb 1-1: USB disconnect, device number 15 [ 208.590679][ T6607] usb 5-1: New USB device found, idVendor=2582, idProduct=008d, bcdDevice=7a.ac [ 208.600040][ T6607] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 208.608130][ T6607] usb 5-1: Product: syz [ 208.612866][ T6607] usb 5-1: Manufacturer: syz [ 208.617571][ T6607] usb 5-1: SerialNumber: syz [ 208.624104][ T6607] usb 5-1: config 0 descriptor?? [ 208.823917][ T6607] usb 6-1: USB disconnect, device number 11 [ 208.901970][ T8011] mmap: syz.4.494 (8011) uses deprecated remap_file_pages() syscall. See Documentation/mm/remap_file_pages.rst. [ 209.199376][ T8027] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.120809][ T6607] usb 6-1: new high-speed USB device number 12 using dummy_hcd [ 210.469238][ T6607] usb 6-1: Using ep0 maxpacket: 32 [ 210.482258][ T6607] usb 6-1: config 0 has an invalid interface number: 184 but max is 0 [ 210.497150][ T6607] usb 6-1: config 0 has no interface number 0 [ 210.503707][ T6607] usb 6-1: config 0 interface 184 has no altsetting 0 [ 210.512731][ T6607] usb 6-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 210.522237][ T6607] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 210.530553][ T6607] usb 6-1: Product: syz [ 210.539990][ T6607] usb 6-1: Manufacturer: syz [ 210.544837][ T6607] usb 6-1: SerialNumber: syz [ 210.584800][ T6607] usb 6-1: config 0 descriptor?? [ 210.591577][ T6607] smsc75xx v1.0.0 [ 210.719732][ T8044] virtio-fs: tag <(null)> not found [ 210.736410][ T8] usb 4-1: new high-speed USB device number 26 using dummy_hcd [ 211.137089][ T8] usb 4-1: New USB device found, idVendor=055f, idProduct=c420, bcdDevice=6a.33 [ 211.511858][ T8] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 211.551945][ T8] usb 4-1: config 0 descriptor?? [ 211.560888][ T9] usb 5-1: USB disconnect, device number 26 [ 211.637261][ T8] gspca_main: sunplus-2.14.0 probing 055f:c420 [ 211.901713][ T5898] usb 1-1: new high-speed USB device number 16 using dummy_hcd [ 211.976633][ T9] usb 5-1: new full-speed USB device number 27 using dummy_hcd [ 212.062132][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 212.071332][ T8037] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 212.072432][ T5898] usb 1-1: config 0 has an invalid interface number: 238 but max is 0 [ 212.093859][ T5898] usb 1-1: config 0 has no interface number 0 [ 212.100482][ T5898] usb 1-1: config 0 interface 238 has no altsetting 0 [ 212.112990][ T5898] usb 1-1: New USB device found, idVendor=2c42, idProduct=1602, bcdDevice=63.a6 [ 212.122242][ T5898] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 212.131218][ T29] audit: type=1400 audit(1734835186.319:510): avc: denied { shutdown } for pid=8036 comm="syz.3.500" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 212.135302][ T5898] usb 1-1: Product: syz [ 212.159911][ T5898] usb 1-1: Manufacturer: syz [ 212.169012][ T8] gspca_sunplus: reg_w_riv err -71 [ 212.175653][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 212.191831][ T8] sunplus 4-1:0.0: probe with driver sunplus failed with error -71 [ 212.200633][ T5898] usb 1-1: SerialNumber: syz [ 212.208732][ T9] usb 5-1: config 1 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 212.231089][ T8] usb 4-1: USB disconnect, device number 26 [ 212.241772][ T5898] usb 1-1: config 0 descriptor?? [ 212.248252][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 212.266850][ T5898] f81232 1-1:0.238: f81534a converter detected [ 212.273155][ T9] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x8F has invalid wMaxPacketSize 0 [ 212.285373][ T9] usb 5-1: config 1 interface 0 altsetting 0 has 3 endpoint descriptors, different from the interface descriptor's value: 22 [ 212.300839][ T9] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 212.310145][ T9] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 212.318218][ T9] usb 5-1: SerialNumber: syz [ 212.479522][ T5898] usb 1-1: f81534a converter now attached to ttyUSB0 [ 212.560426][ T29] audit: type=1400 audit(1734835186.712:511): avc: denied { write } for pid=8048 comm="syz.4.504" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.581232][ T29] audit: type=1400 audit(1734835186.712:512): avc: denied { open } for pid=8048 comm="syz.4.504" path="/95/file0" dev="9p" ino=2 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=file permissive=1 [ 212.603114][ C0] vkms_vblank_simulate: vblank timer overrun [ 212.637138][ T6607] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000044: -71 [ 212.650732][ T6607] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Error reading E2P_DATA [ 212.668523][ T6607] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -71 [ 212.679679][ T6607] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -71 [ 212.689625][ T6607] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_reset [ 212.700110][ T6607] smsc75xx 6-1:0.184 (unnamed net_device) (uninitialized): smsc75xx_reset error -71 [ 212.709906][ T6607] smsc75xx 6-1:0.184: probe with driver smsc75xx failed with error -71 [ 212.737402][ T6607] usb 6-1: USB disconnect, device number 12 [ 212.742460][ T8] usb 1-1: USB disconnect, device number 16 [ 212.770302][ T8] f81534a ttyUSB0: f81534a converter now disconnected from ttyUSB0 [ 212.793860][ T5898] usb 5-1: USB disconnect, device number 27 [ 212.809791][ T8] f81232 1-1:0.238: device disconnected [ 213.391349][ T8064] netlink: 8 bytes leftover after parsing attributes in process `syz.2.506'. [ 213.400542][ T8064] netlink: 'syz.2.506': attribute type 2 has an invalid length. [ 214.035622][ T8069] netlink: 'syz.2.509': attribute type 21 has an invalid length. [ 214.043897][ T8069] netlink: 156 bytes leftover after parsing attributes in process `syz.2.509'. [ 215.036616][ T8076] syz.0.511: attempt to access beyond end of device [ 215.036616][ T8076] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 215.049485][ T8076] hpfs: hpfs_map_sector(): read error [ 215.192120][ T8081] netdevsim netdevsim5 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 215.457061][ T29] audit: type=1400 audit(1734835189.359:513): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 215.657913][ T8093] Invalid source name [ 215.662029][ T8093] UBIFS error (pid: 8093): cannot open "/dev/sg0", error -22 [ 216.790098][ T8] usb 1-1: new high-speed USB device number 17 using dummy_hcd [ 217.001236][ T933] usb 3-1: new high-speed USB device number 23 using dummy_hcd [ 217.447745][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.451976][ T933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 217.475251][ T8109] netlink: 8 bytes leftover after parsing attributes in process `syz.5.519'. [ 217.484061][ T8109] netlink: 'syz.5.519': attribute type 2 has an invalid length. [ 217.640726][ T933] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.724939][ T8] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 217.734868][ T8] usb 1-1: New USB device found, idVendor=17ef, idProduct=6047, bcdDevice= 0.00 [ 217.743982][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 217.782716][ T8] usb 1-1: config 0 descriptor?? [ 217.883628][ T933] usb 3-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 218.178345][ T933] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 218.204548][ T933] usb 3-1: config 0 descriptor?? [ 218.607937][ T25] usb 6-1: new high-speed USB device number 13 using dummy_hcd [ 218.830970][ T25] usb 6-1: Using ep0 maxpacket: 32 [ 218.933282][ T25] usb 6-1: New USB device found, idVendor=05a9, idProduct=1550, bcdDevice=e4.bb [ 218.980070][ T8] usbhid 1-1:0.0: can't add hid device: -71 [ 218.986066][ T8] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 218.993891][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 219.000798][ T8] usb 1-1: USB disconnect, device number 17 [ 219.021668][ T25] usb 6-1: Product: syz [ 219.026074][ T25] usb 6-1: Manufacturer: syz [ 219.030755][ T25] usb 6-1: SerialNumber: syz [ 219.042141][ T25] usb 6-1: config 0 descriptor?? [ 219.059008][ T25] gspca_main: ov534_9-2.14.0 probing 05a9:1550 [ 219.075121][ T933] usb 3-1: language id specifier not provided by device, defaulting to English [ 219.231422][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 219.243100][ T8125] netlink: 8 bytes leftover after parsing attributes in process `syz.3.525'. [ 219.293064][ T933] uclogic 0003:256C:006D.000D: failed retrieving Huion firmware version: -71 [ 219.318108][ T933] uclogic 0003:256C:006D.000D: failed probing parameters: -71 [ 219.336322][ T933] uclogic 0003:256C:006D.000D: probe with driver uclogic failed with error -71 [ 219.349115][ T933] usb 3-1: USB disconnect, device number 23 [ 219.463797][ T116] usb 5-1: new high-speed USB device number 28 using dummy_hcd [ 219.631703][ T8137] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 219.692909][ T116] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 219.701795][ T116] usb 5-1: config 0 has no interface number 0 [ 219.718652][ T116] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 219.836853][ T116] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 219.935228][ T116] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 220.042691][ T116] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 220.072663][ T116] usb 5-1: config 0 descriptor?? [ 220.381241][ T8123] netlink: 12 bytes leftover after parsing attributes in process `syz.4.524'. [ 220.457723][ T9] usb 1-1: new high-speed USB device number 18 using dummy_hcd [ 221.003245][ T9] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 221.011305][ T9] usb 1-1: config 0 has no interface number 0 [ 221.020928][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 221.073276][ T9] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 221.083796][ T116] usbhid 5-1:0.1: can't add hid device: -71 [ 221.089830][ T116] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 221.100623][ T9] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 221.115705][ T116] usb 5-1: USB disconnect, device number 28 [ 221.122921][ T9] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 221.134434][ T9] usb 1-1: config 0 descriptor?? [ 221.195430][ T25] gspca_ov534_9: reg_r err -32 [ 221.234684][ T8] usb 4-1: new high-speed USB device number 27 using dummy_hcd [ 221.364049][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.0.529'. [ 221.395205][ T8] usb 4-1: Using ep0 maxpacket: 16 [ 221.501833][ T25] gspca_ov534_9: Unknown sensor 0000 [ 221.501892][ T25] ov534_9 6-1:0.0: probe with driver ov534_9 failed with error -22 [ 221.583548][ T8] usb 4-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 221.717593][ T8] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 221.728270][ T8] usb 4-1: Product: syz [ 221.732461][ T8] usb 4-1: Manufacturer: syz [ 221.737672][ T8] usb 4-1: SerialNumber: syz [ 221.743929][ T8] usb 4-1: config 0 descriptor?? [ 221.884274][ T9] usbhid 1-1:0.1: can't add hid device: -71 [ 221.894122][ T9] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 221.906464][ T9] usb 1-1: USB disconnect, device number 18 [ 221.995944][ T8] speedtch 4-1:0.0: speedtch_bind: data interface not found! [ 222.006038][ T8] speedtch 4-1:0.0: usbatm_usb_probe: bind failed: -19! [ 222.022059][ T8] usb 4-1: USB disconnect, device number 27 [ 222.089913][ T5898] usb 3-1: new high-speed USB device number 24 using dummy_hcd [ 222.250227][ T5898] usb 3-1: Using ep0 maxpacket: 32 [ 222.256692][ T5898] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 222.265738][ T5898] usb 3-1: config 0 has no interface number 0 [ 222.273515][ T5898] usb 3-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 222.282669][ T5898] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 222.290682][ T5898] usb 3-1: Product: syz [ 222.294940][ T5898] usb 3-1: Manufacturer: syz [ 222.299528][ T5898] usb 3-1: SerialNumber: syz [ 222.306410][ T5898] usb 3-1: config 0 descriptor?? [ 222.315061][ T5898] usb 3-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 222.323855][ T5898] usb 3-1: selecting invalid altsetting 1 [ 222.329760][ T5898] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 222.340115][ T5898] usb 3-1: dvb_usb_v2: will pass the complete MPEG2 transport stream to the software demuxer [ 222.350500][ T5898] dvbdev: DVB: registering new adapter (Intel CE9500 reference design) [ 222.358826][ T5898] usb 3-1: media controller created [ 222.369177][ T5898] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 222.819413][ T8164] input: syz0 as /devices/virtual/input/input9 [ 223.091134][ T8155] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 223.099723][ T9] usb 6-1: USB disconnect, device number 13 [ 223.127086][ T8155] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 223.152349][ T5898] usb 3-1: dvb_usb_ce6230: usb_control_msg() failed=-71 [ 223.280521][ T5898] zl10353_read_register: readreg error (reg=127, ret==-71) [ 223.311056][ T5898] usb 3-1: dvb_usb_ce6230: usb_set_interface() failed=-71 [ 223.939618][ T8176] syz.5.537: attempt to access beyond end of device [ 223.939618][ T8176] nbd5: rw=0, sector=0, nr_sectors = 1 limit=0 [ 223.952796][ T8176] exFAT-fs (nbd5): unable to read boot sector [ 223.959026][ T8176] exFAT-fs (nbd5): failed to read boot sector [ 223.965401][ T8176] exFAT-fs (nbd5): failed to recognize exfat type [ 224.109272][ T5898] usb 3-1: USB disconnect, device number 24 [ 224.584587][ T25] usb 6-1: new full-speed USB device number 14 using dummy_hcd [ 224.794768][ T25] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 224.827222][ T25] usb 6-1: config 0 has no interface number 0 [ 224.867686][ T25] usb 6-1: New USB device found, idVendor=8086, idProduct=9500, bcdDevice=b6.d8 [ 224.880560][ T25] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 224.895408][ T25] usb 6-1: Product: syz [ 224.900705][ T25] usb 6-1: Manufacturer: syz [ 224.918680][ T25] usb 6-1: SerialNumber: syz [ 225.060732][ T25] usb 6-1: config 0 descriptor?? [ 225.070943][ T25] usb 6-1: dvb_usb_v2: found a 'Intel CE9500 reference design' in warm state [ 225.166893][ T25] usb 6-1: selecting invalid altsetting 1 [ 225.191005][ T25] usb 6-1: dvb_usb_ce6230: usb_set_interface() failed=-22 [ 225.271938][ T25] usb 6-1: dvb_usb_v2: this USB2.0 device cannot be run on a USB1.1 port (it lacks a hardware PID filter) [ 225.482742][ T8208] Invalid source name [ 225.486779][ T8208] UBIFS error (pid: 8208): cannot open "/dev/sg0", error -22 [ 226.090606][ T29] audit: type=1400 audit(1734835199.378:514): avc: denied { connect } for pid=8209 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 226.156872][ T29] audit: type=1400 audit(1734835199.415:515): avc: denied { setopt } for pid=8209 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 226.180343][ T29] audit: type=1400 audit(1734835199.415:516): avc: denied { write } for pid=8209 comm="syz.3.547" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 226.421972][ T8214] netlink: 4 bytes leftover after parsing attributes in process `syz.5.540'. [ 226.473085][ T29] audit: type=1400 audit(1734835199.724:517): avc: denied { bind } for pid=8215 comm="syz.2.548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 226.571067][ T29] audit: type=1400 audit(1734835199.798:518): avc: denied { name_bind } for pid=8215 comm="syz.2.548" src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unreserved_port_t tclass=sctp_socket permissive=1 [ 226.595654][ T8219] random: crng reseeded on system resumption [ 226.853003][ T29] audit: type=1400 audit(1734835199.798:519): avc: denied { node_bind } for pid=8215 comm="syz.2.548" saddr=224.0.0.1 src=20000 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:node_t tclass=sctp_socket permissive=1 [ 226.897233][ T29] audit: type=1400 audit(1734835199.845:520): avc: denied { write } for pid=8217 comm="syz.4.549" name="snapshot" dev="devtmpfs" ino=92 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:acpi_bios_t tclass=chr_file permissive=1 [ 227.160685][ T933] usb 5-1: new high-speed USB device number 29 using dummy_hcd [ 227.197950][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888034437000: rx timeout, send abort [ 227.208469][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888034437400: rx timeout, send abort [ 227.217023][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888034437000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 227.231853][ C1] vxcan0: j1939_xtp_rx_abort_one: 0xffff888034437400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 227.328215][ T933] usb 5-1: Using ep0 maxpacket: 16 [ 227.371603][ T933] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 227.421791][ T933] usb 5-1: New USB device found, idVendor=04d8, idProduct=00dd, bcdDevice= 0.00 [ 227.457071][ T933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 227.495768][ T933] usb 5-1: config 0 descriptor?? [ 227.951384][ T933] mcp2221 0003:04D8:00DD.000E: USB HID v0.05 Device [HID 04d8:00dd] on usb-dummy_hcd.4-1/input0 [ 227.976196][ T8235] netlink: 72 bytes leftover after parsing attributes in process `syz.3.553'. [ 228.331546][ T8240] input: syz0 as /devices/virtual/input/input10 [ 228.655086][ T933] usb 5-1: USB disconnect, device number 29 [ 228.979563][ T5819] usb 6-1: USB disconnect, device number 14 [ 230.325320][ T8270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.562'. [ 230.334376][ T8270] netlink: 16 bytes leftover after parsing attributes in process `syz.0.562'. [ 230.392955][ T8270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.562'. [ 230.751777][ T8270] netlink: 36 bytes leftover after parsing attributes in process `syz.0.562'. [ 232.189474][ T29] audit: type=1400 audit(1734835205.074:521): avc: denied { write } for pid=8292 comm="syz.0.569" name="vga_arbiter" dev="devtmpfs" ino=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:xserver_misc_device_t tclass=chr_file permissive=1 [ 234.576004][ T5898] usb 5-1: new high-speed USB device number 30 using dummy_hcd [ 234.711187][ T8308] ALSA: mixer_oss: invalid OSS volume '000' [ 234.842276][ T5898] usb 5-1: New USB device found, idVendor=1235, idProduct=000e, bcdDevice=f0.ee [ 234.852099][ T29] audit: type=1400 audit(1734835207.544:522): avc: denied { read } for pid=8313 comm="syz.2.574" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 234.910157][ T8317] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=23 sclass=netlink_tcpdiag_socket pid=8317 comm=syz.2.574 [ 235.264530][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 235.333375][ T5898] usb 5-1: config 0 descriptor?? [ 235.363350][ T5898] usb 5-1: Quirk or no altset; falling back to MIDI 1.0 [ 235.366131][ T8319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.576'. [ 235.379902][ T8319] netlink: 16 bytes leftover after parsing attributes in process `syz.0.576'. [ 235.393389][ T8319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.576'. [ 235.407827][ T8319] netlink: 36 bytes leftover after parsing attributes in process `syz.0.576'. [ 235.429393][ T5898] snd-usb-audio 5-1:0.0: probe with driver snd-usb-audio failed with error -2 [ 235.510424][ T5836] udevd[5836]: error opening ATTR{/sys/devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 235.618952][ T5898] usb 5-1: USB disconnect, device number 30 [ 236.581677][ T29] audit: type=1400 audit(1734835209.190:523): avc: denied { write } for pid=8326 comm="syz.3.577" name="file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 236.755845][ T8337] Invalid source name [ 236.760064][ T8337] UBIFS error (pid: 8337): cannot open "/dev/sg0", error -22 [ 236.934914][ T29] audit: type=1400 audit(1734835209.190:524): avc: denied { open } for pid=8326 comm="syz.3.577" path="/138/file0" dev="tmpfs" ino=772 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 236.965279][ T29] audit: type=1400 audit(1734835209.190:525): avc: denied { ioctl } for pid=8326 comm="syz.3.577" path="/138/file0" dev="tmpfs" ino=772 ioctlcmd=0x1273 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 237.844539][ T8339] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 239.225774][ T8363] netlink: 'syz.0.586': attribute type 10 has an invalid length. [ 239.239722][ T8363] team0: Port device netdevsim0 added [ 239.280901][ T29] audit: type=1400 audit(1734835211.715:526): avc: denied { ioctl } for pid=8354 comm="syz.5.584" path="user:[4026531837]" dev="nsfs" ino=4026531837 ioctlcmd=0xb703 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nsfs_t tclass=file permissive=1 [ 240.895855][ T29] audit: type=1400 audit(1734835213.231:527): avc: denied { unmount } for pid=5826 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=filesystem permissive=1 [ 241.028954][ T8389] Invalid source name [ 241.040304][ T8389] UBIFS error (pid: 8389): cannot open "/dev/sg0", error -22 [ 241.468469][ T29] audit: type=1400 audit(1734835213.755:528): avc: denied { unmount } for pid=5829 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nfs_t tclass=filesystem permissive=1 [ 244.120651][ T8423] xt_limit: Overflow, try lower: 0/0 [ 244.864273][ T29] audit: type=1400 audit(1734835216.776:529): avc: denied { read append } for pid=8427 comm="syz.2.601" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 244.967904][ T5898] usb 1-1: new high-speed USB device number 19 using dummy_hcd [ 245.159933][ T8435] FAULT_INJECTION: forcing a failure. [ 245.159933][ T8435] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 245.176880][ T5898] usb 1-1: Using ep0 maxpacket: 32 [ 245.186315][ T5898] usb 1-1: config index 0 descriptor too short (expected 35577, got 27) [ 245.202308][ T29] audit: type=1400 audit(1734835216.776:530): avc: denied { open } for pid=8427 comm="syz.2.601" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 245.207984][ T5898] usb 1-1: config 1 has too many interfaces: 92, using maximum allowed: 32 [ 245.239286][ T8435] CPU: 1 UID: 0 PID: 8435 Comm: syz.4.604 Not tainted 6.13.0-rc3-syzkaller-00258-ge84a3bf7f4aa #0 [ 245.247601][ T8437] Invalid source name [ 245.249879][ T8435] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 245.249916][ T8435] Call Trace: [ 245.249922][ T8435] [ 245.249930][ T8435] dump_stack_lvl+0x16c/0x1f0 [ 245.249958][ T8435] should_fail_ex+0x497/0x5b0 [ 245.249988][ T8435] _copy_to_user+0x32/0xd0 [ 245.250007][ T8435] simple_read_from_buffer+0xd0/0x160 [ 245.250037][ T8435] proc_fail_nth_read+0x198/0x270 [ 245.250062][ T8435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.250090][ T8435] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 245.250115][ T8435] vfs_read+0x1df/0xbe0 [ 245.250135][ T8435] ? __fget_files+0x1fc/0x3a0 [ 245.250154][ T8435] ? __pfx___mutex_lock+0x10/0x10 [ 245.250177][ T8435] ? __pfx_vfs_read+0x10/0x10 [ 245.250202][ T8435] ? __fget_files+0x206/0x3a0 [ 245.250227][ T8435] ksys_read+0x12b/0x250 [ 245.255802][ T8437] UBIFS error (pid: 8437): cannot open "/dev/sg0", error -22 [ 245.264212][ T8435] ? __pfx_ksys_read+0x10/0x10 [ 245.264245][ T8435] do_syscall_64+0xcd/0x250 [ 245.264270][ T8435] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 245.264293][ T8435] RIP: 0033:0x7f7993b8473c [ 245.268021][ T5898] usb 1-1: config 1 has 1 interface, different from the descriptor's value: 92 [ 245.270462][ T8435] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 245.270482][ T8435] RSP: 002b:00007f799496e030 EFLAGS: 00000246 [ 245.277360][ T5898] usb 1-1: config 1 has no interface number 0 [ 245.279771][ T8435] ORIG_RAX: 0000000000000000 [ 245.279781][ T8435] RAX: ffffffffffffffda RBX: 00007f7993d75fa0 RCX: 00007f7993b8473c [ 245.279794][ T8435] RDX: 000000000000000f RSI: 00007f799496e0a0 RDI: 0000000000000005 [ 245.279806][ T8435] RBP: 00007f799496e090 R08: 0000000000000000 R09: 0000000000000000 [ 245.279817][ T8435] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 245.279827][ T8435] R13: 0000000000000000 R14: 00007f7993d75fa0 R15: 00007ffe82daba58 [ 245.279852][ T8435] [ 245.452715][ T5898] usb 1-1: config 1 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 245.463737][ T5898] usb 1-1: config 1 interface 1 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 17 [ 245.477475][ T5898] usb 1-1: New USB device found, idVendor=0e41, idProduct=5051, bcdDevice=d5.e8 [ 245.487112][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 245.530923][ T5898] snd_usb_pod 1-1:1.1: Line 6 Pocket POD found [ 245.851364][ T8447] overlayfs: upper fs does not support RENAME_WHITEOUT. [ 245.858465][ T8447] overlayfs: failed to set xattr on upper [ 245.864219][ T8447] overlayfs: ...falling back to redirect_dir=nofollow. [ 245.871182][ T8447] overlayfs: ...falling back to index=off. [ 245.877281][ T8447] overlayfs: conflicting lowerdir path [ 246.977324][ T5898] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now attached [ 246.997017][ T8444] sp0: Synchronizing with TNC [ 247.843888][ T5819] usb 1-1: USB disconnect, device number 19 [ 247.850276][ T5819] snd_usb_pod 1-1:1.1: Line 6 Pocket POD now disconnected [ 248.817607][ T5898] usb 1-1: new high-speed USB device number 20 using dummy_hcd [ 249.684036][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 249.695042][ T5898] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 249.705357][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 249.718411][ T5898] usb 1-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 249.727924][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 249.748406][ T5898] usb 1-1: config 0 descriptor?? [ 249.831773][ T29] audit: type=1326 audit(1734835221.575:531): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 249.878512][ T29] audit: type=1326 audit(1734835221.612:532): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 250.442862][ T8498] netlink: 8 bytes leftover after parsing attributes in process `syz.5.623'. [ 250.451674][ T8498] netlink: 'syz.5.623': attribute type 2 has an invalid length. [ 250.460397][ T29] audit: type=1326 audit(1734835221.612:533): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 250.483613][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.490273][ T29] audit: type=1326 audit(1734835221.612:534): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 250.514034][ T29] audit: type=1326 audit(1734835221.612:535): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=249 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 250.537232][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.543571][ T29] audit: type=1326 audit(1734835221.612:536): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 250.566945][ T29] audit: type=1326 audit(1734835221.612:537): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 250.590156][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.596351][ T29] audit: type=1326 audit(1734835221.612:538): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=427 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 250.619863][ T29] audit: type=1326 audit(1734835221.612:539): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 250.643062][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.649343][ T29] audit: type=1326 audit(1734835221.612:540): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 250.672725][ T29] audit: type=1326 audit(1734835221.612:541): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 250.695933][ C1] vkms_vblank_simulate: vblank timer overrun [ 250.702171][ T29] audit: type=1326 audit(1734835221.612:542): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8490 comm="syz.2.622" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fa9d2785d29 code=0x7ffc0000 [ 250.717650][ T5898] hid-udraw 0003:20D6:CB17.000F: item fetching failed at offset 0/3 [ 250.734491][ T5898] hid-udraw 0003:20D6:CB17.000F: parse failed [ 250.740650][ T5898] hid-udraw 0003:20D6:CB17.000F: probe with driver hid-udraw failed with error -22 [ 250.779526][ T8500] tmpfs: Unknown parameter 'mµ3ãfZöìÞpol' [ 251.725480][ T5898] usb 1-1: USB disconnect, device number 20 [ 252.696752][ T8534] dccp_invalid_packet: P.Data Offset(0) too small [ 253.188882][ T5819] usb 6-1: new high-speed USB device number 15 using dummy_hcd [ 253.196612][ T5871] usb 1-1: new low-speed USB device number 21 using dummy_hcd [ 253.382192][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 253, changing to 11 [ 253.402393][ T5871] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.411274][ T5871] usb 1-1: config 0 has no interface number 0 [ 253.417906][ T5819] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.428030][ T5871] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 253.440462][ T5819] usb 6-1: New USB device found, idVendor=1b96, idProduct=0014, bcdDevice= 0.00 [ 253.450785][ T5871] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 253.456116][ T5898] usb 5-1: new high-speed USB device number 31 using dummy_hcd [ 253.462221][ T5819] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.478853][ T5871] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 253.489033][ T5871] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.498660][ T5819] usb 6-1: config 0 descriptor?? [ 253.513211][ T5871] usb 1-1: config 0 descriptor?? [ 253.519420][ T8538] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 253.538184][ T5871] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 253.629561][ T5898] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 253.637630][ T5898] usb 5-1: config 0 has no interface number 0 [ 253.643919][ T5898] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 253.654860][ T5898] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 253.666347][ T5898] usb 5-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 253.676222][ T5898] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 253.686506][ T5898] usb 5-1: config 0 descriptor?? [ 253.759296][ T8538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.636'. [ 253.918697][ T8549] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.998545][ T933] usb 1-1: USB disconnect, device number 21 [ 254.358194][ T5819] usbhid 6-1:0.0: can't add hid device: -71 [ 254.367019][ T5819] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 254.424310][ T5819] usb 6-1: USB disconnect, device number 15 [ 254.508805][ T5898] usbhid 5-1:0.1: can't add hid device: -71 [ 254.515723][ T5898] usbhid 5-1:0.1: probe with driver usbhid failed with error -71 [ 254.609391][ T5898] usb 5-1: USB disconnect, device number 31 [ 254.845935][ T933] usb 4-1: new high-speed USB device number 28 using dummy_hcd [ 255.503213][ T8558] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 255.574735][ T933] usb 4-1: config index 0 descriptor too short (expected 23569, got 27) [ 255.596498][ T933] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 255.954286][ T933] usb 4-1: New USB device found, idVendor=03eb, idProduct=0002, bcdDevice=ba.c0 [ 256.064350][ T933] usb 4-1: New USB device strings: Mfr=5, Product=0, SerialNumber=0 [ 256.072739][ T933] usb 4-1: Manufacturer: syz [ 256.088583][ T933] usb 4-1: config 0 descriptor?? [ 256.343000][ T933] rc_core: IR keymap rc-hauppauge not found [ 256.349080][ T933] Registered IR keymap rc-empty [ 256.356407][ T933] rc rc0: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0 [ 256.369206][ T933] input: IgorPlug-USB IR Receiver as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/rc/rc0/input11 [ 256.387368][ T933] usb 4-1: USB disconnect, device number 28 [ 257.264962][ T29] kauditd_printk_skb: 19 callbacks suppressed [ 257.264998][ T29] audit: type=1400 audit(1734835228.506:562): avc: denied { block_suspend } for pid=8595 comm="syz.3.652" capability=36 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 258.305883][ T8606] input: syz0 as /devices/virtual/input/input12 [ 258.897637][ T116] usb 1-1: new low-speed USB device number 22 using dummy_hcd [ 259.082079][ T5898] usb 4-1: new high-speed USB device number 29 using dummy_hcd [ 259.146070][ T116] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 259.156214][ T116] usb 1-1: config 0 has no interface number 0 [ 259.162621][ T116] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 259.180404][ T116] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 259.279852][ T116] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 259.300479][ T116] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.311347][ T116] usb 1-1: config 0 descriptor?? [ 259.329657][ T8603] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 259.340248][ T116] iowarrior 1-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 259.485656][ T5898] usb 4-1: Using ep0 maxpacket: 8 [ 259.491870][ T5898] usb 4-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 259.503022][ T5898] usb 4-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 259.512258][ T5898] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 259.521830][ T5898] usb 4-1: config 0 descriptor?? [ 260.036614][ T8603] netlink: 8 bytes leftover after parsing attributes in process `syz.0.653'. [ 260.077263][ T5898] ftdi_sio 4-1:0.0: FTDI USB Serial Device converter detected [ 260.147777][ T5898] usb 4-1: Detected SIO [ 260.166625][ T5898] usb 4-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 260.245003][ T5898] usb 1-1: USB disconnect, device number 22 [ 260.277669][ T8623] nvme_fabrics: unknown parameter or missing value 'ú0Ç)fzHÎÜ$' in ctrl creation request [ 260.373030][ T5823] Bluetooth: hci2: command 0x0401 tx timeout [ 260.435395][ T46] usb 4-1: USB disconnect, device number 29 [ 260.445904][ T46] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 260.466026][ T46] ftdi_sio 4-1:0.0: device disconnected [ 260.641344][ T933] usb 6-1: new high-speed USB device number 16 using dummy_hcd [ 260.978816][ T5835] Bluetooth: hci1: ACL packet for unknown connection handle 201 [ 261.111929][ T933] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 261.126448][ T933] usb 6-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 261.137598][ T933] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 261.145925][ T933] usb 6-1: Product: syz [ 261.150276][ T933] usb 6-1: Manufacturer: syz [ 261.155482][ T933] usb 6-1: SerialNumber: syz [ 261.173727][ T933] usb 6-1: config 0 descriptor?? [ 261.186954][ T933] ims_pcu 6-1:0.0: probe with driver ims_pcu failed with error -22 [ 262.383243][ T8656] netlink: 8 bytes leftover after parsing attributes in process `syz.0.668'. [ 262.392032][ T8656] netlink: 'syz.0.668': attribute type 2 has an invalid length. [ 262.748257][ T5819] usb 5-1: new high-speed USB device number 32 using dummy_hcd [ 262.823396][ T29] audit: type=1400 audit(1734835233.735:563): avc: denied { watch_sb } for pid=8661 comm="syz.2.671" path="/143" dev="tmpfs" ino=807 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 262.928172][ T5819] usb 5-1: Using ep0 maxpacket: 16 [ 262.944714][ T5819] usb 5-1: config 0 has an invalid interface number: 41 but max is 0 [ 262.965886][ T5819] usb 5-1: config 0 has no interface number 0 [ 262.981880][ T5819] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x4 has invalid maxpacket 16 [ 262.997725][ T5819] usb 5-1: config 0 interface 41 altsetting 2 bulk endpoint 0x82 has invalid maxpacket 64 [ 263.009294][ T5819] usb 5-1: config 0 interface 41 has no altsetting 0 [ 263.021425][ T5819] usb 5-1: New USB device found, idVendor=0fe6, idProduct=9700, bcdDevice=d1.9a [ 263.045617][ T46] usb 1-1: new high-speed USB device number 23 using dummy_hcd [ 263.056393][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.075316][ T5819] usb 5-1: Product: syz [ 263.079583][ T5819] usb 5-1: Manufacturer: syz [ 263.084181][ T5819] usb 5-1: SerialNumber: syz [ 263.092329][ T5819] usb 5-1: config 0 descriptor?? [ 263.099802][ T8651] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 263.107186][ T8651] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 263.206095][ T46] usb 1-1: Using ep0 maxpacket: 32 [ 263.223830][ T46] usb 1-1: config 0 interface 0 has no altsetting 0 [ 263.239422][ T46] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 263.277111][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 263.286036][ T46] usb 1-1: Product: syz [ 263.290196][ T46] usb 1-1: Manufacturer: syz [ 263.294846][ T46] usb 1-1: SerialNumber: syz [ 263.301166][ T46] usb 1-1: config 0 descriptor?? [ 263.348803][ T8651] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 263.357594][ T8651] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 263.823911][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 263.830337][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 263.895469][ T5898] usb 6-1: USB disconnect, device number 16 [ 264.250190][ T5819] Error reading MAC address [ 264.255697][ T46] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 264.262798][ T46] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 264.262976][ T8651] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 264.286364][ T8651] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 264.317881][ T25] usb 3-1: new high-speed USB device number 25 using dummy_hcd [ 264.478125][ T5898] usb 6-1: new high-speed USB device number 17 using dummy_hcd [ 264.494468][ T116] usb 1-1: USB disconnect, device number 23 [ 264.516497][ T25] usb 3-1: Using ep0 maxpacket: 16 [ 264.527917][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 264.538861][ T25] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 264.550133][ T25] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 264.565692][ T25] usb 3-1: New USB device found, idVendor=27b8, idProduct=01ed, bcdDevice= 0.00 [ 264.575459][ T25] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 264.585427][ T5819] sr9700 5-1:0.41 (unnamed net_device) (uninitialized): Error reading MAC address [ 264.598248][ T5819] usb 5-1: USB disconnect, device number 32 [ 264.611122][ T25] usb 3-1: config 0 descriptor?? [ 264.638694][ T5898] usb 6-1: Using ep0 maxpacket: 32 [ 264.645177][ T5898] usb 6-1: config 0 interface 0 has no altsetting 0 [ 264.658219][ T5898] usb 6-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 264.667989][ T5898] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 264.678822][ T5898] usb 6-1: Product: syz [ 264.683148][ T5898] usb 6-1: Manufacturer: syz [ 264.687849][ T5898] usb 6-1: SerialNumber: syz [ 264.696684][ T5898] usb 6-1: config 0 descriptor?? [ 265.136531][ T5898] gs_usb 6-1:0.0: Couldn't get device config: (err=-121) [ 265.147711][ T5898] gs_usb 6-1:0.0: probe with driver gs_usb failed with error -121 [ 265.203951][ T29] audit: type=1400 audit(1734835235.961:564): avc: denied { listen } for pid=8683 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 265.253232][ T3678] bond0: (slave bond_slave_0): interface is now down [ 265.258536][ T29] audit: type=1400 audit(1734835236.008:565): avc: denied { getopt } for pid=8683 comm="syz.3.679" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=qipcrtr_socket permissive=1 [ 265.260222][ T3678] bond0: (slave bond_slave_1): interface is now down [ 265.312783][ T6721] bond0: (slave bond_slave_0): interface is now down [ 265.320307][ T6721] bond0: (slave bond_slave_1): interface is now down [ 265.329640][ T6721] bond0: now running without any active interface! [ 265.354310][ T5819] usb 6-1: USB disconnect, device number 17 [ 265.386908][ T46] usb 1-1: new high-speed USB device number 24 using dummy_hcd [ 265.519522][ T25] hid-led 0003:27B8:01ED.0010: hidraw0: USB HID v0.00 Device [HID 27b8:01ed] on usb-dummy_hcd.2-1/input0 [ 265.563009][ T25] hid-led 0003:27B8:01ED.0010: ThingM blink(1) initialized [ 265.591954][ T46] usb 1-1: Using ep0 maxpacket: 16 [ 265.605349][ T46] usb 1-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 266.180851][ T46] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 266.195256][ T46] usb 1-1: Product: syz [ 266.209450][ T8] usb 3-1: USB disconnect, device number 25 [ 266.210185][ T46] usb 1-1: Manufacturer: syz [ 266.223249][ T46] usb 1-1: SerialNumber: syz [ 266.254909][ T46] usb 1-1: config 0 descriptor?? [ 266.598763][ T8698] netlink: 36 bytes leftover after parsing attributes in process `syz.5.682'. [ 266.600758][ T46] speedtch 1-1:0.0: speedtch_bind: data interface not found! [ 266.614328][ T8698] netlink: 16 bytes leftover after parsing attributes in process `syz.5.682'. [ 266.615410][ T46] speedtch 1-1:0.0: usbatm_usb_probe: bind failed: -19! [ 266.624203][ T8698] netlink: 36 bytes leftover after parsing attributes in process `syz.5.682'. [ 266.624251][ T8698] netlink: 36 bytes leftover after parsing attributes in process `syz.5.682'. [ 266.685008][ T46] usb 1-1: USB disconnect, device number 24 [ 267.451930][ T8] usb 6-1: new high-speed USB device number 18 using dummy_hcd [ 267.622701][ T8] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 267.634757][ T8] usb 6-1: config 0 has no interface number 0 [ 267.639509][ T8724] netlink: 4 bytes leftover after parsing attributes in process `syz.0.691'. [ 267.655353][ T8] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 267.668735][ T8] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 267.679687][ T8] usb 6-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 267.689068][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 267.701359][ T8] usb 6-1: config 0 descriptor?? [ 268.145398][ T933] usb 1-1: new high-speed USB device number 25 using dummy_hcd [ 268.339621][ T5835] Bluetooth: hci3: unexpected event for opcode 0x1408 [ 268.487119][ T8] usbhid 6-1:0.1: can't add hid device: -71 [ 268.487442][ T933] usb 1-1: Using ep0 maxpacket: 32 [ 268.493085][ T8] usbhid 6-1:0.1: probe with driver usbhid failed with error -71 [ 268.499900][ T933] usb 1-1: config 0 interface 0 has no altsetting 0 [ 268.523991][ T8] usb 6-1: USB disconnect, device number 18 [ 268.549592][ T933] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 268.609466][ T933] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 268.626100][ T29] audit: type=1326 audit(1734835239.160:566): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 268.654253][ T933] usb 1-1: Product: syz [ 268.658675][ T933] usb 1-1: Manufacturer: syz [ 268.663372][ T933] usb 1-1: SerialNumber: syz [ 268.675267][ T933] usb 1-1: config 0 descriptor?? [ 268.683511][ T29] audit: type=1326 audit(1734835239.160:567): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 268.714830][ T29] audit: type=1326 audit(1734835239.160:568): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 268.745910][ T29] audit: type=1326 audit(1734835239.160:569): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 268.774958][ T29] audit: type=1326 audit(1734835239.160:570): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 268.807781][ T29] audit: type=1326 audit(1734835239.160:571): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 268.944325][ T29] audit: type=1326 audit(1734835239.160:572): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 268.967988][ T29] audit: type=1326 audit(1734835239.160:573): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 268.991524][ T29] audit: type=1326 audit(1734835239.160:574): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 269.015158][ T29] audit: type=1326 audit(1734835239.160:575): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=8738 comm="syz.3.696" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f803d185d29 code=0x7ffc0000 [ 269.185705][ T933] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 269.192907][ T933] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 269.417233][ T116] usb 6-1: new high-speed USB device number 19 using dummy_hcd [ 269.427227][ T933] usb 1-1: USB disconnect, device number 25 [ 269.588206][ T116] usb 6-1: Using ep0 maxpacket: 16 [ 269.626221][ T116] usb 6-1: New USB device found, idVendor=06b9, idProduct=4061, bcdDevice= 1.88 [ 269.635668][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 269.666389][ T116] usb 6-1: Product: syz [ 269.678338][ T116] usb 6-1: Manufacturer: syz [ 269.690683][ T116] usb 6-1: SerialNumber: syz [ 269.707048][ T116] usb 6-1: config 0 descriptor?? [ 269.946163][ T116] speedtch 6-1:0.0: speedtch_bind: data interface not found! [ 269.967484][ T116] speedtch 6-1:0.0: usbatm_usb_probe: bind failed: -19! [ 270.016811][ T116] usb 6-1: USB disconnect, device number 19 [ 271.235490][ T8762] input: syz0 as /devices/virtual/input/input13 [ 271.334262][ T46] usb 3-1: new low-speed USB device number 26 using dummy_hcd [ 271.518064][ T46] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 271.533271][ T46] usb 3-1: config 0 has no interface number 0 [ 271.559365][ T46] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 271.578306][ T46] usb 3-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 271.592631][ T46] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 271.604270][ T46] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 271.635155][ T46] usb 3-1: config 0 descriptor?? [ 271.718566][ T8759] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 271.792972][ T8770] netlink: 100 bytes leftover after parsing attributes in process `syz.3.706'. [ 271.813436][ T46] iowarrior 3-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 271.961722][ T933] usb 6-1: new high-speed USB device number 20 using dummy_hcd [ 271.996239][ T8759] netlink: 8 bytes leftover after parsing attributes in process `syz.2.704'. [ 272.076323][ T5898] usb 1-1: new high-speed USB device number 26 using dummy_hcd [ 272.276100][ T116] usb 3-1: USB disconnect, device number 26 [ 272.325469][ T933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 272.339580][ T933] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 272.364669][ T933] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 272.442983][ T933] usb 6-1: New USB device found, idVendor=20d6, idProduct=cb17, bcdDevice= 0.00 [ 272.607713][ T933] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 272.644417][ T933] usb 6-1: config 0 descriptor?? [ 272.850231][ T5898] usb 1-1: Using ep0 maxpacket: 8 [ 273.462871][ T5898] usb 1-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 273.475394][ T5898] usb 1-1: New USB device found, idVendor=1b3d, idProduct=0146, bcdDevice= 1.b8 [ 273.484652][ T5898] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 273.494561][ T5898] usb 1-1: config 0 descriptor?? [ 273.501358][ T5898] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 273.509299][ T5898] usb 1-1: Detected SIO [ 273.514408][ T5898] usb 1-1: FTDI USB Serial Device converter now attached to ttyUSB0 [ 273.715349][ T5870] usb 3-1: new high-speed USB device number 27 using dummy_hcd [ 273.717515][ T933] hid-udraw 0003:20D6:CB17.0011: item fetching failed at offset 0/3 [ 273.824255][ T933] hid-udraw 0003:20D6:CB17.0011: parse failed [ 273.974424][ T933] hid-udraw 0003:20D6:CB17.0011: probe with driver hid-udraw failed with error -22 [ 274.029572][ T5898] usb 6-1: USB disconnect, device number 20 [ 274.095628][ T933] usb 1-1: USB disconnect, device number 26 [ 274.102952][ T933] ftdi_sio ttyUSB0: FTDI USB Serial Device converter now disconnected from ttyUSB0 [ 274.127986][ T933] ftdi_sio 1-1:0.0: device disconnected [ 274.302855][ T5870] usb 3-1: Using ep0 maxpacket: 32 [ 274.309624][ T5870] usb 3-1: config 0 interface 0 has no altsetting 0 [ 274.318367][ T5870] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 274.327692][ T5870] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 274.335950][ T5870] usb 3-1: Product: syz [ 274.340131][ T5870] usb 3-1: Manufacturer: syz [ 274.344717][ T5870] usb 3-1: SerialNumber: syz [ 274.350580][ T5870] usb 3-1: config 0 descriptor?? [ 274.964414][ T8801] No source specified [ 275.164605][ T5870] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 275.193451][ T5870] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 275.938648][ T25] usb 4-1: new high-speed USB device number 30 using dummy_hcd [ 276.441217][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 276.441812][ T5870] usb 3-1: USB disconnect, device number 27 [ 276.452348][ T25] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 276.452377][ T25] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 276.452411][ T25] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 276.452433][ T25] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 276.453936][ T25] usb 4-1: config 0 descriptor?? [ 277.338255][ T8828] netlink: 8 bytes leftover after parsing attributes in process `syz.4.721'. [ 277.347075][ T8828] netlink: 'syz.4.721': attribute type 2 has an invalid length. [ 277.424533][ T933] usb 1-1: new high-speed USB device number 27 using dummy_hcd [ 277.525082][ T25] isku 0003:1E7D:319C.0012: invalid report_size 23040 [ 277.533363][ T25] isku 0003:1E7D:319C.0012: item 0 2 1 7 parsing failed [ 277.540740][ T25] isku 0003:1E7D:319C.0012: parse failed [ 277.546796][ T25] isku 0003:1E7D:319C.0012: probe with driver isku failed with error -22 [ 278.003886][ T46] usb 4-1: USB disconnect, device number 30 [ 278.014339][ T933] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 278.023703][ T933] usb 1-1: config 0 has no interface number 0 [ 278.032582][ T933] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 278.055570][ T933] usb 1-1: config 0 interface 1 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 278.065335][ T933] usb 1-1: New USB device found, idVendor=04d9, idProduct=a055, bcdDevice= 0.18 [ 278.172570][ T933] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 278.198559][ T933] usb 1-1: config 0 descriptor?? [ 278.972068][ T8840] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 279.808625][ T8846] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 280.133388][ T933] usbhid 1-1:0.1: can't add hid device: -71 [ 280.139603][ T933] usbhid 1-1:0.1: probe with driver usbhid failed with error -71 [ 280.175346][ T933] usb 1-1: USB disconnect, device number 27 [ 282.323057][ T8885] lo speed is unknown, defaulting to 1000 [ 283.112244][ T5870] usb 4-1: new high-speed USB device number 31 using dummy_hcd [ 283.317081][ T5870] usb 4-1: Using ep0 maxpacket: 32 [ 283.349943][ T5870] usb 4-1: config 0 interface 0 has no altsetting 0 [ 283.380584][ T29] kauditd_printk_skb: 18 callbacks suppressed [ 283.380599][ T29] audit: type=1400 audit(1734835252.967:594): avc: denied { map } for pid=8892 comm="syz.5.741" path="socket:[21036]" dev="sockfs" ino=21036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 283.464762][ T29] audit: type=1400 audit(1734835252.967:595): avc: denied { read } for pid=8892 comm="syz.5.741" path="socket:[21036]" dev="sockfs" ino=21036 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=xdp_socket permissive=1 [ 283.549078][ T5870] usb 4-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 283.559795][ T5870] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 283.584671][ T5870] usb 4-1: Product: syz [ 283.588848][ T5870] usb 4-1: Manufacturer: syz [ 283.603676][ T5870] usb 4-1: SerialNumber: syz [ 283.610058][ T5870] usb 4-1: config 0 descriptor?? [ 283.677976][ T8897] overlayfs: failed to resolve './file3': -2 [ 283.861757][ T116] usb 6-1: new low-speed USB device number 21 using dummy_hcd [ 284.085451][ T5870] gs_usb 4-1:0.0: Couldn't get device config: (err=-121) [ 284.092520][ T5870] gs_usb 4-1:0.0: probe with driver gs_usb failed with error -121 [ 284.385817][ T5870] usb 4-1: USB disconnect, device number 31 [ 284.392808][ T116] usb 6-1: config index 0 descriptor too short (expected 1307, got 27) [ 284.414058][ T29] audit: type=1400 audit(1734835253.865:596): avc: denied { write } for pid=8901 comm="syz.2.740" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.437222][ T29] audit: type=1400 audit(1734835253.865:597): avc: denied { map } for pid=8901 comm="syz.2.740" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.450695][ T116] usb 6-1: config 0 has an invalid interface number: 0 but max is -1 [ 284.479902][ T116] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 0 [ 284.495957][ T116] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 246, using maximum allowed: 30 [ 284.509087][ T116] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 is Bulk; changing to Interrupt [ 284.519328][ T29] audit: type=1400 audit(1734835253.865:598): avc: denied { execute } for pid=8901 comm="syz.2.740" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 284.661337][ T116] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 285.262104][ T116] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 246 [ 285.500651][ T116] usb 6-1: string descriptor 0 read error: -22 [ 285.507661][ T116] usb 6-1: New USB device found, idVendor=0460, idProduct=0008, bcdDevice=e2.de [ 285.517037][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 285.612544][ T116] usb 6-1: config 0 descriptor?? [ 285.620617][ T116] hub 6-1:0.0: bad descriptor, ignoring hub [ 285.626945][ T116] hub 6-1:0.0: probe with driver hub failed with error -5 [ 285.636548][ T116] input: USB Acecad 302 Tablet 0460:0008 as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input14 [ 285.693540][ T29] audit: type=1400 audit(1734835255.118:599): avc: denied { write } for pid=8913 comm="syz.3.748" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 285.738990][ T29] audit: type=1400 audit(1734835255.165:600): avc: denied { ioctl } for pid=8918 comm="syz.4.747" path="socket:[21146]" dev="sockfs" ino=21146 ioctlcmd=0x8933 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 285.845910][ T933] usb 6-1: USB disconnect, device number 21 [ 285.908031][ T29] audit: type=1400 audit(1734835255.314:601): avc: denied { bind } for pid=8921 comm="syz.2.749" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 286.458224][ T8933] netlink: 36 bytes leftover after parsing attributes in process `syz.2.751'. [ 286.467278][ T8933] netlink: 16 bytes leftover after parsing attributes in process `syz.2.751'. [ 286.484525][ T8933] netlink: 36 bytes leftover after parsing attributes in process `syz.2.751'. [ 286.525369][ T8933] netlink: 36 bytes leftover after parsing attributes in process `syz.2.751'. [ 287.864119][ T8946] kvm: requested 4190 ns i8254 timer period limited to 200000 ns [ 288.243434][ T933] usb 3-1: new high-speed USB device number 28 using dummy_hcd [ 288.414903][ T933] usb 3-1: Using ep0 maxpacket: 32 [ 288.430197][ T933] usb 3-1: config 0 interface 0 has no altsetting 0 [ 288.651448][ T933] usb 3-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 288.769668][ T933] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 288.813661][ T933] usb 3-1: Product: syz [ 288.839227][ T933] usb 3-1: Manufacturer: syz [ 288.847818][ T933] usb 3-1: SerialNumber: syz [ 288.861433][ T933] usb 3-1: config 0 descriptor?? [ 288.997343][ T8964] netlink: 'syz.5.761': attribute type 4 has an invalid length. [ 289.300778][ T933] gs_usb 3-1:0.0: Couldn't get device config: (err=-121) [ 289.307992][ T933] gs_usb 3-1:0.0: probe with driver gs_usb failed with error -121 [ 289.459838][ T8971] sp0: Synchronizing with TNC [ 289.762093][ T933] usb 3-1: USB disconnect, device number 28 [ 289.969452][ T8919] syz.4.747 (8919): drop_caches: 1 [ 290.210153][ T8976] ubi0: attaching mtd0 [ 290.230503][ T8976] ubi0: scanning is finished [ 290.259696][ T8976] ubi0: empty MTD device detected [ 290.798532][ T8986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.766'. [ 290.807466][ T8986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.766'. [ 290.816471][ T8986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.766'. [ 290.825640][ T8986] netlink: 36 bytes leftover after parsing attributes in process `syz.2.766'. [ 291.099538][ T8981] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 291.361680][ T8995] input: syz0 as /devices/virtual/input/input15 [ 291.377703][ T8976] ubi0: attached mtd0 (name "mtdram test device", size 0 MiB) [ 291.438563][ T8976] ubi0: PEB size: 4096 bytes (4 KiB), LEB size: 3968 bytes [ 291.482661][ T5870] usb 4-1: new high-speed USB device number 32 using dummy_hcd [ 291.677476][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 291.723806][ T5870] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 291.771881][ T5870] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 18 [ 291.822446][ T5870] usb 4-1: New USB device found, idVendor=1e7d, idProduct=319c, bcdDevice= 0.00 [ 291.837286][ T8976] ubi0: min./max. I/O unit sizes: 1/64, sub-page size 1 [ 291.881356][ T5870] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 291.935984][ T5870] usb 4-1: config 0 descriptor?? [ 292.060005][ T8976] ubi0: VID header offset: 64 (aligned 64), data offset: 128 [ 292.091804][ T8976] ubi0: good PEBs: 32, bad PEBs: 0, corrupted PEBs: 0 [ 292.165477][ T8976] ubi0: user volume: 0, internal volumes: 1, max. volumes count: 23 [ 292.209008][ T8976] ubi0: max/mean erase counter: 0/0, WL threshold: 4096, image sequence number: 2049852087 [ 292.240971][ T8976] ubi0: available PEBs: 28, total reserved PEBs: 4, PEBs reserved for bad PEB handling: 0 [ 292.280682][ T8994] ubi0: background thread "ubi_bgt0d" started, PID 8994 [ 292.446022][ T5870] isku 0003:1E7D:319C.0013: invalid report_size 23040 [ 292.468101][ T5870] isku 0003:1E7D:319C.0013: item 0 2 1 7 parsing failed [ 292.496200][ T5870] isku 0003:1E7D:319C.0013: parse failed [ 292.518896][ T5870] isku 0003:1E7D:319C.0013: probe with driver isku failed with error -22 [ 292.674282][ T5870] usb 4-1: USB disconnect, device number 32 [ 306.848454][ T8985] sched: DL replenish lagged too much [ 308.295002][ T5823] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 308.304322][ T5823] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 308.322572][ T5823] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 308.331596][ T5823] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 308.338978][ T5823] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 308.346253][ T5823] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 308.405324][ T9021] lo speed is unknown, defaulting to 1000 [ 308.848269][ T9030] netlink: 8 bytes leftover after parsing attributes in process `syz.0.777'. [ 308.857571][ T9030] netlink: 'syz.0.777': attribute type 2 has an invalid length. [ 309.146067][ T116] usb 5-1: new high-speed USB device number 33 using dummy_hcd [ 309.212670][ T6721] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.314599][ T116] usb 5-1: Using ep0 maxpacket: 32 [ 309.322292][ T116] usb 5-1: config 0 interface 0 has no altsetting 0 [ 309.331001][ T116] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 309.350060][ T116] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 309.371575][ T6721] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.382038][ T116] usb 5-1: Product: syz [ 309.387301][ T116] usb 5-1: Manufacturer: syz [ 309.400816][ T116] usb 5-1: SerialNumber: syz [ 309.417134][ T116] usb 5-1: config 0 descriptor?? [ 309.663894][ T6721] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.767206][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 309.776482][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 309.785691][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 309.794034][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 309.801738][ T5835] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 309.809110][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 310.078078][ T116] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 310.085266][ T116] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 310.137536][ T9021] chnl_net:caif_netlink_parms(): no params data found [ 310.474048][ T9040] lo speed is unknown, defaulting to 1000 [ 310.633616][ T5835] Bluetooth: hci4: command tx timeout [ 310.753569][ T116] usb 5-1: USB disconnect, device number 33 [ 311.777851][ T9021] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.813621][ T9021] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.826903][ T9021] bridge_slave_0: entered allmulticast mode [ 312.001236][ T9021] bridge_slave_0: entered promiscuous mode [ 312.018121][ T9021] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.029228][ T5835] Bluetooth: hci5: command tx timeout [ 312.040529][ T9021] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.400258][ T9021] bridge_slave_1: entered allmulticast mode [ 312.407661][ T9021] bridge_slave_1: entered promiscuous mode [ 312.792316][ T5835] Bluetooth: hci4: command tx timeout [ 313.002293][ T9066] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 313.189505][ T6721] bridge_slave_1: left allmulticast mode [ 313.734191][ T6721] bridge_slave_1: left promiscuous mode [ 313.746523][ T6721] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.774361][ T6721] bridge_slave_0: left allmulticast mode [ 313.804840][ T6721] bridge_slave_0: left promiscuous mode [ 313.810551][ T6721] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.015213][ T9081] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 314.248788][ T5835] Bluetooth: hci5: command tx timeout [ 314.685891][ T6721] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.716289][ T6721] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.736019][ T6721] bond0 (unregistering): Released all slaves [ 314.763921][ T9071] netlink: 40 bytes leftover after parsing attributes in process `syz.4.785'. [ 314.774899][ T9021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.784727][ T9073] netlink: 40 bytes leftover after parsing attributes in process `syz.4.785'. [ 314.794106][ T9074] netlink: 36 bytes leftover after parsing attributes in process `syz.4.785'. [ 314.882419][ T9040] chnl_net:caif_netlink_parms(): no params data found [ 314.914217][ T9021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.996803][ T9021] team0: Port device team_slave_0 added [ 315.012893][ T5835] Bluetooth: hci4: command tx timeout [ 315.135436][ T9021] team0: Port device team_slave_1 added [ 315.187973][ T9040] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.226855][ T9040] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.254490][ T9040] bridge_slave_0: entered allmulticast mode [ 315.297745][ T9040] bridge_slave_0: entered promiscuous mode [ 315.357537][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.364501][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.401549][ T9021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.422574][ T9040] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.429603][ T5898] usb 5-1: new high-speed USB device number 34 using dummy_hcd [ 315.443942][ T9040] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.453561][ T9040] bridge_slave_1: entered allmulticast mode [ 315.473250][ T9040] bridge_slave_1: entered promiscuous mode [ 315.517742][ T9021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.534849][ T9021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.564416][ T9021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.591056][ T5898] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 315.618035][ T5898] usb 5-1: New USB device found, idVendor=04d8, idProduct=0083, bcdDevice=83.9c [ 315.634682][ T5898] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 315.647731][ T5898] usb 5-1: Product: syz [ 315.652042][ T5898] usb 5-1: Manufacturer: syz [ 315.657106][ T5898] usb 5-1: SerialNumber: syz [ 315.703907][ T5898] usb 5-1: config 0 descriptor?? [ 315.722826][ T5898] ims_pcu 5-1:0.0: probe with driver ims_pcu failed with error -22 [ 315.726656][ T9040] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.775793][ T9021] hsr_slave_0: entered promiscuous mode [ 315.781924][ T9021] hsr_slave_1: entered promiscuous mode [ 315.787878][ T5870] usb 1-1: new high-speed USB device number 28 using dummy_hcd [ 315.801746][ T9021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.811525][ T9021] Cannot create hsr debugfs directory [ 315.824995][ T9040] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.909698][ T6721] hsr_slave_0: left promiscuous mode [ 315.919938][ T6721] hsr_slave_1: left promiscuous mode [ 315.926548][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.941570][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.031346][ T5870] usb 1-1: Using ep0 maxpacket: 32 [ 316.038317][ T6721] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.049934][ T6721] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.057583][ T5870] usb 1-1: config 0 interface 0 has no altsetting 0 [ 316.070368][ T6721] veth1_macvtap: left promiscuous mode [ 316.076149][ T6721] veth0_macvtap: left promiscuous mode [ 316.082413][ T6721] veth1_vlan: left promiscuous mode [ 316.089461][ T6721] veth0_vlan: left promiscuous mode [ 316.095847][ T5870] usb 1-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 316.105181][ T5870] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 316.113243][ T5870] usb 1-1: Product: syz [ 316.134725][ T5870] usb 1-1: Manufacturer: syz [ 316.178602][ T5870] usb 1-1: SerialNumber: syz [ 316.237210][ T5870] usb 1-1: config 0 descriptor?? [ 316.466551][ T5835] Bluetooth: hci5: command tx timeout [ 316.840501][ T5870] gs_usb 1-1:0.0: Couldn't get device config: (err=-121) [ 316.848574][ T5870] gs_usb 1-1:0.0: probe with driver gs_usb failed with error -121 [ 316.948974][ T6721] team0 (unregistering): Port device team_slave_1 removed [ 316.981318][ T6721] team0 (unregistering): Port device team_slave_0 removed [ 317.062325][ T5870] usb 1-1: USB disconnect, device number 28 [ 317.247017][ T5835] Bluetooth: hci4: command tx timeout [ 317.313759][ T9040] team0: Port device team_slave_0 added [ 317.336865][ T9040] team0: Port device team_slave_1 added [ 317.405554][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 317.414719][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.448706][ T9040] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 317.507559][ T9040] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 317.530627][ T9040] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 317.566672][ T9040] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.068815][ T9040] hsr_slave_0: entered promiscuous mode [ 318.081834][ T9040] hsr_slave_1: entered promiscuous mode [ 318.088208][ T9040] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 318.101459][ T9040] Cannot create hsr debugfs directory [ 318.175965][ T6721] IPVS: stop unused estimator thread 0... [ 318.270199][ T9021] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 318.291970][ T9021] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 318.326520][ T9021] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 318.362654][ T9021] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 318.454140][ T5870] usb 5-1: USB disconnect, device number 34 [ 318.513047][ T116] usb 6-1: new high-speed USB device number 22 using dummy_hcd [ 318.524053][ T9040] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 318.631185][ T9040] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 318.683459][ T9040] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 318.693241][ T5835] Bluetooth: hci5: command tx timeout [ 318.849565][ T9040] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 319.403858][ T116] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xE8, changing to 0x88 [ 319.415546][ T116] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 319.432599][ T116] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0xA has an invalid bInterval 0, changing to 7 [ 319.470939][ T9021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.484172][ T116] usb 6-1: New USB device found, idVendor=1781, idProduct=0938, bcdDevice=9b.49 [ 319.494541][ T116] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 319.503224][ T116] usb 6-1: Product: syz [ 319.513888][ T9021] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.524262][ T9136] netlink: 40 bytes leftover after parsing attributes in process `syz.4.794'. [ 319.528982][ T116] usb 6-1: Manufacturer: syz [ 319.537855][ T9137] netlink: 40 bytes leftover after parsing attributes in process `syz.4.794'. [ 319.548841][ T9138] netlink: 36 bytes leftover after parsing attributes in process `syz.4.794'. [ 319.596473][ T116] usb 6-1: SerialNumber: syz [ 319.678447][ T116] usb 6-1: config 0 descriptor?? [ 319.696641][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.703722][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 319.722775][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.729883][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 319.814374][ T9040] 8021q: adding VLAN 0 to HW filter on device bond0 [ 319.827303][ T9040] 8021q: adding VLAN 0 to HW filter on device team0 [ 319.849879][ T9040] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 319.860343][ T9040] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.883535][ T9021] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 319.921689][ T749] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.928813][ T749] bridge0: port 1(bridge_slave_0) entered forwarding state [ 320.094245][ T749] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.101416][ T749] bridge0: port 2(bridge_slave_1) entered forwarding state [ 320.133509][ T25] usb 5-1: new high-speed USB device number 35 using dummy_hcd [ 320.306851][ T9021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.430576][ T9040] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 320.613089][ T25] usb 5-1: Using ep0 maxpacket: 8 [ 320.647396][ T25] usb 5-1: New USB device found, idVendor=0c45, idProduct=613a, bcdDevice=c4.6d [ 320.656463][ T25] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 320.665120][ T25] usb 5-1: Product: syz [ 320.669531][ T25] usb 5-1: Manufacturer: syz [ 320.674138][ T25] usb 5-1: SerialNumber: syz [ 320.709659][ T25] usb 5-1: config 0 descriptor?? [ 320.755516][ T25] gspca_main: sonixj-2.14.0 probing 0c45:613a [ 320.829987][ T9179] syz.0.798: attempt to access beyond end of device [ 320.829987][ T9179] nbd0: rw=0, sector=0, nr_sectors = 1 limit=0 [ 320.852632][ T9123] syz.5.793 (9123): drop_caches: 2 [ 320.868114][ T9123] syz.5.793 (9123): drop_caches: 2 [ 320.893229][ T9179] exFAT-fs (nbd0): unable to read boot sector [ 320.900178][ T9179] exFAT-fs (nbd0): failed to read boot sector [ 320.924278][ T9179] exFAT-fs (nbd0): failed to recognize exfat type [ 320.940592][ T9021] veth0_vlan: entered promiscuous mode [ 321.000985][ T9021] veth1_vlan: entered promiscuous mode [ 321.073487][ T9021] veth0_macvtap: entered promiscuous mode [ 321.103105][ T9021] veth1_macvtap: entered promiscuous mode [ 321.156667][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.180605][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.190925][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.201642][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.211965][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.222559][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.234118][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.246988][ T25] gspca_sonixj: reg_w1 err -71 [ 321.255117][ T25] sonixj 5-1:0.0: probe with driver sonixj failed with error -71 [ 321.262754][ T9040] veth0_vlan: entered promiscuous mode [ 321.273425][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.274802][ T25] usb 5-1: USB disconnect, device number 35 [ 321.287323][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.307656][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.318601][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.329027][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.340646][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.351084][ T9021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.365040][ T9021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.375813][ T9021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.399837][ T9040] veth1_vlan: entered promiscuous mode [ 321.409023][ T9021] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.418091][ T9021] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.427146][ T9021] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.436005][ T9021] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.498618][ T9040] veth0_macvtap: entered promiscuous mode [ 321.522502][ T9040] veth1_macvtap: entered promiscuous mode [ 321.559376][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.570780][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.572808][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.606258][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.616599][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.628422][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.649584][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.682332][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.713128][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 321.723920][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.735248][ T9040] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.760426][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.803264][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.859056][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.906812][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 321.954605][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 321.982772][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.027199][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.067174][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.107744][ T9040] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 322.140749][ T9040] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 322.171703][ T9040] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 322.199336][ T5819] usb 5-1: new high-speed USB device number 36 using dummy_hcd [ 322.225230][ T9040] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.258884][ T9040] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.270980][ T9040] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.284710][ T9040] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 322.360787][ T3678] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.373272][ T3678] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.382032][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 322.388894][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 322.436524][ T5819] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 322.460744][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 322.473815][ T29] audit: type=1400 audit(1734835289.531:602): avc: denied { mounton } for pid=9021 comm="syz-executor" path="/sys/fs/fuse/connections" dev="fusectl" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fusefs_t tclass=dir permissive=1 [ 322.512613][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.513256][ T5819] usb 5-1: Product: syz [ 322.527831][ T5819] usb 5-1: Manufacturer: syz [ 322.533225][ T5819] usb 5-1: SerialNumber: syz [ 322.562397][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.606936][ T5819] usb 5-1: config 0 descriptor?? [ 322.708289][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.724894][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 323.095607][ T5819] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 323.137258][ T5819] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 323.508636][ T5819] usb 5-1: USB disconnect, device number 36 [ 324.849949][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.857245][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.864867][ T9234] bridge0: entered allmulticast mode [ 325.269520][ T9250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.805'. [ 325.285055][ T9250] netlink: 40 bytes leftover after parsing attributes in process `syz.4.805'. [ 325.298089][ T9250] netlink: 36 bytes leftover after parsing attributes in process `syz.4.805'. [ 326.020963][ T9241] relay: one or more items not logged [item size (56) > sub-buffer size (10)] [ 326.538010][ T9260] syz.4.807: attempt to access beyond end of device [ 326.538010][ T9260] nbd4: rw=0, sector=0, nr_sectors = 1 limit=0 [ 326.589789][ T9260] exFAT-fs (nbd4): unable to read boot sector [ 326.597195][ T9260] exFAT-fs (nbd4): failed to read boot sector [ 326.609604][ T9260] exFAT-fs (nbd4): failed to recognize exfat type [ 328.205984][ T46] usb 8-1: new high-speed USB device number 2 using dummy_hcd [ 328.395786][ T46] usb 8-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 328.423734][ T46] usb 8-1: config 0 interface 0 has no altsetting 0 [ 328.440138][ T46] usb 8-1: New USB device found, idVendor=046a, idProduct=0027, bcdDevice= 0.00 [ 328.449676][ T46] usb 8-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 328.483969][ T46] usb 8-1: config 0 descriptor?? [ 328.504474][ T5819] usb 1-1: new high-speed USB device number 29 using dummy_hcd [ 328.679354][ T5819] usb 1-1: New USB device found, idVendor=07d0, idProduct=4101, bcdDevice=3f.fc [ 328.703742][ T5819] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 328.719834][ T5819] usb 1-1: Product: syz [ 328.728679][ T5819] usb 1-1: Manufacturer: syz [ 328.733471][ T5819] usb 1-1: SerialNumber: syz [ 328.749568][ T5819] usb 1-1: config 0 descriptor?? [ 328.761607][ T5819] cypress_m8 1-1:0.0: Nokia CA-42 V2 Adapter converter detected [ 328.781230][ T5819] nokiaca42v2 ttyUSB0: required endpoint is missing [ 328.928108][ T46] cherry 0003:046A:0027.0014: unknown main item tag 0x0 [ 328.940230][ T46] cherry 0003:046A:0027.0014: unknown main item tag 0x0 [ 328.964457][ T46] cherry 0003:046A:0027.0014: hidraw0: USB HID v0.00 Device [HID 046a:0027] on usb-dummy_hcd.7-1/input0 [ 329.149258][ T9276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.160031][ T9276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.173860][ T9276] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 329.195297][ T9276] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 329.298201][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 329.304589][ T1293] ieee802154 phy1 wpan1: encryption failed: -22 [ 329.541672][ T5819] usb 5-1: new high-speed USB device number 37 using dummy_hcd [ 329.733813][ T5819] usb 5-1: Using ep0 maxpacket: 32 [ 329.740466][ T5819] usb 5-1: config 0 interface 0 has no altsetting 0 [ 329.756377][ T5819] usb 5-1: New USB device found, idVendor=16d0, idProduct=10b8, bcdDevice=de.8e [ 329.766071][ T5819] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 329.774069][ T5819] usb 5-1: Product: syz [ 329.791766][ T5819] usb 5-1: Manufacturer: syz [ 329.798103][ T5819] usb 5-1: SerialNumber: syz [ 329.812873][ T5819] usb 5-1: config 0 descriptor?? [ 330.253012][ T5819] gs_usb 5-1:0.0: Couldn't get device config: (err=-121) [ 330.260751][ T5819] gs_usb 5-1:0.0: probe with driver gs_usb failed with error -121 [ 330.480795][ T5870] usb 5-1: USB disconnect, device number 37 [ 330.665483][ T116] ------------[ cut here ]------------ [ 330.671048][ T116] URB ffff88807ba52400 submitted while active [ 330.678692][ T116] WARNING: CPU: 0 PID: 116 at drivers/usb/core/urb.c:379 usb_submit_urb+0x14da/0x1730 [ 330.688402][ T116] Modules linked in: [ 330.692381][ T116] CPU: 0 UID: 0 PID: 116 Comm: kworker/0:2 Not tainted 6.13.0-rc3-syzkaller-00258-ge84a3bf7f4aa #0 [ 330.703225][ T116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 330.713375][ T116] Workqueue: usb_hub_wq hub_event [ 330.718511][ T116] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 330.724240][ T116] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 3e f2 ae fa c6 05 57 c5 5c 09 01 90 48 c7 c7 a0 1d 2e 8c 48 89 de e8 b7 2b 6f fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 330.744088][ T116] RSP: 0018:ffffc900026d7038 EFLAGS: 00010286 [ 330.750835][ T116] RAX: 0000000000000000 RBX: ffff88807ba52400 RCX: ffffc9001b67d000 [ 330.758821][ T116] RDX: 0000000000100000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 330.767441][ T116] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 330.775516][ T116] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807ba52400 [ 330.783639][ T116] R13: ffff88807aedec30 R14: ffff88807aedeca8 R15: ffff888029906000 [ 330.791685][ T116] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 330.800819][ T116] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 330.807544][ T116] CR2: 00007f62c0bf4580 CR3: 0000000033072000 CR4: 00000000003526f0 [ 330.815603][ T116] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 330.823642][ T116] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 330.831751][ T116] Call Trace: [ 330.835355][ T116] [ 330.838353][ T116] ? __warn+0xea/0x3c0 [ 330.842482][ T116] ? usb_submit_urb+0x14da/0x1730 [ 330.847631][ T116] ? report_bug+0x3c0/0x580 [ 330.852202][ T116] ? handle_bug+0x54/0xa0 [ 330.857072][ T116] ? exc_invalid_op+0x17/0x50 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 330.861768][ T116] ? asm_exc_invalid_op+0x1a/0x20 [ 330.867512][ T116] ? __warn_printk+0x1a6/0x350 [ 330.872352][ T116] ? usb_submit_urb+0x14da/0x1730 [ 330.877473][ T116] ? usb_submit_urb+0x14d9/0x1730 [ 330.882577][ T116] iguanair_probe+0xe78/0x22a0 [ 330.887420][ T116] usb_probe_interface+0x300/0x9c0 [ 330.892678][ T116] ? __pfx_usb_probe_interface+0x10/0x10 [ 330.898369][ T116] really_probe+0x23e/0xa90 [ 330.902969][ T116] __driver_probe_device+0x1de/0x440 [ 330.908292][ T116] driver_probe_device+0x4c/0x1b0 [ 330.913412][ T116] __device_attach_driver+0x1df/0x310 [ 330.919462][ T116] ? __pfx___device_attach_driver+0x10/0x10 [ 330.925652][ T116] bus_for_each_drv+0x157/0x1e0 [ 330.930560][ T116] ? __pfx_bus_for_each_drv+0x10/0x10 [ 330.936050][ T116] ? lockdep_hardirqs_on+0x7c/0x110 [ 330.941314][ T116] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 330.947241][ T116] __device_attach+0x1e8/0x4b0 [ 330.952070][ T116] ? __pfx___device_attach+0x10/0x10 [ 330.957479][ T116] ? do_raw_spin_unlock+0x172/0x230 [ 330.962748][ T116] bus_probe_device+0x17f/0x1c0 [ 330.968406][ T116] device_add+0x114b/0x1a70 [ 330.972919][ T116] ? __pfx_device_add+0x10/0x10 [ 330.978359][ T116] ? mark_held_locks+0x9f/0xe0 [ 330.983212][ T116] usb_set_configuration+0x10cb/0x1c50 [ 330.989051][ T116] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 330.995264][ T116] usb_generic_driver_probe+0xb1/0x110 [ 331.000878][ T116] usb_probe_device+0xec/0x3e0 [ 331.005800][ T116] ? __pfx_usb_probe_device+0x10/0x10 [ 331.011271][ T116] really_probe+0x23e/0xa90 [ 331.015845][ T116] __driver_probe_device+0x1de/0x440 [ 331.021248][ T116] ? usb_driver_applicable+0x1c7/0x220 [ 331.026747][ T116] driver_probe_device+0x4c/0x1b0 [ 331.031846][ T116] __device_attach_driver+0x1df/0x310 [ 331.037294][ T116] ? __pfx___device_attach_driver+0x10/0x10 [ 331.043342][ T116] bus_for_each_drv+0x157/0x1e0 [ 331.048270][ T116] ? __pfx_bus_for_each_drv+0x10/0x10 [ 331.053731][ T116] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.058984][ T116] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 331.064940][ T116] __device_attach+0x1e8/0x4b0 [ 331.069777][ T116] ? __pfx___device_attach+0x10/0x10 [ 331.075190][ T116] ? do_raw_spin_unlock+0x172/0x230 [ 331.080945][ T116] bus_probe_device+0x17f/0x1c0 [ 331.085798][ T116] device_add+0x114b/0x1a70 [ 331.090286][ T116] ? __pfx_device_add+0x10/0x10 [ 331.095790][ T116] ? add_device_randomness+0xb8/0xf0 [ 331.101124][ T116] usb_new_device+0xd90/0x1a10 [ 331.105955][ T116] ? __pfx_usb_new_device+0x10/0x10 [ 331.111195][ T116] hub_event+0x2d9a/0x4e10 [ 331.115735][ T116] ? __pfx_hub_event+0x10/0x10 [ 331.120546][ T116] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 331.126332][ T116] ? rcu_is_watching+0x12/0xc0 [ 331.131147][ T116] ? trace_lock_acquire+0x14e/0x1f0 [ 331.136445][ T116] ? process_one_work+0x921/0x1ba0 [ 331.141592][ T116] ? lock_acquire+0x2f/0xb0 [ 331.146189][ T116] ? process_one_work+0x921/0x1ba0 [ 331.151335][ T116] process_one_work+0x9c5/0x1ba0 [ 331.156452][ T116] ? __pfx_mld_ifc_work+0x10/0x10 [ 331.161546][ T116] ? __pfx_process_one_work+0x10/0x10 [ 331.167019][ T116] ? rcu_is_watching+0x12/0xc0 [ 331.171819][ T116] ? assign_work+0x1a0/0x250 [ 331.176419][ T116] worker_thread+0x6c8/0xf00 [ 331.181186][ T116] ? __kthread_parkme+0x148/0x220 [ 331.186784][ T116] ? __pfx_worker_thread+0x10/0x10 [ 331.192419][ T116] kthread+0x2c1/0x3a0 [ 331.196537][ T116] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.201917][ T116] ? __pfx_kthread+0x10/0x10 [ 331.206562][ T116] ret_from_fork+0x45/0x80 [ 331.211070][ T116] ? __pfx_kthread+0x10/0x10 [ 331.215725][ T116] ret_from_fork_asm+0x1a/0x30 [ 331.220596][ T116] [ 331.223662][ T116] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 331.230926][ T116] CPU: 0 UID: 0 PID: 116 Comm: kworker/0:2 Not tainted 6.13.0-rc3-syzkaller-00258-ge84a3bf7f4aa #0 [ 331.241593][ T116] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 331.251635][ T116] Workqueue: usb_hub_wq hub_event [ 331.256643][ T116] Call Trace: [ 331.259901][ T116] [ 331.262810][ T116] dump_stack_lvl+0x3d/0x1f0 [ 331.267399][ T116] panic+0x71d/0x800 [ 331.271283][ T116] ? __pfx_panic+0x10/0x10 [ 331.275678][ T116] ? show_trace_log_lvl+0x29d/0x3d0 [ 331.280868][ T116] ? usb_submit_urb+0x14da/0x1730 [ 331.285886][ T116] check_panic_on_warn+0xab/0xb0 [ 331.290833][ T116] __warn+0xf6/0x3c0 [ 331.294736][ T116] ? usb_submit_urb+0x14da/0x1730 [ 331.299757][ T116] report_bug+0x3c0/0x580 [ 331.304073][ T116] handle_bug+0x54/0xa0 [ 331.308223][ T116] exc_invalid_op+0x17/0x50 [ 331.312710][ T116] asm_exc_invalid_op+0x1a/0x20 [ 331.317540][ T116] RIP: 0010:usb_submit_urb+0x14da/0x1730 [ 331.323156][ T116] Code: fd eb cb bb fe ff ff ff e9 c1 f3 ff ff e8 3e f2 ae fa c6 05 57 c5 5c 09 01 90 48 c7 c7 a0 1d 2e 8c 48 89 de e8 b7 2b 6f fa 90 <0f> 0b 90 90 e9 b6 fe ff ff bb f8 ff ff ff e9 91 f3 ff ff 48 89 ef [ 331.342748][ T116] RSP: 0018:ffffc900026d7038 EFLAGS: 00010286 [ 331.348804][ T116] RAX: 0000000000000000 RBX: ffff88807ba52400 RCX: ffffc9001b67d000 [ 331.356757][ T116] RDX: 0000000000100000 RSI: ffffffff815a5086 RDI: 0000000000000001 [ 331.364713][ T116] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 331.372667][ T116] R10: 0000000000000001 R11: 0000000000000001 R12: ffff88807ba52400 [ 331.380627][ T116] R13: ffff88807aedec30 R14: ffff88807aedeca8 R15: ffff888029906000 [ 331.388590][ T116] ? __warn_printk+0x1a6/0x350 [ 331.393352][ T116] ? usb_submit_urb+0x14d9/0x1730 [ 331.398373][ T116] iguanair_probe+0xe78/0x22a0 [ 331.403132][ T116] usb_probe_interface+0x300/0x9c0 [ 331.408235][ T116] ? __pfx_usb_probe_interface+0x10/0x10 [ 331.413855][ T116] really_probe+0x23e/0xa90 [ 331.418347][ T116] __driver_probe_device+0x1de/0x440 [ 331.423618][ T116] driver_probe_device+0x4c/0x1b0 [ 331.428637][ T116] __device_attach_driver+0x1df/0x310 [ 331.433993][ T116] ? __pfx___device_attach_driver+0x10/0x10 [ 331.439868][ T116] bus_for_each_drv+0x157/0x1e0 [ 331.444703][ T116] ? __pfx_bus_for_each_drv+0x10/0x10 [ 331.450057][ T116] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.455242][ T116] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 331.461035][ T116] __device_attach+0x1e8/0x4b0 [ 331.465783][ T116] ? __pfx___device_attach+0x10/0x10 [ 331.471053][ T116] ? do_raw_spin_unlock+0x172/0x230 [ 331.476241][ T116] bus_probe_device+0x17f/0x1c0 [ 331.481075][ T116] device_add+0x114b/0x1a70 [ 331.485567][ T116] ? __pfx_device_add+0x10/0x10 [ 331.490405][ T116] ? mark_held_locks+0x9f/0xe0 [ 331.495161][ T116] usb_set_configuration+0x10cb/0x1c50 [ 331.500616][ T116] ? __pfx_usb_generic_driver_probe+0x10/0x10 [ 331.506692][ T116] usb_generic_driver_probe+0xb1/0x110 [ 331.512139][ T116] usb_probe_device+0xec/0x3e0 [ 331.516886][ T116] ? __pfx_usb_probe_device+0x10/0x10 [ 331.522257][ T116] really_probe+0x23e/0xa90 [ 331.526749][ T116] __driver_probe_device+0x1de/0x440 [ 331.532018][ T116] ? usb_driver_applicable+0x1c7/0x220 [ 331.537463][ T116] driver_probe_device+0x4c/0x1b0 [ 331.542472][ T116] __device_attach_driver+0x1df/0x310 [ 331.547830][ T116] ? __pfx___device_attach_driver+0x10/0x10 [ 331.553707][ T116] bus_for_each_drv+0x157/0x1e0 [ 331.558539][ T116] ? __pfx_bus_for_each_drv+0x10/0x10 [ 331.563893][ T116] ? lockdep_hardirqs_on+0x7c/0x110 [ 331.569076][ T116] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 331.574867][ T116] __device_attach+0x1e8/0x4b0 [ 331.579617][ T116] ? __pfx___device_attach+0x10/0x10 [ 331.584892][ T116] ? do_raw_spin_unlock+0x172/0x230 [ 331.590085][ T116] bus_probe_device+0x17f/0x1c0 [ 331.594920][ T116] device_add+0x114b/0x1a70 [ 331.599414][ T116] ? __pfx_device_add+0x10/0x10 [ 331.604249][ T116] ? add_device_randomness+0xb8/0xf0 [ 331.609553][ T116] usb_new_device+0xd90/0x1a10 [ 331.614315][ T116] ? __pfx_usb_new_device+0x10/0x10 [ 331.619507][ T116] hub_event+0x2d9a/0x4e10 [ 331.623927][ T116] ? __pfx_hub_event+0x10/0x10 [ 331.628690][ T116] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 331.634308][ T116] ? rcu_is_watching+0x12/0xc0 [ 331.639059][ T116] ? trace_lock_acquire+0x14e/0x1f0 [ 331.644265][ T116] ? process_one_work+0x921/0x1ba0 [ 331.649372][ T116] ? lock_acquire+0x2f/0xb0 [ 331.653904][ T116] ? process_one_work+0x921/0x1ba0 [ 331.659055][ T116] process_one_work+0x9c5/0x1ba0 [ 331.663996][ T116] ? __pfx_mld_ifc_work+0x10/0x10 [ 331.669032][ T116] ? __pfx_process_one_work+0x10/0x10 [ 331.674392][ T116] ? rcu_is_watching+0x12/0xc0 [ 331.679195][ T116] ? assign_work+0x1a0/0x250 [ 331.683780][ T116] worker_thread+0x6c8/0xf00 [ 331.688379][ T116] ? __kthread_parkme+0x148/0x220 [ 331.693424][ T116] ? __pfx_worker_thread+0x10/0x10 [ 331.698523][ T116] kthread+0x2c1/0x3a0 [ 331.702581][ T116] ? _raw_spin_unlock_irq+0x23/0x50 [ 331.707774][ T116] ? __pfx_kthread+0x10/0x10 [ 331.712363][ T116] ret_from_fork+0x45/0x80 [ 331.716779][ T116] ? __pfx_kthread+0x10/0x10 [ 331.721376][ T116] ret_from_fork_asm+0x1a/0x30 [ 331.726141][ T116] [ 331.729409][ T116] Kernel Offset: disabled [ 331.733755][ T116] Rebooting in 86400 seconds..