last executing test programs: 10.948357768s ago: executing program 4 (id=1977): r0 = socket$inet(0x2, 0x1, 0x100) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) madvise(&(0x7f00004ba000/0x2000)=nil, 0x2000, 0xc) madvise(&(0x7f0000bdc000/0x4000)=nil, 0x86ac726dff2f4713, 0xa) syz_clone(0x20223000, 0x0, 0x0, 0x0, 0x0, 0x0) syz_usb_connect(0x0, 0x2d, &(0x7f00000002c0)=ANY=[@ANYBLOB="1201000052e8e510b1134200c4dc0102030109021b00010000000009044400012eafb2000905810dff"], 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) r1 = syz_open_dev$sndpcmp(&(0x7f0000000200), 0x9, 0x840) mmap$snddsp(&(0x7f0000bdf000/0x1000)=nil, 0x1000, 0x9, 0x12, r1, 0xc000) sendto$inet(r0, &(0x7f00000012c0)="09268a", 0x3, 0x5, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703fbff07000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r3, 0x29, 0x18, &(0x7f0000000100)=0x7d3, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup.cpu/cgroup.procs\x00', 0x0, 0x20) preadv(r4, &(0x7f0000001b00)=[{&(0x7f00000009c0)=""/239, 0xef}], 0x1, 0x2, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000080)={{0x12, 0x1, 0x141, 0x48, 0x13, 0x44, 0x20, 0x424, 0x7500, 0x69ee, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x12, 0x1, 0x0, 0x0, 0x10, 0x0, [{{0x9, 0x4, 0xb8, 0x7, 0x0, 0x96, 0xd1, 0xca}}]}}]}}, 0x0) read$FUSE(r4, &(0x7f0000005b80)={0x2020}, 0x2020) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x32, &(0x7f0000000180)=r5, 0x4) sendmsg$inet(r7, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x20000000) recvfrom$l2tp(r0, 0x0, 0x3, 0x63, 0x0, 0x0) 8.820812231s ago: executing program 0 (id=1984): ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0xa01f, 0xf09, 0x5, 0x8, 0x6, 0x5, 0x378, 0x81, 0x9, 0x40, 0x1, 0x8001, 0x9, 0x5d, 0x9, 0x7, 0x7fffffff, 0x8008001, 0x101, 0x3, 0x9, 0x5, 0x5, 0x80000000, 0x9, 0x3, 0x4, 0x0, 0x4, 0xc, 0x7d2d, 0x4]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getxattr(&(0x7f0000000240)='./file0\x00', 0x0, &(0x7f0000000480)=""/4096, 0x1000) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000000)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) io_setup(0x59, &(0x7f0000000180)=0x0) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x7f, 0x400000) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x3, r4, &(0x7f0000000240)="996012f5e478914d3ab5ebec1accbb7245145287c757daad96753e8e58a45a1c7fa3bc66a07f4cc75ecef3fb5dafa4c9913b32148d3692c152106fbed36e7820b7a35e99380f578b7446c82578affea2e9271e63ad8fd92d950621836df302680568db49923a02eb8eac71e9fdc5ff6fd693929248253059bf857eb0af2ca132ef8c2719e88d58d19df9316afa7f3320d91ea20d39a2528e8f0227898138ec22a2e263337238bbda6234726aab57b8e5c9f2592aa6d5c1e97ad23cbaee71009bc384e7665454fd89b469876805", 0xcd, 0x5, 0x0, 0x1}]) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x9, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 8.76623423s ago: executing program 3 (id=1987): setitimer(0x1, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x989680}, 0xe489c0339f88a157) r6 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r6, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, 0x0, 0x0) modify_ldt$write(0x1, &(0x7f0000000040)={0x600}, 0x10) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0) 7.990257653s ago: executing program 0 (id=1990): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x18000000, 0x0, 0x0, 0x4, 0x0, 0xffffffff}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000240)=0x7) r2 = getpid() sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000786c6c2500000000002020200600000000000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000070000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = fsopen(&(0x7f0000000200)='btrfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r6, 0x1, &(0x7f0000000040)='source', &(0x7f0000002280)='//\xf2b\x06\b\xba\xdf/o\xdc\xea\x95\x9a\x82\x10\x97W\x8f7\x98\x9b//\\\x00\rmD\x94)U\xdb\x15X.I\n}\xf3\x9d\xe4_\x05\x9cqf4I^#b?9\xde\xafu\'\x83L\xe0\x97\xe1n_\xa4%\xb1\x97\x93\xafv\xce/\\\xb4L\xf2_\xa7\xfb\xf4\x84\x1fA\xeas^\xef\xa2\x85\xa3!\xfb\x97\xd7R\xab2\x1eW\xe9h\x9b\xf7ul\xf9D\xd4\x82X5\x13\xaa\x87\xf9\xba\xa9m\x14\x14R_\x9a\\>4\xce\x8e_#\xf8DD\x9bp\x01\xcc:\xa6\xc5n\x9f\xfb\x81 \x10\x0fQ\x90}Zd\xeb\xab\xf70\x99\xef\x8b0x0}) connect$can_bcm(r1, &(0x7f00000001c0)={0x1d, r2}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$vim2m_VIDIOC_REQBUFS(r1, 0xc0145608, &(0x7f0000000280)={0x2, 0x1, 0x7, 0x0, 0x6}) ioctl$TIOCVHANGUP(r1, 0x5437, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000001840), 0x2982, 0x0) r5 = openat$procfs(0xffffffffffffff9c, &(0x7f00000001c0)='/proc/timer_list\x00', 0x0, 0x0) sendfile(r4, r5, 0x0, 0x20000023896) 6.878330046s ago: executing program 3 (id=1992): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss, @sack_perm, @window={0x3, 0x74a}, @timestamp, @mss, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 6.797361858s ago: executing program 3 (id=1993): r0 = syz_open_pts(0xffffffffffffffff, 0x105282) ioctl$TIOCSWINSZ(r0, 0x5414, &(0x7f0000000000)={0x8, 0x0, 0x8001, 0x5}) r1 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x1) r3 = openat$cgroup_type(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) write$cgroup_type(r3, &(0x7f0000000080), 0x9) timer_create(0x2, &(0x7f0000000280)={0x0, 0x23, 0x2, @thr={&(0x7f00000000c0)="f36516bf647f30bcfa4ddfa6dbfa306c878ae60d8fd7c85d2655f513af43634f64212788d4f2a53cc3e8ea73341aad0d7c80c1b611577a797d298e486d2c08e94987a3578dd8703332559494ef7438a0bb8f0be30768fdae1246c8837cf748aec58a82e9bd10acabc97074eaa27c4287f50677140d6ea2e1c917f5eb90bf20280b25338419da55daaa461d9499f4a19439ba4bd09c82af6fb89eb43a4496d333386f4d92581d422cc37123d14d236aa5fcdcd8a7414e9c2eaf83a21fc364010736564a75873c1f7e7d8f8a5064f247a3b2b6bd27443e7f38c73787410718f1140d9972c3b03bd5585066cf0b18c584", &(0x7f00000001c0)="e7c5fe3c9e389b524c660beec0b08fa1d7d91f263f2d2ce85258f5f0ec9fdd601fa06e5a1acf34d34973c0a51910b740d6da2cac0bdc89806a81ed5fd3b70f3de122951da595bf577becdc8ec40b20cf6830e86169048b2a03ebd753a68cf0b6c5de7677bac564a61fa537c30f8acdc5cb8b2aa66d0be3a7adadbc43956ca0e581d7f340f102de3ef1f8e392c374b0a8a8"}}, &(0x7f00000002c0)) r4 = syz_open_dev$loop(&(0x7f0000000300), 0x6, 0x2080) ioctl$LOOP_SET_FD(r4, 0x4c00, r1) ioctl$TIOCSTI(r0, 0x5412, &(0x7f0000000340)=0xa7) r5 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) setsockopt$bt_rfcomm_RFCOMM_LM(r5, 0x12, 0x3, &(0x7f0000000380)=0x11, 0x4) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000400), 0xffffffffffffffff) ioctl$KVM_SET_GSI_ROUTING(0xffffffffffffffff, 0x4008ae6a, &(0x7f0000000500)={0x8, 0x0, [{0x8001, 0x5, 0x0, 0x0, @adapter={0x7, 0x1532, 0x3, 0xfffffff8, 0xe}}, {0x10, 0x2, 0x1, 0x0, @msi={0x8001, 0x80000000, 0x4, 0x2}}, {0x4b94ba3b, 0x3, 0x1, 0x0, @adapter={0x80, 0x4, 0x699, 0x34, 0x4}}, {0xb, 0x2, 0x0, 0x0, @sint={0x3, 0xc864}}, {0x3, 0x0, 0x0, 0x0, @sint={0xfffffffa, 0x4}}, {0x3b118793, 0x3, 0x1, 0x0, @msi={0xfffff854, 0x9, 0x8000, 0x524}}, {0x5, 0x2, 0x1, 0x0, @sint={0x5, 0x10001}}, {0x0, 0x3, 0x0, 0x0, @adapter={0x9f43, 0x3, 0x1, 0xffffffff, 0x4477}}]}) r7 = accept$unix(0xffffffffffffffff, &(0x7f00000006c0)=@abs, &(0x7f0000000740)=0x6e) connect$unix(r7, &(0x7f0000000780)=@file={0x0, './file0\x00'}, 0x6e) socket$alg(0x26, 0x5, 0x0) ioctl$KVM_KVMCLOCK_CTRL(r2, 0xaead) ioctl$DRM_IOCTL_PRIME_HANDLE_TO_FD(0xffffffffffffffff, 0xc00c642d, &(0x7f0000000800)) ioctl$SNDCTL_SEQ_SYNC(r6, 0x5101) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r8, 0x89f2, &(0x7f0000000940)={'ip6gre0\x00', &(0x7f00000008c0)={'syztnl1\x00', 0x0, 0x4, 0xf2, 0x7, 0xfffffff3, 0x0, @private2, @dev={0xfe, 0x80, '\x00', 0x17}, 0x10, 0x8000, 0x6, 0x2}}) dup2(r7, r0) r9 = openat$tcp_congestion(0xffffffffffffff9c, &(0x7f0000000980), 0x1, 0x0) tee(r2, r9, 0xffffffffffff0001, 0x4) 6.725794797s ago: executing program 0 (id=1994): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x2860020, &(0x7f0000000180)=ANY=[]) r2 = getpid() socket$netlink(0x10, 0x3, 0x8) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r5) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r6, 0x31f, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002800000028000000020000000100000000"], 0x0, 0x42, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) pipe2(&(0x7f0000000000), 0x4800) r7 = openat$ptmx(0xffffffffffffff9c, &(0x7f0000000100), 0x2e80, 0x0) ioctl$TIOCPKT(r7, 0x5420, &(0x7f00000000c0)=0x1) 6.378633856s ago: executing program 2 (id=1995): socket$kcm(0x10, 0x3, 0x10) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setresgid(0xee00, 0xee01, 0x0) setregid(0xffffffffffffffff, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000180)=ANY=[@ANYBLOB="1200000056000106000000000000000007"], 0x1c}], 0x1}, 0x0) 5.867769245s ago: executing program 3 (id=1996): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) semctl$GETVAL(0x0, 0x1, 0xc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)='G\x00\x00\x00', 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316858268cb89e14f00800", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x88) getsockopt$inet6_opts(r7, 0x29, 0x37, 0x0, &(0x7f0000000240)) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000340)=""/148, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x450, 0x2e8, 0x2e8, 0x450, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x2, 0xab, 0xfffffff9, '\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x38}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xff], 'batadv_slave_0\x00', 'nicvf0\x00', {}, {0xff}, 0x3c, 0x4, 0x5, 0x3e}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xf0e, 0x0, 0x1000, 0x8, 0x9, 0xfffffff2, 0xe, 0x6]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) accept(r0, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) clock_gettime(0x0, &(0x7f0000004b40)) 5.815846393s ago: executing program 4 (id=1997): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) socket$inet_udp(0x2, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat(0xffffffffffffff9c, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r1 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = syz_open_dev$vcsa(&(0x7f0000000300), 0x1, 0x102) ioctl$int_in(r5, 0x5421, &(0x7f00000000c0)=0x5d4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r6}, 0x10) sched_setaffinity(0x0, 0x8, &(0x7f0000000240)=0x6) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x1c, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1001a}}, 0x1c}}, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r4, &(0x7f00000001c0)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000180)={0xffffffffffffffff}, 0x106, 0x6}}, 0x20) write$RDMA_USER_CM_CMD_DESTROY_ID(r5, &(0x7f0000000280)={0x1, 0x10, 0xfa00, {&(0x7f0000000040), r8}}, 0x18) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000100)=0x14) 4.697075867s ago: executing program 2 (id=1998): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r1 = fsopen(0x0, 0x1) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, 0x0, &(0x7f0000000240)='5\x05\x05\xc6\xc9]\v\xd6S9q\x0f#\x93\x9d\xeb\x00\xcf\xb2~9*\xa9\x1d:\x06u46N\xd9\xf3R\xcd\xb8`\"\x9a\x1a%h\xac\xb3\xbec\a\x00\x00\x00\x00\x00\x00\x00\xbeT\x16\xab\xfb=4\xa6\x10,\"\xee\xf8o+\x02\xd8\xaft_\r\x1d\"\xc8\\k\xcc4\x96\xdb\xb0\xadA\x02[\x16\xb4\xca\xa5n\x87\xdb\xb3\x1f\xbb\xc0\x9f\xc2\x9e\t[\xba\x9e\xfd\xc76#\x8f\xc6\xe7\x11\x8fL\xd970xffffffffffffffff}) r3 = openat(0xffffffffffffff9c, &(0x7f0000000040)='.\x00', 0x0, 0x0) fcntl$notify(r3, 0x402, 0x4) r4 = openat(0xffffffffffffff9c, &(0x7f0000000200)='.\x00', 0x0, 0x0) fcntl$notify(r4, 0x402, 0x26) close_range(r2, 0xffffffffffffffff, 0x0) 4.456808445s ago: executing program 0 (id=1999): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r1, &(0x7f0000000080)={{0x3, @default, 0x1}, [@null, @default, @default, @null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000000400)) sendmsg$nl_xfrm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f0000000040)=ANY=[@ANYBLOB="54020000170001000000000000000000200100000000000000000000000000010000000000000000ac141400000000000000000000000000fc020000000000000003000000000000e000000200001000000000000000000000000000000000080a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="1242ffff040000000000000000000037660b6aff00000000000000000000000000000000000000000200002000000000", @ANYRES32, @ANYRES32, @ANYBLOB="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"], 0x254}}, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = syz_open_dev$vim2m(&(0x7f0000000280), 0x4, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0405602, &(0x7f0000000040)={0xd, 0x1, 0x0, "f819ebf45608e255b61c5deb3eb574d486d27e0600000000040000000006f100"}) bind$alg(r2, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(blowfish-generic)\x00'}, 0x58) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = fsopen(&(0x7f0000000240)='rpc_pipefs\x00', 0x1) fsconfig$FSCONFIG_SET_STRING(r5, 0x1, &(0x7f0000000180)='rootcontext', &(0x7f0000000040)='E\xe1\x85\x00', 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="780000001000210400000000fcdbdf2500000000", @ANYRES32=0x0, @ANYBLOB="adffa88800200000140003006d6163736563300000000000000000000a000100aaaaaaaaaa2e000009002400729ed35e760000002c002b80080001"], 0x78}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)=',8', 0x2) r6 = socket$tipc(0x1e, 0x2, 0x0) mprotect(&(0x7f0000000000/0x800000)=nil, 0x800000, 0x5) r7 = socket$rxrpc(0x21, 0x2, 0x2) getsockopt(r7, 0x110, 0x6, 0x0, &(0x7f0000000280)=0x51) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmmsg$sock(r6, &(0x7f0000000640)=[{{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000000)="330fabb52f128a8ab7e5785320939f44df93bf5fe974f56217504388e11599b6e032c18098798a8e977e", 0x2a}, {&(0x7f0000000200)="b121913ae61e8c1524b20bf9d43ada38b1e289a6180bb048b853a151038cae1b610f1cb4ed54d3bd0778df664b39396f976488ab", 0x34}, {&(0x7f0000000340)="b246a75785887705bc01107f4df0f66e2d305409e15dcc", 0x17}, {&(0x7f0000000380)}, {&(0x7f0000000440)="35696ea8b739e5ea1e980f4993c2222875d69ba81cd9bf7834b4cd92e8277a8f52ea407fe1a862c954f1c57a42472973100ce30d25be98a083664e92b18871a8ef1353a1141f648c00b50837c8215edaba10547850ed167d627a3b6a684140c8ac32a56c3abbce69", 0x68}, {&(0x7f00000004c0)="991a27cd83ff2bef86a15fa1b87fde5d72e058b0b189ab455948fee2e77ee2c9c2d47c6ca942470d911663e0612d643f3bb254acac5b4bdd8bca348801db0df0100a556369a2d87a5df21caeeea31e839b733ea6d8bfa05286ade4d97e461ce74247f605b7bc4b455d303112ea3b91270ce49ee3197c3e929d91035f4ae372de479abd092b4dede1814dfd524f9dadac2cb7a5b9d67d744cd01909024780664bf42e595dc87be582650afd40f324", 0xae}, {&(0x7f00000003c0)="ee5f2bc965734c0f4f728d1121f716152e2063a7aba4fe98d684", 0x1a}], 0x7, &(0x7f0000000600)=[@timestamping={{0x14, 0x1, 0x25, 0x1}}], 0x18}}], 0x1, 0x20040010) syz_usbip_server_init(0x3) r8 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r8, &(0x7f0000000040)={0x1f, @any, 0x2}, 0xa) r9 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) connect$bt_rfcomm(r9, &(0x7f00000001c0)={0x1f, @none, 0x1}, 0xa) shutdown(r8, 0x1) syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) 4.45501468s ago: executing program 3 (id=2000): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = gettid() r1 = syz_usb_connect$hid(0x3, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x20, 0x4fc, 0x5d8, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x2, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io$hid(r1, 0x0, 0x0) syz_usb_control_io$hid(r1, &(0x7f0000002540)={0x24, 0x0, 0x0, &(0x7f00000013c0)={0x0, 0x22, 0x5, {[@main=@item_4={0x3, 0x0, 0x9, "83c5b03b"}]}}, 0x0}, 0x0) r2 = syz_open_procfs(r0, &(0x7f0000000040)='net/packet\x00') setsockopt$netrom_NETROM_N2(r2, 0x103, 0x3, &(0x7f000001a240)=0x9, 0x4) r3 = socket$kcm(0xa, 0x2, 0x73) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r4}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r5 = getpid() sched_setscheduler(r5, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r6, &(0x7f000001a300)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r7, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r6, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_procfs(0x0, &(0x7f0000000180)='pagemap\x00') r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, 0x0, 0x4004801) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r9, 0x0, 0x0) sendmsg$inet(r3, &(0x7f0000001180)={0x0, 0x0, &(0x7f000001a3c0)=[{&(0x7f0000000040)}], 0x1}, 0x0) 4.335829275s ago: executing program 2 (id=2001): syz_open_procfs(0x0, &(0x7f0000000040)='fd/4\x00') r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) syz_open_dev$tty20(0xc, 0x4, 0x1) rt_sigprocmask(0x0, &(0x7f0000000000)={[0xfffffffffffffffd]}, 0x0, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) mount$9p_fd(0x0, 0x0, &(0x7f0000000040), 0x2860020, 0x0) r1 = getpid() socket$netlink(0x10, 0x3, 0x8) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) open_by_handle_at(0xffffffffffffffff, &(0x7f0000000180)=ANY=[], 0x1) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) sendmsg$IEEE802154_LLSEC_LIST_SECLEVEL(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000001c0)={0x14, r5, 0x31f, 0xffffffff}, 0x14}, 0x1, 0x0, 0x0, 0x40c0}, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) pipe2(&(0x7f0000000000), 0x4800) r6 = openat$ptmx(0xffffffffffffff9c, 0x0, 0x2e80, 0x0) ioctl$TCSETS(r6, 0x5402, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, "fe94b89fc43c3328eae0cae1f5eba329e6f216"}) 4.29076127s ago: executing program 4 (id=2002): setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, &(0x7f0000fbe000)={0x0, 0x0}, 0x10) (async) r0 = userfaultfd(0x801) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f00000000c0)) (async) r1 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r1, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) (async) setsockopt$inet_msfilter(r1, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f00000000c0)={@multicast2, @loopback, @rand_addr=0x64010100}, 0xc) (async) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000000)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) (async) ioctl$UFFDIO_CONTINUE(r0, 0xc020aa08, &(0x7f0000000080)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}}) 4.279407727s ago: executing program 1 (id=2003): setitimer(0x1, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x989680}, 0xe489c0339f88a157) r6 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r6, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000040), 0x4) modify_ldt$write(0x1, 0x0, 0x0) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0) 3.339455454s ago: executing program 1 (id=2004): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0x18, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000340)=[@timestamp, @mss, @sack_perm, @window={0x3, 0x74a}, @timestamp, @mss, @timestamp, @sack_perm], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) 3.338670859s ago: executing program 2 (id=2005): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000180)={0x10000000, 0x5, 0x6, 0x400, 0xffff7b03, 0x80000000, 0xf2e}) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405514, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe01, 0x7aa, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x4, 0x3, 0xffffffff, 0x8000000, 0x0, 0xe1a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x81, 0x0, 0x0, 0x0, 0x0, 0x101, 0x40003, 0x10001, 0x62c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff7ffc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x83, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x7e67, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfff, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x880a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x1ff, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) 3.260816377s ago: executing program 4 (id=2006): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) semctl$GETVAL(0x0, 0x1, 0xc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)='G\x00\x00\x00', 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316858268cb89e14f00800", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x88) getsockopt$inet6_opts(r7, 0x29, 0x37, 0x0, &(0x7f0000000240)) syz_open_dev$sndpcmc(0x0, 0x0, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@empty, @multicast, @void, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "11d538035d903ed0"}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000340)=""/148, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x450, 0x2e8, 0x2e8, 0x450, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x2, 0xab, 0xfffffff9, '\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x38}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xff], 'batadv_slave_0\x00', 'nicvf0\x00', {}, {0xff}, 0x3c, 0x4, 0x5, 0x3e}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xf0e, 0x0, 0x1000, 0x8, 0x9, 0xfffffff2, 0xe, 0x6]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) accept(r0, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) clock_gettime(0x0, &(0x7f0000004b40)) 3.044058409s ago: executing program 1 (id=2007): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4000041}, 0x20000814) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) getpid() prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0x8) socket$nl_generic(0x10, 0x3, 0x10) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) connect$inet6(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000001ec0), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20040803}, 0x20000000) 2.13815449s ago: executing program 4 (id=2008): mkdirat(0xffffffffffffff9c, &(0x7f0000000400)='./file0\x00', 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x0, 0x0, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x40008b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000040)=0x1) sched_setaffinity(0x0, 0xfffffffffffffdc5, &(0x7f00000002c0)=0x800002) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'geneve0\x00'}) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x8031, 0xffffffffffffffff, 0x0) madvise(&(0x7f0000000000/0x600000)=nil, 0x600002, 0x9) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$SO_BINDTODEVICE_wg(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) creat(&(0x7f00000021c0)='./cgroup.net/devices.allow\x00', 0xc1) io_setup(0x206, &(0x7f0000000200)=0x0) io_submit(r1, 0x0, 0x0) 1.956018896s ago: executing program 1 (id=2009): r0 = getpgrp(0x0) socketpair(0xa, 0x80c, 0x56, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$inet(r1, &(0x7f00000000c0)={0x2, 0x4e23, @multicast1}, 0x10) r2 = syz_pidfd_open(r0, 0x0) pidfd_send_signal(r2, 0x0, &(0x7f0000000140)={0xfffffffd, 0x0, 0xd2000000}, 0x4) fsetxattr(r2, &(0x7f0000000000)=@random={'os2.', '.[\x00'}, &(0x7f0000000040)='/]\x00', 0x3, 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB=' \x00\x00\x00i\x00\v'], 0x20}}, 0x4000000) 1.32497194s ago: executing program 0 (id=2010): mmap(&(0x7f0000000000/0xe7e000)=nil, 0xe7e000, 0xfffffffffefffff6, 0x20031, 0xffffffffffffffff, 0x0) ioctl$KDSKBLED(0xffffffffffffffff, 0x4b65, 0x2) r0 = userfaultfd(0x80001) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r1 = syz_open_dev$sndmidi(&(0x7f0000000040), 0x2, 0x141101) r2 = dup(r1) write$6lowpan_enable(r2, &(0x7f0000000000)='0', 0xfffffd2c) r3 = syz_io_uring_setup(0x24c7, &(0x7f0000000280)={0x0, 0x1c2a, 0x20, 0x1, 0x3b8, 0x0, r2}, &(0x7f00000000c0)=0x0, &(0x7f0000000080)=0x0) syz_io_uring_submit(r4, r5, &(0x7f0000000040)=@IORING_OP_POLL_ADD={0x6, 0x2, 0x0, @fd=r1, 0x0, 0x0, 0x0, {}, 0x1}) io_uring_enter(r3, 0x2ded, 0x4000, 0x0, 0x0, 0x0) r6 = openat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x2c41, 0x0) flock(r6, 0x5) r7 = openat(0xffffffffffffff9c, &(0x7f00000001c0)='./file0\x00', 0x0, 0x0) flock(r7, 0x2) ioctl$UFFDIO_API(r0, 0xc018aa3f, &(0x7f0000000000)) ioctl$UFFDIO_REGISTER(r0, 0xc020aa00, &(0x7f0000000140)={{&(0x7f00000e2000/0xc00000)=nil, 0xc00000}, 0x4}) ioctl$UFFDIO_COPY(r0, 0xc028aa03, &(0x7f0000000040)={&(0x7f00006c6000/0x400000)=nil, &(0x7f0000685000/0x4000)=nil, 0x400000, 0x0, 0x18100}) 1.323765572s ago: executing program 2 (id=2011): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) semctl$GETVAL(0x0, 0x1, 0xc, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r4, &(0x7f0000000000)='G\x00\x00\x00', 0x4) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$VT_RESIZEX(r5, 0x560a, &(0x7f0000000080)={0x0, 0x0, 0x4, 0x4, 0x4}) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x4, 0xc, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@i, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xd, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000a00)={r6, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000240)="b9ff03316858268cb89e14f00800", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(0xffffffffffffffff, 0x10e, 0x1, 0x0, 0x0) r7 = socket$inet6(0xa, 0x3, 0x88) getsockopt$inet6_opts(r7, 0x29, 0x37, 0x0, &(0x7f0000000240)) syz_emit_ethernet(0x1e, &(0x7f0000000000)={@empty, @multicast, @void, {@can={0xc, {{0x3, 0x0, 0x0, 0x1}, 0x6, 0x1, 0x0, 0x0, "11d538035d903ed0"}}}}, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1, 0x4, &(0x7f00000010c0)=ANY=[@ANYRESHEX], &(0x7f0000000140)='GPL\x00', 0x0, 0x94, &(0x7f0000000340)=""/148, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000001300)=@raw={'raw\x00', 0x3c1, 0x3, 0x520, 0x0, 0x8, 0x7f02ae, 0x0, 0x200, 0x450, 0x2e8, 0x2e8, 0x450, 0x2e8, 0x3, 0x0, {[{{@uncond, 0x0, 0x300, 0x368, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @fd={0x2, 0x0, r8}}, @inet=@rpfilter={{0x28}, {0xc}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x6, 0x2, 0xab, 0xfffffff9, '\x00', 'syz0\x00', {0x6}}}}, {{@ipv6={@rand_addr=' \x01\x00', @dev={0xfe, 0x80, '\x00', 0x38}, [0xffffff00, 0xffffff00, 0xffffffff, 0xff], [0xffffffff, 0xffffffff, 0xff], 'batadv_slave_0\x00', 'nicvf0\x00', {}, {0xff}, 0x3c, 0x4, 0x5, 0x3e}, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40, 'TCPOPTSTRIP\x00', 0x0, {[0xf0e, 0x0, 0x1000, 0x8, 0x9, 0xfffffff2, 0xe, 0x6]}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x580) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x65, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) accept(r0, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000100)=0x80) clock_gettime(0x0, &(0x7f0000004b40)) 1.16499392s ago: executing program 1 (id=2012): ioctl$VIDIOC_SUBDEV_DV_TIMINGS_CAP(0xffffffffffffffff, 0xc0905664, &(0x7f00000000c0)={0x0, 0x0, '\x00', @raw_data=[0xa01f, 0xf09, 0x5, 0x8, 0x6, 0x5, 0x378, 0x81, 0x9, 0x40, 0x1, 0x8001, 0x9, 0x5d, 0x9, 0x7, 0x7fffffff, 0x8008001, 0x101, 0x3, 0x9, 0x5, 0x5, 0x80000000, 0x9, 0x3, 0x4, 0x0, 0x4, 0xc, 0x7d2d, 0x4]}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$kvm(0xffffffffffffff9c, 0x0, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000200)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x42, 0x0) mount$fuse(0x0, &(0x7f0000000000)='./file0\x00', &(0x7f0000002100), 0x0, &(0x7f0000002140)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=0000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) getxattr(&(0x7f0000000240)='./file0\x00', &(0x7f0000000280)=@known='system.posix_acl_default\x00', 0x0, 0x0) r1 = socket(0x1e, 0x5, 0x0) listen(r1, 0x0) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) io_setup(0x59, &(0x7f0000000180)=0x0) r4 = syz_open_dev$video4linux(&(0x7f00000001c0), 0x7f, 0x400000) io_submit(r3, 0x1, &(0x7f0000000380)=[&(0x7f0000000340)={0x0, 0x0, 0x0, 0x8, 0x3, r4, &(0x7f0000000240)="996012f5e478914d3ab5ebec1accbb7245145287c757daad96753e8e58a45a1c7fa3bc66a07f4cc75ecef3fb5dafa4c9913b32148d3692c152106fbed36e7820b7a35e99380f578b7446c82578affea2e9271e63ad8fd92d950621836df302680568db49923a02eb8eac71e9fdc5ff6fd693929248253059bf857eb0af2ca132ef8c2719e88d58d19df9316afa7f3320d91ea20d39a2528e8f0227898138ec22a2e263337238bbda6234726aab57b8e5c9f2592aa6d5c1e97ad23cbaee71009bc384e7665454fd89b469876805", 0xcd, 0x5, 0x0, 0x1}]) madvise(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x64) close_range(r2, 0xffffffffffffffff, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x270, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="0203"], 0x10}}, 0x0) io_submit(0x0, 0x1, &(0x7f0000000200)=[&(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0}]) r5 = syz_open_dev$vim2m(&(0x7f0000000000), 0x7, 0x2) ioctl$vim2m_VIDIOC_G_FMT(r5, 0xc0285629, &(0x7f0000000080)={0x3, @win={{0x2}, 0x9, 0x0, &(0x7f0000000040), 0x0, 0x0}}) 476.875734ms ago: executing program 4 (id=2013): r0 = syz_usb_connect(0x0, 0x24, &(0x7f0000000000)=ANY=[@ANYBLOB="12010000a3b370086d04ae085811f1010301090212000d000000000904"], 0x0) syz_usb_control_io$cdc_ncm(r0, 0x0, 0x0) syz_usb_control_io$uac1(r0, 0x0, 0x0) syz_usb_disconnect(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@ipv6_getaddrlabel={0x1c, 0x4a, 0x492dfc465ae32a8d}, 0x1c}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000400)=[{0x6}]}, 0x10) getsockopt$sock_buf(r3, 0x1, 0x1f, &(0x7f0000000080)=""/1, &(0x7f00000000c0)=0x1) clock_nanosleep(0x9, 0x0, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000040)=ANY=[@ANYRES64=r1, @ANYRES16=r1], 0x0) sendmsg$IPSET_CMD_ADD(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="50000000090601020000000000000000020000000900020073797a31000000000500010007000000280007800c00018008000140ffffffff0500070084000000060004404e220000060005"], 0x50}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) 369.28202ms ago: executing program 0 (id=2014): r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xa4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x74, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) 10.60153ms ago: executing program 2 (id=2015): setitimer(0x1, &(0x7f00000001c0)={{0x0, 0x2710}, {0x0, 0x2710}}, 0x0) setitimer(0x1, &(0x7f0000000000)={{0x77359400}, {0x77359400}}, 0x0) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x25, 0x0, 0x0) r0 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0xb4, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r1, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x20, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x4}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r3 = socket$inet(0xa, 0x801, 0x84) connect$inet(r3, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r3, 0x8) r4 = accept4(r3, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x3}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000400)={0x0, 0x4}, 0x8) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000640)=0x6) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) futex_waitv(0x0, 0x0, 0x0, &(0x7f0000000ec0)={0x0, 0x989680}, 0xe489c0339f88a157) r6 = socket$inet_sctp(0x2, 0x5, 0x84) listen(r6, 0xbabc) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r6, 0x84, 0x1e, &(0x7f0000000040), 0x4) modify_ldt$write(0x1, 0x0, 0x0) modify_ldt$read(0x0, 0xfffffffffffffffd, 0x0) 0s ago: executing program 3 (id=2016): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000480)='blkio.throttle.io_serviced\x00', 0x275a, 0x0) syz_open_dev$sg(&(0x7f00000060c0), 0x0, 0x0) ioctl$VIDIOC_S_HW_FREQ_SEEK(0xffffffffffffffff, 0x40305652, &(0x7f0000000180)={0x10000000, 0x5, 0x6, 0x400, 0xffff7b03, 0x80000000, 0xf2e}) openat$dsp(0xffffffffffffff9c, 0x0, 0x101a02, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000280)=0x5) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x4100, 0x0) shmctl$SHM_UNLOCK(0x0, 0xc) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) r2 = syz_open_dev$sndctrl(&(0x7f0000000000), 0x0, 0x0) ioctl$SNDRV_CTL_IOCTL_ELEM_WRITE(r2, 0x40405514, &(0x7f0000000540)={{0x1, 0x0, 0x0, 0x0, 'syz0\x00'}, 0x0, [0xfffffffffffffe01, 0x7aa, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x4, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x51, 0x0, 0x0, 0x4, 0x3, 0xffffffff, 0x8000000, 0x0, 0xe1a1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffffffffffc, 0x0, 0xfffffffffffffffd, 0x81, 0x0, 0x0, 0x0, 0x0, 0x101, 0x40003, 0x10001, 0x62c0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xb0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffff7ffc, 0x0, 0x0, 0x0, 0x0, 0x20000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x2]}) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000240)=0x100000001, 0x59) connect$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000040), 0x4) sendto$inet6(r1, 0x0, 0x0, 0x8000, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="7000000002060500000000000000000000000000120003006269746d61703a69702c6d6163000000050004000000000009000200f3797a3000000000240007800c0002800800014000008e020c0001800800014000000000080008400000001005000500020000000500010006"], 0x70}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[], 0xb8}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, 0x0, &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$uinput_user_dev(0xffffffffffffffff, &(0x7f0000000400)={'syz0\x00', {0x83, 0x2, 0x6, 0xfffa}, 0x3a, [0x8000, 0xc95a, 0xf, 0x8, 0x80, 0x2, 0x3, 0x7f, 0x20000006, 0x4d, 0x6, 0x5f, 0x9, 0x5, 0xffff2d37, 0xffffff01, 0x6, 0x3, 0x0, 0x5, 0x4, 0x0, 0x7, 0x3c5b, 0x1, 0x24, 0xd, 0x1, 0x0, 0xffffffff, 0xe661, 0x4, 0x7, 0x3, 0x8, 0x4c74, 0x80000000, 0x242, 0x3, 0xe, 0x0, 0x80008071, 0x7, 0x17, 0x1, 0x7, 0x5, 0x3e, 0x7e67, 0x6, 0x6, 0x0, 0x5, 0x4, 0x8, 0x3ff, 0x80, 0x0, 0x5, 0x6, 0x8, 0x4, 0x1, 0x40], [0x10000007, 0x9, 0x8000012f, 0x8004, 0x5, 0xfffffff3, 0x129432e6, 0xc8, 0xf9, 0xe, 0x2bf, 0x6c7, 0x9, 0xfffffffc, 0x3, 0x0, 0x0, 0x5, 0x2f, 0xe, 0x312, 0x78, 0xea4, 0x0, 0x4, 0x7, 0x7fff, 0x6, 0x400, 0x401, 0x6, 0x1, 0xff, 0x5, 0x1000005, 0x5f31, 0xd, 0x4e0, 0x2, 0x4, 0xb, 0x4, 0x9, 0x8, 0x9, 0x6, 0x47, 0x8000, 0x1, 0xfe000000, 0xffff, 0x2, 0x4, 0x9, 0x3, 0x3, 0x9, 0x1, 0x3, 0x3, 0xbc45, 0x48c93690, 0x42, 0x3], [0x7, 0x408, 0x4, 0x5, 0xfffffffe, 0x100, 0x8d2, 0x9, 0x5, 0x7fff, 0x0, 0x5, 0x7, 0x4, 0x5, 0x5, 0x0, 0x1ef, 0x5, 0x8, 0x86, 0x3, 0x303c, 0x3e7, 0xb, 0x5, 0x2, 0x2, 0x3, 0x20000008, 0x4, 0x6d01, 0x6, 0x38, 0x800003, 0x200, 0x80, 0x3, 0x4, 0x2950bfaf, 0xfff, 0xa2, 0x7, 0xa9, 0x5, 0x6, 0xac9, 0xbf, 0x2, 0x3, 0x7ff, 0x12b, 0x4, 0x1, 0xa, 0x0, 0x5, 0x1c, 0x120000, 0x3, 0x2006, 0x880a2ed, 0x4, 0x25], [0x9, 0xbb33, 0x7, 0xb, 0x5, 0x938, 0x6, 0x6, 0x0, 0xb9, 0xce7, 0x1ff, 0x2, 0x57, 0x5, 0x3, 0x1ff, 0x10000, 0x4, 0x7fff, 0xffff, 0xa620, 0x1, 0x5, 0x1, 0x2, 0x14c, 0x60a7, 0x6, 0x16, 0xffffffff, 0x80000000, 0x5, 0x4, 0xc8, 0x1, 0xfffff000, 0x10000, 0x3, 0x7e, 0x100, 0x9602, 0x7, 0xaf, 0x8, 0x6, 0x226, 0x5, 0x5, 0x8, 0x30b1d693, 0xa1f, 0xf40, 0x7, 0x1, 0x6c1b, 0x0, 0x4, 0x5, 0xb1e, 0xd7, 0x200, 0xffff3441, 0xfff]}, 0x45c) openat$audio1(0xffffffffffffff9c, &(0x7f0000000240), 0x400002, 0x0) kernel console output (not intermixed with test programs): 356.603054][ T82] usb 4-1: SerialNumber: syz [ 356.969313][ T5867] usb 3-1: USB disconnect, device number 42 [ 357.249707][ T5864] usbhid 5-1:1.0: can't add hid device: -71 [ 357.271794][ T5864] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 357.277444][ T82] usbhid 4-1:1.0: can't add hid device: -71 [ 357.300357][ T82] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 357.329265][ T82] usb 4-1: USB disconnect, device number 36 [ 357.341992][ T5864] usb 5-1: USB disconnect, device number 44 [ 357.354734][ T9778] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1052'. [ 357.409142][ T9777] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1053'. [ 357.771176][ T30] audit: type=1400 audit(1746178454.702:763): avc: denied { write } for pid=9780 comm="syz.2.1055" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 358.227152][ T30] audit: type=1400 audit(1746178455.162:764): avc: denied { read } for pid=9793 comm="syz.3.1059" name="cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 358.262996][ T30] audit: type=1400 audit(1746178455.162:765): avc: denied { open } for pid=9793 comm="syz.3.1059" path="/dev/cachefiles" dev="devtmpfs" ino=4 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cachefiles_device_t tclass=chr_file permissive=1 [ 358.370552][ T9801] hfsplus: unable to find HFS+ superblock [ 359.001121][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 359.500109][ T30] audit: type=1400 audit(1746178456.342:766): avc: denied { map } for pid=9788 comm="syz.0.1057" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.219710][ T30] audit: type=1400 audit(1746178456.342:767): avc: denied { execute } for pid=9788 comm="syz.0.1057" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.390433][ T30] audit: type=1400 audit(1746178457.192:768): avc: denied { ioctl } for pid=9788 comm="syz.0.1057" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x127f scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 360.443363][ T82] usb 5-1: new high-speed USB device number 45 using dummy_hcd [ 360.640987][ T82] usb 5-1: Using ep0 maxpacket: 32 [ 360.745599][ T82] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 361.645960][ T82] usb 5-1: config 1 interface 0 has no altsetting 0 [ 361.667287][ T82] usb 5-1: language id specifier not provided by device, defaulting to English [ 361.679435][ T82] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 361.706178][ T82] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 361.756950][ T82] usb 5-1: Product: syz [ 361.772148][ T82] usb 5-1: Manufacturer: syz [ 361.786575][ T82] usb 5-1: SerialNumber: syz [ 361.995567][ T5866] usb 1-1: new high-speed USB device number 51 using dummy_hcd [ 362.038224][ T9843] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1071'. [ 362.842914][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 362.900185][ T5866] usb 1-1: Using ep0 maxpacket: 8 [ 362.940506][ T5866] usb 1-1: config 0 has an invalid interface number: 1 but max is 0 [ 362.948803][ T5866] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 362.959413][ T5866] usb 1-1: config 0 has no interface number 0 [ 362.968507][ T5866] usb 1-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 362.984835][ T5866] usb 1-1: config 0 interface 1 has no altsetting 0 [ 362.985296][ T9848] Cannot find set identified by id 0 to match [ 363.024068][ T5866] usb 1-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 363.036733][ T5866] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 363.159483][ T5866] usb 1-1: config 0 descriptor?? [ 363.172307][ T5866] iowarrior 1-1:0.1: no interrupt-in endpoint found [ 364.192441][ T82] usbhid 5-1:1.0: can't add hid device: -71 [ 364.198462][ T82] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 364.215084][ T5899] usb 1-1: USB disconnect, device number 51 [ 364.234844][ T82] usb 5-1: USB disconnect, device number 45 [ 364.536591][ T5864] usb 4-1: new high-speed USB device number 37 using dummy_hcd [ 364.550179][ T5866] usb 3-1: new full-speed USB device number 43 using dummy_hcd [ 364.790612][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 364.812239][ T5866] usb 3-1: New USB device found, idVendor=17e9, idProduct=8b4e, bcdDevice=9c.08 [ 364.813466][ T5864] usb 4-1: Using ep0 maxpacket: 16 [ 364.822678][ T5866] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 364.832708][ T5864] usb 4-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 364.854897][ T5864] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 364.865019][ T5864] usb 4-1: Product: syz [ 364.865681][ T5866] usb 3-1: config 0 descriptor?? [ 364.869175][ T5864] usb 4-1: Manufacturer: syz [ 364.869190][ T5864] usb 4-1: SerialNumber: syz [ 364.872053][ T5864] r8152-cfgselector 4-1: Unknown version 0x0000 [ 364.894451][ T5864] r8152-cfgselector 4-1: config 0 descriptor?? [ 365.276411][ T5864] r8152-cfgselector 4-1: Unknown version 0x0000 [ 365.346164][ T5864] r8152-cfgselector 4-1: bad CDC descriptors [ 365.367331][ T5864] r8152-cfgselector 4-1: USB disconnect, device number 37 [ 365.429189][ T5866] [drm] vendor descriptor length:e0 data:00 00 00 00 00 00 00 00 00 00 00 [ 365.438445][ T5866] [drm:udl_init] *ERROR* Unrecognized vendor firmware descriptor [ 365.478711][ T5866] [drm] Initialized udl 0.0.1 for 3-1:0.0 on minor 2 [ 365.507236][ T5866] [drm] Initialized udl on minor 2 [ 365.707666][ T5866] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 365.957697][ T5866] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 365.975872][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 366.091978][ T5866] usb 3-1: USB disconnect, device number 43 [ 366.105831][ T24] udl 3-1:0.0: [drm] *ERROR* Read EDID byte 0 failed err ffffffb9 [ 366.506766][ T24] udl 3-1:0.0: [drm] Cannot find any crtc or sizes [ 366.562810][ T82] usb 1-1: new high-speed USB device number 52 using dummy_hcd [ 366.800231][ T82] usb 1-1: Using ep0 maxpacket: 16 [ 367.013234][ T9894] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=16 sclass=netlink_tcpdiag_socket pid=9894 comm=syz.3.1087 [ 367.301992][ T30] audit: type=1400 audit(1746178463.882:769): avc: denied { setopt } for pid=9893 comm="syz.3.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 367.333956][ T30] audit: type=1400 audit(1746178463.882:770): avc: denied { ioctl } for pid=9893 comm="syz.3.1087" path="socket:[23464]" dev="sockfs" ino=23464 ioctlcmd=0x943c scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 367.460184][ T24] usb 2-1: new high-speed USB device number 55 using dummy_hcd [ 367.467842][ T5866] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 367.490877][ T30] audit: type=1400 audit(1746178464.262:771): avc: denied { read } for pid=9893 comm="syz.3.1087" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_tcpdiag_socket permissive=1 [ 367.596753][ T9907] FAULT_INJECTION: forcing a failure. [ 367.596753][ T9907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 367.619905][ T9907] CPU: 1 UID: 0 PID: 9907 Comm: syz.4.1090 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 367.619931][ T9907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 367.619941][ T9907] Call Trace: [ 367.619947][ T9907] [ 367.619954][ T9907] dump_stack_lvl+0x16c/0x1f0 [ 367.619983][ T9907] should_fail_ex+0x512/0x640 [ 367.620008][ T9907] _copy_from_user+0x2e/0xd0 [ 367.620030][ T9907] core_sys_select+0x35a/0xbe0 [ 367.620059][ T9907] ? __pfx_core_sys_select+0x10/0x10 [ 367.620107][ T9907] ? set_user_sigmask+0x21b/0x2b0 [ 367.620126][ T9907] ? __pfx_set_user_sigmask+0x10/0x10 [ 367.620148][ T9907] do_pselect.constprop.0+0x19f/0x1e0 [ 367.620174][ T9907] ? __pfx_do_pselect.constprop.0+0x10/0x10 [ 367.620208][ T9907] __x64_sys_pselect6+0x182/0x240 [ 367.620233][ T9907] ? __pfx___x64_sys_pselect6+0x10/0x10 [ 367.620255][ T9907] ? rcu_is_watching+0x12/0xc0 [ 367.620280][ T9907] do_syscall_64+0xcd/0x260 [ 367.620303][ T9907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 367.620319][ T9907] RIP: 0033:0x7f412f18e969 [ 367.620333][ T9907] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 367.620365][ T9907] RSP: 002b:00007f412ffba038 EFLAGS: 00000246 ORIG_RAX: 000000000000010e [ 367.620381][ T9907] RAX: ffffffffffffffda RBX: 00007f412f3b6080 RCX: 00007f412f18e969 [ 367.620390][ T9907] RDX: 0000000000000000 RSI: 00002000000001c0 RDI: 0000000000000040 [ 367.620398][ T9907] RBP: 00007f412ffba090 R08: 0000000000000000 R09: 0000000000000000 [ 367.620407][ T9907] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000001 [ 367.620417][ T9907] R13: 0000000000000000 R14: 00007f412f3b6080 R15: 00007ffd38d5f628 [ 367.620439][ T9907] [ 367.859187][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 367.866547][ T5866] usb 4-1: New USB device found, idVendor=0cf3, idProduct=9375, bcdDevice=1a.9e [ 367.875688][ T5866] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 367.884827][ T24] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 367.897802][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 367.904602][ T82] usb 1-1: unable to get BOS descriptor or descriptor too short [ 367.913193][ T24] usb 2-1: language id specifier not provided by device, defaulting to English [ 367.923671][ T82] usb 1-1: unable to read config index 0 descriptor/start: -71 [ 367.931299][ T82] usb 1-1: can't read configurations, error -71 [ 367.939556][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 367.949640][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 367.958281][ T24] usb 2-1: Product: syz [ 367.962582][ T24] usb 2-1: Manufacturer: syz [ 367.967174][ T24] usb 2-1: SerialNumber: syz [ 367.975997][ T5866] usb 4-1: config 0 descriptor?? [ 368.030749][ T80] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 368.402055][ T5866] ath6kl: Unsupported hardware version: 0x0 [ 368.418248][ T5866] ath6kl: Failed to init ath6kl core: -22 [ 368.449474][ T5866] ath6kl_usb 4-1:0.0: probe with driver ath6kl_usb failed with error -22 [ 368.685273][ T5866] usb 4-1: USB disconnect, device number 38 [ 369.010160][ T82] usb 1-1: new high-speed USB device number 53 using dummy_hcd [ 369.210175][ T82] usb 1-1: config 0 has an invalid interface number: 58 but max is 0 [ 369.252723][ T82] usb 1-1: config 0 has no interface number 0 [ 369.333846][ T82] usb 1-1: New USB device found, idVendor=085a, idProduct=0008, bcdDevice=7f.81 [ 369.370211][ T82] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 369.378327][ T82] usb 1-1: Product: syz [ 369.387650][ T82] usb 1-1: Manufacturer: syz [ 369.396008][ T82] usb 1-1: SerialNumber: syz [ 369.437642][ T82] usb 1-1: config 0 descriptor?? [ 370.022345][ T9917] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 370.040800][ T9917] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 370.046803][ T24] usbhid 2-1:1.0: can't add hid device: -71 [ 370.082304][ T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 370.115382][ T24] usb 2-1: USB disconnect, device number 55 [ 370.135265][ T82] kaweth 1-1:0.58: Firmware present in device. [ 370.149761][ T82] kaweth 1-1:0.58: Error reading configuration (-71), no net device created [ 370.165939][ T82] kaweth 1-1:0.58: probe with driver kaweth failed with error -5 [ 370.313473][ T82] usb 1-1: USB disconnect, device number 53 [ 370.511399][ T4257] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 371.096914][ T9932] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1098'. [ 371.203683][ T9932] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=9932 comm=syz.1.1098 [ 371.242889][ T9932] Invalid ELF header len 8 [ 371.247580][ T30] audit: type=1400 audit(1746178468.182:772): avc: denied { module_load } for pid=9931 comm="syz.1.1098" path="/221/bus" dev="tmpfs" ino=1187 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 371.441531][ T82] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 371.464863][ T30] audit: type=1400 audit(1746178468.342:773): avc: denied { map } for pid=9949 comm="syz.0.1105" path="socket:[25674]" dev="sockfs" ino=25674 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tcp_socket permissive=1 [ 371.617164][ T82] usb 4-1: Using ep0 maxpacket: 8 [ 371.729800][ T82] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 371.735299][ T5864] usb 3-1: new high-speed USB device number 44 using dummy_hcd [ 371.756374][ T9959] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1107'. [ 371.769729][ T82] usb 4-1: config 0 has no interface number 0 [ 371.789258][ T82] usb 4-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 371.927711][ T82] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 371.961422][ T5864] usb 3-1: Using ep0 maxpacket: 8 [ 372.118158][ T82] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.195974][ T5864] usb 3-1: config 0 has an invalid interface number: 1 but max is 0 [ 372.211507][ T82] usb 4-1: config 0 descriptor?? [ 372.228544][ T5864] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 372.238893][ T5864] usb 3-1: config 0 has no interface number 0 [ 372.248892][ T5864] usb 3-1: config 0 interface 1 altsetting 130 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 372.264315][ T82] iowarrior 4-1:0.1: no interrupt-in endpoint found [ 372.353252][ T5864] usb 3-1: config 0 interface 1 has no altsetting 0 [ 372.360001][ T5864] usb 3-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 372.375426][ T5864] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 372.393275][ T5864] usb 3-1: config 0 descriptor?? [ 372.408428][ T5864] iowarrior 3-1:0.1: no interrupt-in endpoint found [ 372.827822][ T5864] usb 3-1: USB disconnect, device number 44 [ 372.842538][ T5901] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 372.859447][ T82] usb 4-1: USB disconnect, device number 39 [ 372.883869][ T9970] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1110'. [ 373.010154][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 373.071615][ T5901] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 373.231642][ T5901] usb 5-1: config 1 interface 0 has no altsetting 0 [ 373.254040][ T5901] usb 5-1: language id specifier not provided by device, defaulting to English [ 373.275142][ T5901] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 373.297271][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 373.308796][ T5901] usb 5-1: Product: syz [ 373.313388][ T5901] usb 5-1: Manufacturer: syz [ 373.318048][ T5901] usb 5-1: SerialNumber: syz [ 373.761864][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 373.777613][ T82] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 374.303549][ T9987] FAULT_INJECTION: forcing a failure. [ 374.303549][ T9987] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 374.316683][ T9987] CPU: 1 UID: 0 PID: 9987 Comm: syz.3.1114 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 374.316705][ T9987] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 374.316715][ T9987] Call Trace: [ 374.316721][ T9987] [ 374.316727][ T9987] dump_stack_lvl+0x16c/0x1f0 [ 374.316752][ T9987] should_fail_ex+0x512/0x640 [ 374.316777][ T9987] _copy_from_user+0x2e/0xd0 [ 374.316799][ T9987] copy_msghdr_from_user+0x98/0x160 [ 374.316817][ T9987] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 374.316836][ T9987] ? kfree+0x252/0x4d0 [ 374.316857][ T9987] ? __lock_acquire+0x5ca/0x1ba0 [ 374.316886][ T9987] ___sys_recvmsg+0xdb/0x1a0 [ 374.316902][ T9987] ? __pfx____sys_recvmsg+0x10/0x10 [ 374.316917][ T9987] ? rcu_is_watching+0x12/0xc0 [ 374.316947][ T9987] ? __pfx___might_resched+0x10/0x10 [ 374.316974][ T9987] do_recvmmsg+0x2fe/0x740 [ 374.316993][ T9987] ? __pfx_do_recvmmsg+0x10/0x10 [ 374.317012][ T9987] ? __pfx___schedule+0x10/0x10 [ 374.317041][ T9987] ? rcu_is_watching+0x12/0xc0 [ 374.317062][ T9987] __x64_sys_recvmmsg+0x22a/0x280 [ 374.317080][ T9987] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 374.317098][ T9987] ? trace_irq_enable.constprop.0+0x2f/0x120 [ 374.317120][ T9987] do_syscall_64+0xcd/0x260 [ 374.317142][ T9987] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 374.317159][ T9987] RIP: 0033:0x7f6990b8e969 [ 374.317172][ T9987] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 374.317188][ T9987] RSP: 002b:00007f699198f038 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 374.317204][ T9987] RAX: ffffffffffffffda RBX: 00007f6990db6160 RCX: 00007f6990b8e969 [ 374.317214][ T9987] RDX: 000000000000005b RSI: 00002000000021c0 RDI: 0000000000000005 [ 374.317224][ T9987] RBP: 00007f699198f090 R08: 0000000000000000 R09: 0000000000000000 [ 374.317234][ T9987] R10: 0000000000000040 R11: 0000000000000246 R12: 0000000000000001 [ 374.317243][ T9987] R13: 0000000000000000 R14: 00007f6990db6160 R15: 00007ffca4b3de68 [ 374.317265][ T9987] [ 374.824680][ T82] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 374.843910][ T82] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 374.867463][ T9990] input: syz1 as /devices/virtual/input/input30 [ 374.910998][ T82] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 374.933647][ T82] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 374.962857][ T82] usb 2-1: Product: syz [ 374.967172][ T82] usb 2-1: Manufacturer: syz [ 374.972155][ T82] usb 2-1: SerialNumber: syz [ 374.982845][ T9977] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 375.084987][ T9997] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1120'. [ 375.132385][ T5864] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 375.550341][ T5899] usb 1-1: new full-speed USB device number 54 using dummy_hcd [ 375.579399][ T82] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 56 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 375.602720][ T5901] usbhid 5-1:1.0: can't add hid device: -71 [ 375.628865][ T5901] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 375.737112][ T5864] usb 4-1: device descriptor read/64, error -71 [ 375.749616][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.775075][ T5901] usb 5-1: USB disconnect, device number 46 [ 376.623624][ T5899] usb 1-1: unable to get BOS descriptor or descriptor too short [ 376.638866][ T5899] usb 1-1: not running at top speed; connect to a high speed hub [ 376.650994][ T5899] usb 1-1: config 1 interface 0 altsetting 6 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 376.698215][ C1] usblp0: nonzero write bulk status received: -71 [ 376.698326][ T5899] usb 1-1: config 1 interface 0 has no altsetting 0 [ 376.722540][ T24] usb 2-1: USB disconnect, device number 56 [ 376.724890][ T5899] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 376.741043][ T5864] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 376.755911][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 376.758396][ T24] usblp0: removed [ 376.766055][ T5899] usb 1-1: Product: syz [ 376.778265][ T5899] usb 1-1: Manufacturer: syz [ 376.783092][ T5899] usb 1-1: SerialNumber: syz [ 376.790814][ T9995] raw-gadget.3 gadget.0: fail, usb_ep_enable returned -22 [ 376.880215][ T5864] usb 4-1: device descriptor read/64, error -71 [ 376.990553][ T5864] usb usb4-port1: attempt power cycle [ 377.003994][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1119'. [ 377.012945][ T5901] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 377.022623][ T9995] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1119'. [ 377.047873][ T5899] usb 1-1: USB disconnect, device number 54 [ 377.181694][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 377.192552][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0x94, changing to 0x84 [ 377.204085][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has an invalid bInterval 0, changing to 10 [ 377.216007][ T5901] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x84 has invalid wMaxPacketSize 0 [ 377.227029][ T5901] usb 5-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 377.244599][ T5901] usb 5-1: New USB device found, idVendor=084e, idProduct=1001, bcdDevice=ed.ae [ 377.253822][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 377.261902][ T5901] usb 5-1: Product: syz [ 377.267168][ T5901] usb 5-1: Manufacturer: syz [ 377.272447][ T5901] usb 5-1: SerialNumber: syz [ 377.279763][ T5901] usb 5-1: config 0 descriptor?? [ 377.292526][ T5901] input: KB Gear Tablet as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input31 [ 377.330153][ T5864] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 377.350549][ T5864] usb 4-1: device descriptor read/8, error -71 [ 377.580115][ T24] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 377.610193][ T5864] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 377.728271][T10021] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1126'. [ 377.747300][ T24] usb 2-1: Using ep0 maxpacket: 16 [ 378.193131][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.562045][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.570350][ T5864] usb 4-1: device descriptor read/8, error -71 [ 378.580988][ T24] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 378.591276][ T24] usb 2-1: config 0 has no interface number 0 [ 378.622734][ T24] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 378.646592][ T24] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 378.665294][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 378.679074][ T24] usb 2-1: Product: syz [ 378.685680][ T24] usb 2-1: Manufacturer: syz [ 378.690282][ T5864] usb usb4-port1: unable to enumerate USB device [ 378.708099][ T24] usb 2-1: SerialNumber: syz [ 378.719787][ T24] usb 2-1: config 0 descriptor?? [ 378.772822][ T24] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 378.898107][ T30] audit: type=1400 audit(1746178475.832:774): avc: denied { create } for pid=10036 comm="syz.3.1132" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 379.518093][T10042] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 379.530674][T10042] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 379.618373][ T5899] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 379.666517][ T5864] usb 5-1: USB disconnect, device number 47 [ 379.770407][ T30] audit: type=1400 audit(1746178476.702:775): avc: denied { mount } for pid=10039 comm="syz.3.1133" name="/" dev="autofs" ino=25989 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 379.800465][ T24] usb 3-1: new high-speed USB device number 45 using dummy_hcd [ 379.868947][ T30] audit: type=1400 audit(1746178476.702:776): avc: denied { bind } for pid=10039 comm="syz.3.1133" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 379.901588][ T80] usb 2-1: Failed to submit usb control message: -110 [ 379.976766][ T80] usb 2-1: unable to send the bmi data to the device: -110 [ 380.024561][ T80] usb 2-1: unable to get target info from device [ 380.030987][ T80] usb 2-1: could not get target info (-110) [ 380.036905][ T80] usb 2-1: could not probe fw (-110) [ 380.042245][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 380.044230][ T24] usb 3-1: Using ep0 maxpacket: 32 [ 380.051876][ T5899] usb 1-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 380.071644][ T24] usb 3-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 380.085030][ T24] usb 3-1: config 1 interface 0 has no altsetting 0 [ 380.100826][ T24] usb 3-1: language id specifier not provided by device, defaulting to English [ 380.123943][ T80] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.139194][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.147434][ T30] audit: type=1400 audit(1746178477.082:777): avc: denied { unmount } for pid=5814 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:autofs_t tclass=filesystem permissive=1 [ 380.167506][ T5899] usb 1-1: Product: syz [ 380.169331][ T24] usb 3-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 380.180066][ T5899] usb 1-1: Manufacturer: syz [ 380.185372][ T5899] usb 1-1: SerialNumber: syz [ 380.205685][ T5899] r8152-cfgselector 1-1: Unknown version 0x0000 [ 380.217860][ T5899] r8152-cfgselector 1-1: config 0 descriptor?? [ 380.223439][ T24] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 380.239194][ T24] usb 3-1: Product: syz [ 380.245279][ T24] usb 3-1: Manufacturer: syz [ 380.249924][ T24] usb 3-1: SerialNumber: syz [ 380.595365][ T5866] usb 2-1: USB disconnect, device number 57 [ 380.840361][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 380.875209][ T5899] r8152-cfgselector 1-1: USB disconnect, device number 55 [ 381.300580][ T5864] usb 5-1: new high-speed USB device number 48 using dummy_hcd [ 381.520370][ T5864] usb 5-1: Using ep0 maxpacket: 8 [ 381.591626][ T5864] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 381.678791][ T5864] usb 5-1: config 0 has no interface number 0 [ 381.695855][ T5864] usb 5-1: config 0 interface 1 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 381.731569][ T5864] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 381.755371][ T5864] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 381.784952][ T5864] usb 5-1: config 0 descriptor?? [ 381.802806][ T5864] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 381.939567][ T24] usbhid 3-1:1.0: can't add hid device: -71 [ 381.949082][ T24] usbhid 3-1:1.0: probe with driver usbhid failed with error -71 [ 381.990411][ T24] usb 3-1: USB disconnect, device number 45 [ 382.011894][ T5864] usb 5-1: USB disconnect, device number 48 [ 382.040551][ T952] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 382.066590][T10072] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1141'. [ 382.103004][T10072] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 382.111649][T10074] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1143'. [ 382.374855][ T952] usb 1-1: Using ep0 maxpacket: 16 [ 382.446946][ T952] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 382.455528][ T952] usb 1-1: config 0 has no interface number 0 [ 382.469748][ T952] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 382.487422][ T952] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 382.509433][ T952] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 382.527023][ T952] usb 1-1: Product: syz [ 382.541914][ T952] usb 1-1: Manufacturer: syz [ 382.552078][ T952] usb 1-1: SerialNumber: syz [ 382.556857][T10078] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1144'. [ 382.576723][ T952] usb 1-1: config 0 descriptor?? [ 383.572276][ T952] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 383.594985][T10067] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 383.661018][T10067] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 383.713845][ T30] audit: type=1400 audit(1746178480.652:778): avc: denied { wake_alarm } for pid=10087 comm="syz.4.1146" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 383.762667][ T9444] usb 1-1: Failed to submit usb control message: -71 [ 383.781881][ T9444] usb 1-1: unable to send the bmi data to the device: -71 [ 383.789027][ T9444] usb 1-1: unable to get target info from device [ 383.799399][ T5899] usb 1-1: USB disconnect, device number 56 [ 383.828890][ T9444] usb 1-1: could not get target info (-71) [ 383.842468][ T30] audit: type=1326 audit(1746178480.652:779): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10087 comm="syz.4.1146" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f412f18e969 code=0x0 [ 383.844706][ T9444] usb 1-1: could not probe fw (-71) [ 384.939056][T10114] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1155'. [ 385.362902][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 385.610251][ T7673] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 385.770488][ T7673] usb 2-1: Using ep0 maxpacket: 32 [ 385.903858][ T7673] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 385.940182][ T7673] usb 2-1: config 1 interface 0 has no altsetting 0 [ 386.430218][ T7673] usb 2-1: language id specifier not provided by device, defaulting to English [ 386.510854][ T67] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 386.551749][ T7673] usb 2-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 386.595819][ T7673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 386.665257][ T7673] usb 2-1: Product: syz [ 386.703297][ T7673] usb 2-1: Manufacturer: syz [ 386.741628][ T7673] usb 2-1: SerialNumber: syz [ 386.755130][T10131] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1158'. [ 386.850860][ T24] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 387.038590][T10134] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1159'. [ 387.181907][ T24] usb 5-1: Using ep0 maxpacket: 8 [ 388.040614][ T24] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 388.143095][ T24] usb 5-1: config 0 has no interface number 0 [ 388.180385][ T24] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x5 has an invalid bInterval 0, changing to 7 [ 388.474520][ T7673] usbhid 2-1:1.0: can't add hid device: -71 [ 388.513215][ T7673] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 388.536470][T10137] input: syz1 as /devices/virtual/input/input32 [ 388.543881][ T24] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 388.551792][T10140] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1161'. [ 388.566277][ T7673] usb 2-1: USB disconnect, device number 58 [ 388.584987][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 388.597702][ T24] usb 5-1: config 0 descriptor?? [ 388.602291][ T24] iowarrior 5-1:0.1: no interrupt-in endpoint found [ 388.890363][ T952] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 389.885460][ T5864] usb 5-1: USB disconnect, device number 49 [ 390.030314][ T952] usb 4-1: device descriptor read/64, error -71 [ 390.650167][ T952] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 390.798211][T10169] FAULT_INJECTION: forcing a failure. [ 390.798211][T10169] name failslab, interval 1, probability 0, space 0, times 0 [ 390.811327][T10169] CPU: 0 UID: 0 PID: 10169 Comm: syz.4.1169 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 390.811350][T10169] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 390.811359][T10169] Call Trace: [ 390.811365][T10169] [ 390.811371][T10169] dump_stack_lvl+0x16c/0x1f0 [ 390.811396][T10169] should_fail_ex+0x512/0x640 [ 390.811416][T10169] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 390.811442][T10169] should_failslab+0xc2/0x120 [ 390.811459][T10169] __kmalloc_cache_noprof+0x6a/0x3e0 [ 390.811482][T10169] ? btrfs_scan_one_device+0x21a/0xb40 [ 390.811501][T10169] ? kasan_save_track+0x14/0x30 [ 390.811527][T10169] btrfs_scan_one_device+0x21a/0xb40 [ 390.811550][T10169] ? __pfx_btrfs_scan_one_device+0x10/0x10 [ 390.811581][T10169] btrfs_get_tree+0x3e8/0x1b70 [ 390.811612][T10169] ? __pfx_btrfs_get_tree+0x10/0x10 [ 390.811637][T10169] ? vfs_dup_fs_context+0x427/0x5b0 [ 390.811656][T10169] ? __pfx_selinux_fs_context_dup+0x10/0x10 [ 390.811680][T10169] vfs_get_tree+0x8b/0x340 [ 390.811700][T10169] fc_mount+0x16/0xc0 [ 390.811720][T10169] btrfs_get_tree+0xa37/0x1b70 [ 390.811744][T10169] ? __pfx_btrfs_get_tree+0x10/0x10 [ 390.811768][T10169] ? cap_capable+0xb3/0x250 [ 390.811788][T10169] ? bpf_lsm_capable+0x9/0x10 [ 390.811801][T10169] ? security_capable+0x7e/0x260 [ 390.811821][T10169] vfs_get_tree+0x8b/0x340 [ 390.811841][T10169] vfs_cmd_create+0xd7/0x2a0 [ 390.811861][T10169] __do_sys_fsconfig+0x7b8/0xbe0 [ 390.811882][T10169] ? __pfx___do_sys_fsconfig+0x10/0x10 [ 390.811900][T10169] ? xfd_validate_state+0x5d/0x180 [ 390.811919][T10169] ? rcu_is_watching+0x12/0xc0 [ 390.811946][T10169] do_syscall_64+0xcd/0x260 [ 390.811968][T10169] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 390.811986][T10169] RIP: 0033:0x7f412f18e969 [ 390.811999][T10169] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 390.812014][T10169] RSP: 002b:00007f412ff99038 EFLAGS: 00000246 ORIG_RAX: 00000000000001af [ 390.812030][T10169] RAX: ffffffffffffffda RBX: 00007f412f3b6160 RCX: 00007f412f18e969 [ 390.812040][T10169] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 0000000000000008 [ 390.812049][T10169] RBP: 00007f412ff99090 R08: 0000000000000000 R09: 0000000000000000 [ 390.812058][T10169] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 390.812067][T10169] R13: 0000000000000000 R14: 00007f412f3b6160 R15: 00007ffd38d5f628 [ 390.812091][T10169] [ 391.117884][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 391.170153][ T952] usb 4-1: device descriptor read/64, error -71 [ 391.280349][ T952] usb usb4-port1: attempt power cycle [ 392.030428][ T24] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 392.057378][ T30] audit: type=1400 audit(1746178488.992:780): avc: denied { create } for pid=10179 comm="syz.3.1173" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=dccp_socket permissive=1 [ 392.203747][ T24] usb 2-1: Using ep0 maxpacket: 32 [ 392.216544][ T24] usb 2-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 392.250077][ T24] usb 2-1: config 1 interface 0 has no altsetting 0 [ 392.260728][ T24] usb 2-1: language id specifier not provided by device, defaulting to English [ 392.274689][ T1151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 392.290109][ T24] usb 2-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 392.299546][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 392.319073][ T24] usb 2-1: Product: syz [ 392.325805][T10191] SELinux: unrecognized netlink message: protocol=4 nlmsg_type=788 sclass=netlink_tcpdiag_socket pid=10191 comm=syz.4.1176 [ 392.328412][ T24] usb 2-1: Manufacturer: syz [ 392.343444][ T82] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 392.381419][ T24] usb 2-1: SerialNumber: syz [ 392.520130][ T82] usb 1-1: Using ep0 maxpacket: 16 [ 392.527179][ T82] usb 1-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 0 [ 392.560184][ T82] usb 1-1: New USB device found, idVendor=05ac, idProduct=0244, bcdDevice= 0.00 [ 392.569361][ T82] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 392.586023][ T82] usb 1-1: config 0 descriptor?? [ 392.612977][ T82] input: bcm5974 as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input33 [ 392.706290][T10204] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1182'. [ 393.179114][ T5170] bcm5974 1-1:0.0: could not read from device [ 393.218545][ T82] bcm5974 1-1:0.0: could not read from device [ 393.258438][ T5170] bcm5974 1-1:0.0: could not read from device [ 393.303971][ T82] input: failed to attach handler mousedev to device input33, error: -5 [ 393.333186][ T5170] bcm5974 1-1:0.0: could not read from device [ 393.346699][T10211] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1184'. [ 393.351320][ T82] usb 1-1: USB disconnect, device number 57 [ 394.361404][ T24] usbhid 2-1:1.0: can't add hid device: -71 [ 394.368413][ T24] usbhid 2-1:1.0: probe with driver usbhid failed with error -71 [ 394.410444][ T24] usb 2-1: USB disconnect, device number 59 [ 394.570519][T10203] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 394.862286][ T30] audit: type=1400 audit(1746178491.742:781): avc: denied { rename } for pid=10228 comm="syz.1.1191" name="#6" dev="tmpfs" ino=1263 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=chr_file permissive=1 [ 394.980370][ T952] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 395.130382][ T952] usb 3-1: device descriptor read/64, error -71 [ 395.410407][ T952] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 395.663968][ T952] usb 3-1: device descriptor read/64, error -71 [ 396.490129][ T30] audit: type=1400 audit(1746178493.382:782): avc: denied { create } for pid=10238 comm="syz.4.1193" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=caif_socket permissive=1 [ 396.535859][ T952] usb usb3-port1: attempt power cycle [ 396.581553][ T30] audit: type=1400 audit(1746178493.392:783): avc: denied { write } for pid=10238 comm="syz.4.1193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 396.646620][ T30] audit: type=1400 audit(1746178493.392:784): avc: denied { read } for pid=10238 comm="syz.4.1193" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 396.734745][ T30] audit: type=1400 audit(1746178493.672:785): avc: denied { mount } for pid=10247 comm="syz.1.1194" name="/" dev="sysfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:sysfs_t tclass=filesystem permissive=1 [ 396.760776][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 396.851063][T10250] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1195'. [ 396.882925][ T952] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 397.159664][ T952] usb 3-1: device descriptor read/8, error -71 [ 397.220074][T10255] nftables ruleset with unbound chain [ 397.817353][ T952] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 398.020058][ T30] audit: type=1326 audit(1746178494.952:786): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10230 comm="syz.2.1192" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fe6f078e969 code=0x7fc00000 [ 398.051390][ T80] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 398.073451][ T952] usb 3-1: device descriptor read/8, error -71 [ 398.188773][ T952] usb usb3-port1: unable to enumerate USB device [ 398.291353][ T5901] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 398.426077][ T30] audit: type=1400 audit(1746178495.362:787): avc: denied { mount } for pid=10267 comm="syz.3.1200" name="/" dev="devpts" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:devpts_t tclass=filesystem permissive=1 [ 398.467985][ T30] audit: type=1400 audit(1746178495.362:788): avc: denied { read } for pid=10267 comm="syz.3.1200" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 398.597382][ T5901] usb 5-1: Using ep0 maxpacket: 32 [ 398.860716][ T5901] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 398.912051][ T5901] usb 5-1: config 1 interface 0 has no altsetting 0 [ 398.939664][T10286] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1205'. [ 398.945723][T10279] lo speed is unknown, defaulting to 1000 [ 398.966062][T10279] lo speed is unknown, defaulting to 1000 [ 398.969507][ T5901] usb 5-1: language id specifier not provided by device, defaulting to English [ 398.991756][ T5901] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 399.310748][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 399.340168][ T5901] usb 5-1: Product: syz [ 399.355201][ T5901] usb 5-1: Manufacturer: syz [ 399.381465][ T5901] usb 5-1: SerialNumber: syz [ 399.452010][T10283] loop6: detected capacity change from 0 to 63 [ 399.640846][T10294] lo speed is unknown, defaulting to 1000 [ 399.648165][T10294] lo speed is unknown, defaulting to 1000 [ 399.730121][ T30] audit: type=1400 audit(1746178496.652:789): avc: denied { getopt } for pid=10273 comm="syz.2.1202" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 399.731147][T10296] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1208'. [ 399.985364][ T30] audit: type=1400 audit(1746178496.662:790): avc: denied { accept } for pid=10273 comm="syz.2.1202" lport=58287 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=udp_socket permissive=1 [ 400.366039][T10302] SET target dimension over the limit! [ 400.734176][ T5901] usbhid 5-1:1.0: can't add hid device: -71 [ 400.818708][ T5901] usbhid 5-1:1.0: probe with driver usbhid failed with error -71 [ 401.045845][ T5901] usb 5-1: USB disconnect, device number 50 [ 401.787216][T10321] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1215'. [ 401.871315][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 401.876906][ T30] audit: type=1400 audit(1746178498.802:791): avc: denied { map } for pid=10312 comm="syz.4.1215" path="socket:[26814]" dev="sockfs" ino=26814 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 402.110721][T10328] FAULT_INJECTION: forcing a failure. [ 402.110721][T10328] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 402.142970][T10328] CPU: 0 UID: 0 PID: 10328 Comm: syz.3.1221 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 402.142996][T10328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 402.143006][T10328] Call Trace: [ 402.143012][T10328] [ 402.143019][T10328] dump_stack_lvl+0x16c/0x1f0 [ 402.143046][T10328] should_fail_ex+0x512/0x640 [ 402.143071][T10328] _copy_from_user+0x2e/0xd0 [ 402.143095][T10328] move_addr_to_kernel+0x65/0x170 [ 402.143118][T10328] __copy_msghdr+0x386/0x470 [ 402.143134][T10328] copy_msghdr_from_user+0xc1/0x160 [ 402.143149][T10328] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 402.143169][T10328] ? __pfx__kstrtoull+0x10/0x10 [ 402.143190][T10328] ___sys_sendmsg+0xfe/0x1d0 [ 402.143205][T10328] ? __pfx____sys_sendmsg+0x10/0x10 [ 402.143232][T10328] ? find_held_lock+0x2b/0x80 [ 402.143268][T10328] __sys_sendmmsg+0x200/0x420 [ 402.143286][T10328] ? __pfx___sys_sendmmsg+0x10/0x10 [ 402.143315][T10328] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 402.143347][T10328] ? fput+0x70/0xf0 [ 402.143364][T10328] ? ksys_write+0x1b9/0x240 [ 402.143386][T10328] ? __pfx_ksys_write+0x10/0x10 [ 402.143407][T10328] ? rcu_is_watching+0x12/0xc0 [ 402.143430][T10328] __x64_sys_sendmmsg+0x9c/0x100 [ 402.143446][T10328] ? lockdep_hardirqs_on+0x7c/0x110 [ 402.143464][T10328] do_syscall_64+0xcd/0x260 [ 402.143486][T10328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 402.143503][T10328] RIP: 0033:0x7f6990b8e969 [ 402.143516][T10328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 402.143531][T10328] RSP: 002b:00007f69919d1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 402.143547][T10328] RAX: ffffffffffffffda RBX: 00007f6990db5fa0 RCX: 00007f6990b8e969 [ 402.143558][T10328] RDX: 0000000000068000 RSI: 0000200000000f40 RDI: 0000000000000003 [ 402.143567][T10328] RBP: 00007f69919d1090 R08: 0000000000000000 R09: 0000000000000000 [ 402.143576][T10328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 402.143585][T10328] R13: 0000000000000000 R14: 00007f6990db5fa0 R15: 00007ffca4b3de68 [ 402.143607][T10328] [ 402.367183][ T30] audit: type=1400 audit(1746178499.302:792): avc: denied { append } for pid=10327 comm="syz.4.1220" name="fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 402.390896][ T30] audit: type=1400 audit(1746178499.302:793): avc: denied { map } for pid=10327 comm="syz.4.1220" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 402.460233][ T30] audit: type=1400 audit(1746178499.302:794): avc: denied { write execute } for pid=10327 comm="syz.4.1220" path="/dev/fb0" dev="devtmpfs" ino=629 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:framebuf_device_t tclass=chr_file permissive=1 [ 402.582766][T10307] trusted_key: encrypted_key: insufficient parameters specified [ 402.591802][ T30] audit: type=1400 audit(1746178499.302:795): avc: denied { read } for pid=10327 comm="syz.4.1220" path="socket:[27764]" dev="sockfs" ino=27764 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=kcm_socket permissive=1 [ 402.950236][ T952] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 403.120166][ T952] usb 4-1: Using ep0 maxpacket: 16 [ 403.127726][ T952] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 403.136774][ T952] usb 4-1: config 0 has no interface number 0 [ 403.144672][ T952] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 403.171566][ T952] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 403.190068][ T952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 403.198168][ T952] usb 4-1: Product: syz [ 403.203165][ T952] usb 4-1: Manufacturer: syz [ 403.332341][ T952] usb 4-1: SerialNumber: syz [ 403.861862][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 403.884902][ T952] usb 4-1: config 0 descriptor?? [ 403.924152][ T952] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 404.157219][T10341] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 404.272399][T10364] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 404.430659][T10364] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 405.003416][ T9444] usb 4-1: Failed to submit usb control message: -110 [ 405.020569][ T9444] usb 4-1: unable to send the bmi data to the device: -110 [ 405.027798][ T9444] usb 4-1: unable to get target info from device [ 405.038935][ T9444] usb 4-1: could not get target info (-110) [ 405.044905][ T9444] usb 4-1: could not probe fw (-110) [ 405.193552][T10370] fuse: Unknown parameter 'fd0x0000000000000003' [ 405.230183][ C0] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 405.246744][ T7673] usb 4-1: USB disconnect, device number 47 [ 406.153021][ T7673] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 406.318218][ T7673] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 406.329312][ T7673] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 406.360822][ T7673] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 406.370771][ T7673] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 406.378769][ T7673] usb 2-1: Product: syz [ 406.394296][ T7673] usb 2-1: Manufacturer: syz [ 406.399547][ T7673] usb 2-1: SerialNumber: syz [ 406.478887][T10395] hfsplus: unable to find HFS+ superblock [ 406.498900][T10376] raw-gadget.0 gadget.1: fail, usb_ep_enable returned -22 [ 406.758528][ T7673] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 60 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 407.008148][ T1151] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 407.024782][ C0] usblp0: nonzero write bulk status received: -71 [ 407.033637][ T5899] usb 2-1: USB disconnect, device number 60 [ 407.048965][ T5899] usblp0: removed [ 407.541710][T10404] fuse: Unknown parameter 'fd0x0000000000000003' [ 408.183966][T10413] bridge0: port 3(batadv0) entered blocking state [ 408.190817][T10413] bridge0: port 3(batadv0) entered disabled state [ 408.190836][ T30] audit: type=1400 audit(1746178505.112:796): avc: granted { setsecparam } for pid=10405 comm="syz.4.1245" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 408.197333][T10413] batadv0: entered allmulticast mode [ 408.222449][T10413] batadv0: entered promiscuous mode [ 408.227916][T10413] batman_adv: batadv0: Local translation table size (104) exceeds maximum packet size (-320); Ignoring new local tt entry: aa:aa:aa:aa:aa:2a [ 408.242528][T10413] bridge0: port 3(batadv0) entered blocking state [ 408.249043][T10413] bridge0: port 3(batadv0) entered forwarding state [ 408.255902][T10407] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 408.267490][ T12] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 408.277684][ T12] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 408.303106][ T30] audit: type=1400 audit(1746178505.232:797): avc: denied { create } for pid=10410 comm="syz.1.1248" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 408.360710][ T30] audit: type=1400 audit(1746178505.292:798): avc: denied { execute } for pid=10410 comm="syz.1.1248" path="/proc/828/task/829/net/unix" dev="proc" ino=4026532842 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_t tclass=file permissive=1 [ 408.497163][T10422] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 408.529394][T10422] input: syz1 as /devices/virtual/input/input35 [ 408.643371][T10424] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1251'. [ 408.668398][T10427] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1253'. [ 408.914496][ T5817] Bluetooth: hci2: unknown advertising packet type: 0x70 [ 410.084304][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 410.270156][ T5817] Bluetooth: hci4: command 0x0406 tx timeout [ 410.356563][T10442] netlink: 34 bytes leftover after parsing attributes in process `syz.2.1256'. [ 410.813961][ T30] audit: type=1400 audit(1746178507.752:799): avc: denied { read } for pid=10451 comm="syz.1.1260" path="socket:[28058]" dev="sockfs" ino=28058 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=phonet_socket permissive=1 [ 410.878698][T10457] block nbd4: shutting down sockets [ 410.963811][ T952] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 411.245530][ T952] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 411.425873][ T952] usb 3-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 411.459578][T10468] input: syz1 as /devices/virtual/input/input36 [ 411.491356][ T952] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 411.508378][ T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 411.529206][ T952] usb 3-1: Product: syz [ 411.539152][ T952] usb 3-1: Manufacturer: syz [ 411.551979][ T952] usb 3-1: SerialNumber: syz [ 411.570376][T10448] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 411.577698][ T30] audit: type=1400 audit(1746178508.512:800): avc: denied { bind } for pid=10472 comm="syz.3.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 411.820372][ T30] audit: type=1400 audit(1746178508.752:801): avc: denied { write } for pid=10472 comm="syz.3.1267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 411.839699][ C0] vkms_vblank_simulate: vblank timer overrun [ 411.914119][ T952] usblp 3-1:1.0: usblp0: USB Unidirectional printer dev 50 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 412.175392][ C1] usblp0: nonzero write bulk status received: -71 [ 412.184120][ T952] usb 3-1: USB disconnect, device number 50 [ 412.197449][ T952] usblp0: removed [ 412.313804][ T24] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 412.321695][ T82] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 412.494084][T10479] FAULT_INJECTION: forcing a failure. [ 412.494084][T10479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 412.507234][T10479] CPU: 0 UID: 0 PID: 10479 Comm: syz.1.1268 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 412.507258][T10479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 412.507268][T10479] Call Trace: [ 412.507274][T10479] [ 412.507280][T10479] dump_stack_lvl+0x16c/0x1f0 [ 412.507305][T10479] should_fail_ex+0x512/0x640 [ 412.507331][T10479] _copy_from_user+0x2e/0xd0 [ 412.507354][T10479] copy_msghdr_from_user+0x98/0x160 [ 412.507372][T10479] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 412.507386][T10479] ? lockdep_hardirqs_on+0x7c/0x110 [ 412.507410][T10479] ? __pfx__kstrtoull+0x10/0x10 [ 412.507426][T10479] ? __might_fault+0x13b/0x190 [ 412.507446][T10479] ___sys_sendmsg+0xfe/0x1d0 [ 412.507464][T10479] ? __pfx____sys_sendmsg+0x10/0x10 [ 412.507492][T10479] ? find_held_lock+0x2b/0x80 [ 412.507526][T10479] __sys_sendmmsg+0x200/0x420 [ 412.507545][T10479] ? __pfx___sys_sendmmsg+0x10/0x10 [ 412.507585][T10479] ? fput+0x70/0xf0 [ 412.507603][T10479] ? ksys_write+0x1b9/0x240 [ 412.507632][T10479] __x64_sys_sendmmsg+0x9c/0x100 [ 412.507648][T10479] ? lockdep_hardirqs_on+0x7c/0x110 [ 412.507667][T10479] do_syscall_64+0xcd/0x260 [ 412.507689][T10479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.507705][T10479] RIP: 0033:0x7f071ab8e969 [ 412.507718][T10479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 412.507734][T10479] RSP: 002b:00007f071b90f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 412.507750][T10479] RAX: ffffffffffffffda RBX: 00007f071adb6160 RCX: 00007f071ab8e969 [ 412.507761][T10479] RDX: 0000000000000001 RSI: 0000200000000b00 RDI: 0000000000000004 [ 412.507771][T10479] RBP: 00007f071b90f090 R08: 0000000000000000 R09: 0000000000000000 [ 412.507780][T10479] R10: 00000000040008c0 R11: 0000000000000246 R12: 0000000000000001 [ 412.507790][T10479] R13: 0000000000000000 R14: 00007f071adb6160 R15: 00007ffcbb3610b8 [ 412.507812][T10479] [ 412.760577][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 412.780377][ T82] usb 1-1: device descriptor read/64, error -71 [ 412.805616][ T24] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 412.816118][ T24] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 412.836239][ T24] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 412.852138][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 412.860440][ T24] usb 5-1: Product: syz [ 412.864639][ T24] usb 5-1: Manufacturer: syz [ 412.869346][ T24] usb 5-1: SerialNumber: syz [ 412.905546][T10471] raw-gadget.2 gadget.4: fail, usb_ep_enable returned -22 [ 413.034378][ T82] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 413.298023][ T24] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 413.320091][ T82] usb 1-1: device descriptor read/64, error -71 [ 413.585038][ T82] usb usb1-port1: attempt power cycle [ 413.633399][ C0] usblp0: nonzero write bulk status received: -71 [ 413.642882][ T24] usb 5-1: USB disconnect, device number 51 [ 413.717831][ T24] usblp0: removed [ 413.783180][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 413.817302][T10504] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1275'. [ 413.837248][T10504] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1275'. [ 413.898253][ T30] audit: type=1400 audit(1746178510.832:802): avc: denied { bind } for pid=10509 comm="syz.1.1278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 413.918696][ C1] vkms_vblank_simulate: vblank timer overrun [ 413.990820][ T82] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 413.998840][T10512] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1279'. [ 414.011989][ T82] usb 1-1: device descriptor read/8, error -71 [ 414.250373][ T82] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 414.316778][ T82] usb 1-1: device descriptor read/8, error -71 [ 414.432471][ T82] usb usb1-port1: unable to enumerate USB device [ 414.572650][T10520] hfsplus: unable to find HFS+ superblock [ 414.593519][T10517] MTD: Attempt to mount non-MTD device "/dev/nullb0" [ 414.612446][T10517] cramfs: wrong magic [ 414.765442][ T30] audit: type=1400 audit(1746178511.692:803): avc: denied { sqpoll } for pid=10522 comm="syz.4.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=io_uring permissive=1 [ 414.784734][ C1] vkms_vblank_simulate: vblank timer overrun [ 414.881901][ T30] audit: type=1400 audit(1746178511.702:804): avc: denied { getopt } for pid=10522 comm="syz.4.1284" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 414.902373][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.093352][T10536] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1285'. [ 415.466536][ T30] audit: type=1400 audit(1746178512.402:805): avc: denied { watch } for pid=10518 comm="syz.1.1282" path="/259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 415.511173][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.650238][ T30] audit: type=1400 audit(1746178512.402:806): avc: denied { watch_sb } for pid=10518 comm="syz.1.1282" path="/259/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa" dev="tmpfs" ino=1390 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=file permissive=1 [ 415.694747][ C1] vkms_vblank_simulate: vblank timer overrun [ 415.952886][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 415.990565][ T82] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 416.170334][ T82] usb 5-1: Using ep0 maxpacket: 16 [ 416.248337][ T82] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 416.283510][ T82] usb 5-1: config 0 has no interface number 0 [ 416.313914][ T82] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 416.451272][ T82] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 416.465947][ T82] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 416.480226][ T82] usb 5-1: Product: syz [ 416.489921][ T82] usb 5-1: Manufacturer: syz [ 416.513929][ T82] usb 5-1: SerialNumber: syz [ 416.534016][ T82] usb 5-1: config 0 descriptor?? [ 416.577545][ T82] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 416.730181][ T5901] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 417.631801][ T80] usb 5-1: Failed to submit usb control message: -110 [ 417.852905][ T80] usb 5-1: unable to send the bmi data to the device: -110 [ 417.889323][ T80] usb 5-1: unable to get target info from device [ 417.930548][ T80] usb 5-1: could not get target info (-110) [ 417.939616][ T80] usb 5-1: could not probe fw (-110) [ 417.940234][ T5901] usb 2-1: Using ep0 maxpacket: 16 [ 418.012888][ T5901] usb 2-1: config 0 has an invalid interface number: 68 but max is 0 [ 418.021679][ T5901] usb 2-1: config 0 has no interface number 0 [ 418.028490][ T5901] usb 2-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 418.675303][ T9846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 418.691081][ T5901] usb 2-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 418.700664][ T5901] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 418.708645][T10573] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 418.708907][ T5901] usb 2-1: Product: syz [ 418.722814][T10573] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 418.733805][ T5901] usb 2-1: Manufacturer: syz [ 418.739506][ T5901] usb 2-1: SerialNumber: syz [ 418.764940][ T5901] usb 2-1: config 0 descriptor?? [ 418.789281][ T5901] usb 2-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 419.826077][T10582] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 419.839060][T10582] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 419.874244][ T9846] usb 2-1: Failed to submit usb control message: -110 [ 419.875945][ T952] usb 5-1: USB disconnect, device number 52 [ 419.946757][ T9846] usb 2-1: unable to send the bmi data to the device: -110 [ 419.976096][ T9846] usb 2-1: unable to get target info from device [ 419.992968][ T9846] usb 2-1: could not get target info (-110) [ 420.031103][ T82] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 420.044889][ T9846] usb 2-1: could not probe fw (-110) [ 420.075573][ T30] audit: type=1400 audit(1746178517.012:807): avc: denied { nlmsg_write } for pid=10583 comm="syz.3.1299" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 420.139984][ T30] audit: type=1400 audit(1746178517.072:808): avc: denied { map } for pid=10583 comm="syz.3.1299" path="socket:[28294]" dev="sockfs" ino=28294 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_audit_socket permissive=1 [ 420.366920][ T82] usb 3-1: New USB device found, idVendor=0dba, idProduct=3000, bcdDevice=26.ea [ 420.376101][ T82] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 420.401374][ T82] usb 3-1: config 0 descriptor?? [ 420.413151][ T82] usb 3-1: Invalid firmware size=18. [ 420.952618][ T5899] usb 2-1: USB disconnect, device number 61 [ 420.970077][ T952] usb 4-1: new high-speed USB device number 48 using dummy_hcd [ 421.173872][ T952] usb 4-1: Using ep0 maxpacket: 32 [ 421.314949][ T952] usb 4-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 421.521485][ T952] usb 4-1: config 1 interface 0 has no altsetting 0 [ 421.523586][ T30] audit: type=1400 audit(1746178518.462:809): avc: denied { map } for pid=10605 comm="syz.4.1302" path="socket:[27279]" dev="sockfs" ino=27279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 421.551978][ T952] usb 4-1: language id specifier not provided by device, defaulting to English [ 421.561370][ T30] audit: type=1400 audit(1746178518.462:810): avc: denied { read } for pid=10605 comm="syz.4.1302" path="socket:[27279]" dev="sockfs" ino=27279 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 421.591334][ T952] usb 4-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 421.611848][ T952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 421.635550][ T952] usb 4-1: Product: syz [ 421.649143][ T952] usb 4-1: Manufacturer: syz [ 421.662202][ T952] usb 4-1: SerialNumber: syz [ 421.710647][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 422.321396][ T7673] usb 1-1: new high-speed USB device number 62 using dummy_hcd [ 422.524732][ T7673] usb 1-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 422.578248][ T7673] usb 1-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 422.707324][ T7673] usb 1-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 422.777210][ T7673] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 422.817663][ T7673] usb 1-1: Product: syz [ 422.929927][ T7673] usb 1-1: Manufacturer: syz [ 422.969787][ T7673] usb 1-1: SerialNumber: syz [ 422.974521][ T5899] usb 3-1: USB disconnect, device number 51 [ 423.078699][T10630] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 423.384292][ T952] usbhid 4-1:1.0: can't add hid device: -71 [ 423.458397][ T7673] usblp 1-1:1.0: usblp0: USB Unidirectional printer dev 62 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 423.566004][T10645] sock: sock_set_timeout: `syz.4.1311' (pid 10645) tries to set negative timeout [ 423.570140][ T952] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 423.673656][ C1] usblp0: nonzero write bulk status received: -71 [ 423.705048][ T7673] usb 1-1: USB disconnect, device number 62 [ 423.715711][ T7673] usblp0: removed [ 423.726606][T10651] lo speed is unknown, defaulting to 1000 [ 423.738239][T10651] lo speed is unknown, defaulting to 1000 [ 423.790443][ T952] usb 4-1: USB disconnect, device number 48 [ 424.250344][ T952] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 424.272902][T10681] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 424.292348][T10681] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 424.430574][ T952] usb 4-1: Using ep0 maxpacket: 32 [ 424.446082][ T952] usb 4-1: config 0 has an invalid interface number: 125 but max is 0 [ 424.458056][ T952] usb 4-1: config 0 has no interface number 0 [ 424.469219][ T952] usb 4-1: config 0 interface 125 has no altsetting 0 [ 424.507510][ T952] usb 4-1: New USB device found, idVendor=1bc7, idProduct=9010, bcdDevice=e9.44 [ 424.526933][ T952] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 424.567299][ T952] usb 4-1: Product: syz [ 424.572245][ T952] usb 4-1: Manufacturer: syz [ 424.580899][ T952] usb 4-1: SerialNumber: syz [ 424.598311][ T952] usb 4-1: config 0 descriptor?? [ 424.848080][ T952] option 4-1:0.125: GSM modem (1-port) converter detected [ 424.881938][ T952] usb 4-1: USB disconnect, device number 49 [ 424.952793][ T952] option 4-1:0.125: device disconnected [ 425.642065][ T30] audit: type=1400 audit(1746178522.562:811): avc: denied { relabelfrom } for pid=10758 comm="syz.1.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 425.699307][ T30] audit: type=1400 audit(1746178522.562:812): avc: denied { relabelto } for pid=10758 comm="syz.1.1366" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tun_socket permissive=1 [ 425.910244][ T82] usb 3-1: new high-speed USB device number 52 using dummy_hcd [ 425.946534][T10780] binder: 10777:10780 ioctl c018620c 200000000000 returned -1 [ 426.071497][ T82] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 426.090140][ T82] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 426.132998][ T82] usb 3-1: New USB device found, idVendor=1d34, idProduct=000a, bcdDevice= 0.00 [ 426.170390][ T82] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 426.197518][ T82] usb 3-1: config 0 descriptor?? [ 426.580088][ T5899] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 426.618116][ T82] hid-led 0003:1D34:000A.000F: item fetching failed at offset 1/3 [ 426.636290][ T82] hid-led 0003:1D34:000A.000F: probe with driver hid-led failed with error -22 [ 426.760138][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 426.768563][ T5899] usb 1-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 426.780770][ T5899] usb 1-1: config 1 has 0 interfaces, different from the descriptor's value: 3 [ 426.794466][ T5899] usb 1-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 426.816118][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 426.821749][T10766] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 426.828047][ T5899] usb 1-1: Product: syz [ 426.844925][ T5899] usb 1-1: Manufacturer: syz [ 426.849600][ T5899] usb 1-1: SerialNumber: syz [ 426.851742][T10766] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 426.923471][ T5899] usb 3-1: USB disconnect, device number 52 [ 427.094920][ T952] usb 1-1: USB disconnect, device number 63 [ 427.348566][T10858] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1409'. [ 427.482753][ T6004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 427.670657][ T30] audit: type=1400 audit(1746178524.602:813): avc: denied { load_policy } for pid=10872 comm="syz.2.1417" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 427.697340][T10875] SELinux: ebitmap: truncated map [ 427.733088][T10875] SELinux: failed to load policy [ 427.773201][ T82] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 427.945616][ T82] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 428.106817][ T82] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 428.242265][ T82] usb 5-1: New USB device found, idVendor=1038, idProduct=1410, bcdDevice= 0.00 [ 428.302489][ T82] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 428.316629][ T82] usb 5-1: config 0 descriptor?? [ 428.397074][T10891] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 428.550180][ T952] usb 2-1: new high-speed USB device number 62 using dummy_hcd [ 428.587036][ T30] audit: type=1400 audit(1746178525.522:814): avc: denied { audit_read } for pid=10900 comm="syz.3.1428" capability=37 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 428.710228][ T952] usb 2-1: Using ep0 maxpacket: 16 [ 428.727077][ T952] usb 2-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 428.752153][ T952] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 428.777780][ T82] steelseries 0003:1038:1410.0010: reserved main item tag 0xe [ 428.782645][ T952] usb 2-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 428.795644][ T82] steelseries 0003:1038:1410.0010: unknown main item tag 0x1 [ 428.797839][ T952] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 428.813742][ T5899] usb 1-1: new high-speed USB device number 64 using dummy_hcd [ 428.822318][ T952] usb 2-1: Product: syz [ 428.822836][ T82] steelseries 0003:1038:1410.0010: missing HID_OUTPUT_REPORT 0 [ 428.826734][ T952] usb 2-1: Manufacturer: syz [ 428.846365][ T952] usb 2-1: SerialNumber: syz [ 428.982848][ T5901] usb 5-1: USB disconnect, device number 53 [ 428.990294][ T5899] usb 1-1: Using ep0 maxpacket: 32 [ 429.004239][ T5899] usb 1-1: config 0 has an invalid interface number: 20 but max is 0 [ 429.021380][ T5899] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 429.034917][ T5899] usb 1-1: config 0 has no interface number 0 [ 429.042359][ T5899] usb 1-1: config 0 interface 20 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 429.066068][ T952] usb 2-1: 0:2 : does not exist [ 429.081827][ T5899] usb 1-1: New USB device found, idVendor=04e6, idProduct=000b, bcdDevice= 1.00 [ 429.104831][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 429.115984][ T952] usb 2-1: USB disconnect, device number 62 [ 429.125432][ T5899] usb 1-1: Product: syz [ 429.137139][ T5899] usb 1-1: Manufacturer: syz [ 429.144346][ T5899] usb 1-1: SerialNumber: syz [ 429.164643][ T5899] usb 1-1: config 0 descriptor?? [ 429.201894][ T5815] udevd[5815]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 429.387709][T10919] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 429.616528][ T5899] usb-storage 1-1:0.20: USB Mass Storage device detected [ 429.661960][ T5899] usb-storage 1-1:0.20: Quirks match for vid 04e6 pid 000b: 4 [ 429.723545][T10929] tmpfs: Bad value for 'mpol' [ 429.758376][ T5899] usb 1-1: USB disconnect, device number 64 [ 429.930384][ T7673] usb 4-1: new high-speed USB device number 50 using dummy_hcd [ 430.091116][ T7673] usb 4-1: unable to get BOS descriptor or descriptor too short [ 430.117885][ T7673] usb 4-1: config 1 interface 0 has no altsetting 0 [ 430.134056][ T7673] usb 4-1: New USB device found, idVendor=0c45, idProduct=5112, bcdDevice= 0.40 [ 430.153880][ T7673] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 430.166860][ T7673] usb 4-1: Product: syz [ 430.171062][ T7673] usb 4-1: Manufacturer: syz [ 430.174120][T10954] trusted_key: encrypted_key: insufficient parameters specified [ 430.189236][ T7673] usb 4-1: SerialNumber: syz [ 430.440957][ T7673] usbhid 4-1:1.0: can't add hid device: -71 [ 430.446922][ T7673] usbhid 4-1:1.0: probe with driver usbhid failed with error -71 [ 430.466205][ T7673] usb 4-1: USB disconnect, device number 50 [ 430.963423][T10954] Bluetooth: hci1: Opcode 0x0c1a failed: -4 [ 430.987146][T10954] Bluetooth: hci1: Error when powering off device on rfkill (-4) [ 431.040127][T10954] Bluetooth: hci2: Opcode 0x0c1a failed: -4 [ 431.073618][T10954] Bluetooth: hci2: Error when powering off device on rfkill (-4) [ 431.098947][T10954] Bluetooth: hci3: Opcode 0x0c1a failed: -4 [ 431.104890][T10954] Bluetooth: hci3: Error when powering off device on rfkill (-4) [ 431.157796][T10954] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 431.163746][T10954] Bluetooth: hci4: Error when powering off device on rfkill (-4) [ 431.220889][T10984] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 431.453171][ T30] audit: type=1326 audit(1746178528.436:815): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0438e969 code=0x7ffc0000 [ 431.453352][ T30] audit: type=1326 audit(1746178528.436:816): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0438e969 code=0x7ffc0000 [ 431.453724][ T30] audit: type=1326 audit(1746178528.436:817): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=39 compat=0 ip=0x7f4e0438e969 code=0x7ffc0000 [ 431.453887][ T30] audit: type=1326 audit(1746178528.436:818): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0438e969 code=0x7ffc0000 [ 431.454157][ T30] audit: type=1326 audit(1746178528.436:819): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=434 compat=0 ip=0x7f4e0438e969 code=0x7ffc0000 [ 431.454472][ T30] audit: type=1326 audit(1746178528.436:820): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0438e969 code=0x7ffc0000 [ 431.454632][ T30] audit: type=1326 audit(1746178528.436:821): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0438e969 code=0x7ffc0000 [ 431.454864][ T30] audit: type=1326 audit(1746178528.436:822): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=437 compat=0 ip=0x7f4e0438e969 code=0x7ffc0000 [ 431.455009][ T30] audit: type=1326 audit(1746178528.436:823): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f4e0438e969 code=0x7ffc0000 [ 431.455211][ T30] audit: type=1326 audit(1746178528.436:824): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=10997 comm="syz.0.1470" exe="/root/syz-executor" sig=0 arch=c000003e syscall=308 compat=0 ip=0x7f4e0438e969 code=0x7ffc0000 [ 431.591158][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.668756][ C0] vkms_vblank_simulate: vblank timer overrun [ 431.716227][ C0] vkms_vblank_simulate: vblank timer overrun [ 432.536705][ T7673] usb 4-1: new high-speed USB device number 51 using dummy_hcd [ 432.684033][ T7673] usb 4-1: Using ep0 maxpacket: 32 [ 432.692018][ T7673] usb 4-1: config 0 interface 0 altsetting 4 endpoint 0x81 has an invalid bInterval 254, changing to 11 [ 432.703461][ T24] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 432.711084][ T7673] usb 4-1: config 0 interface 0 has no altsetting 0 [ 432.718154][ T7673] usb 4-1: New USB device found, idVendor=04f2, idProduct=0418, bcdDevice= 0.00 [ 432.727496][ T7673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.737243][ T7673] usb 4-1: config 0 descriptor?? [ 432.870022][ T24] usb 3-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 432.879257][ T24] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 432.889009][ T24] usb 3-1: config 0 descriptor?? [ 432.896231][ T24] cp210x 3-1:0.0: cp210x converter detected [ 433.141111][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 433.156516][ T7673] chicony 0003:04F2:0418.0011: hidraw0: USB HID v0.07 Device [HID 04f2:0418] on usb-dummy_hcd.3-1/input0 [ 433.291774][ T24] cp210x 3-1:0.0: failed to get vendor val 0x000e size 3: -32 [ 433.321701][ T24] usb 3-1: cp210x converter now attached to ttyUSB0 [ 433.330133][T11040] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1485'. [ 433.342858][ T5899] usb 4-1: USB disconnect, device number 51 [ 433.539958][ T24] usb 3-1: USB disconnect, device number 53 [ 433.556038][ T24] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 434.088100][ T24] cp210x 3-1:0.0: device disconnected [ 434.540445][T11070] SELinux: Context system_u:object_r:devicekit_disk_exec_t:s0 is not valid (left unmapped). [ 434.838059][ T7673] usb 4-1: new high-speed USB device number 52 using dummy_hcd [ 435.127774][ T7673] usb 4-1: New USB device found, idVendor=9710, idProduct=7730, bcdDevice=96.33 [ 435.160904][ T7673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.187927][ T7673] usb 4-1: config 0 descriptor?? [ 435.444252][ T82] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 435.600745][ T24] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 435.609621][ T7673] usb 4-1: Cannot set MAC address [ 435.626618][ T82] usb 5-1: New USB device found, idVendor=1a86, idProduct=7522, bcdDevice=35.36 [ 435.636399][ T7673] MOSCHIP usb-ethernet driver 4-1:0.0: probe with driver MOSCHIP usb-ethernet driver failed with error -71 [ 435.648431][ T82] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 435.660267][ T7673] usb 4-1: USB disconnect, device number 52 [ 435.666694][ T82] usb 5-1: Product: syz [ 435.671322][ T82] usb 5-1: Manufacturer: syz [ 435.678198][ T82] usb 5-1: SerialNumber: syz [ 435.697698][ T82] usb 5-1: config 0 descriptor?? [ 435.711166][ T82] ch341 5-1:0.0: ch341-uart converter detected [ 435.845108][ T24] usb 2-1: Using ep0 maxpacket: 8 [ 435.851370][ T24] usb 2-1: New USB device found, idVendor=1557, idProduct=7720, bcdDevice=b7.eb [ 435.860681][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 435.871410][ T24] usb 2-1: config 0 descriptor?? [ 436.687275][ T7673] usb 4-1: new full-speed USB device number 53 using dummy_hcd [ 436.846687][ T7673] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 1023, setting to 64 [ 436.860043][ T7673] usb 4-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 4 [ 436.878904][ T7673] usb 4-1: New USB device found, idVendor=046a, idProduct=0023, bcdDevice= 0.00 [ 436.888637][ T7673] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 436.907933][ T7673] usb 4-1: config 0 descriptor?? [ 436.924076][T11127] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 437.072817][ T82] ch341-uart ttyUSB0: break control not supported, using simulated break [ 437.085700][ T82] usb 5-1: ch341-uart converter now attached to ttyUSB0 [ 437.108144][ T82] usb 5-1: USB disconnect, device number 54 [ 437.133710][ T82] ch341-uart ttyUSB0: ch341-uart converter now disconnected from ttyUSB0 [ 437.144403][T11127] Bluetooth: hci0: load_link_keys: too big key_count value 27144 [ 437.158122][ T82] ch341 5-1:0.0: device disconnected [ 437.181197][ T7673] usbhid 4-1:0.0: can't add hid device: -71 [ 437.188190][ T7673] usbhid 4-1:0.0: probe with driver usbhid failed with error -71 [ 437.202439][ T7673] usb 4-1: USB disconnect, device number 53 [ 437.521270][ T9846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 437.616862][T11168] bridge1: entered promiscuous mode [ 437.693723][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 437.706618][ T24] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to send software reset: ffffffb9 [ 437.727023][ T24] asix 2-1:0.0: probe with driver asix failed with error -71 [ 437.747633][ T24] usb 2-1: USB disconnect, device number 63 [ 437.854238][T11176] syz_tun: entered allmulticast mode [ 437.861842][T11175] syz_tun: left allmulticast mode [ 438.007421][ T30] kauditd_printk_skb: 11 callbacks suppressed [ 438.007436][ T30] audit: type=1400 audit(1746178535.143:836): avc: denied { nlmsg_read } for pid=11181 comm="syz.3.1548" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 438.062321][ T5899] usb 5-1: new high-speed USB device number 55 using dummy_hcd [ 438.238818][ T5899] usb 5-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 438.285610][ T5899] usb 5-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 438.294555][ T5899] usb 5-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 438.397549][ T5899] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 438.455766][ T5899] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 438.601056][ T5899] usb 5-1: Product: syz [ 438.658298][ T5899] usb 5-1: Manufacturer: syz [ 438.730868][ T5899] usb 5-1: SerialNumber: syz [ 438.761322][ T30] audit: type=1400 audit(1746178535.917:837): avc: denied { getopt } for pid=11195 comm="syz.2.1555" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=icmp_socket permissive=1 [ 438.784766][ T30] audit: type=1400 audit(1746178535.937:838): avc: denied { bind } for pid=11196 comm="syz.1.1554" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 439.049542][ T5899] cdc_ncm 5-1:1.0: skipping garbage [ 439.072907][ T5899] cdc_ncm 5-1:1.0: invalid descriptor buffer length [ 439.073699][T11206] lo speed is unknown, defaulting to 1000 [ 439.409352][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 439.435945][T11206] lo speed is unknown, defaulting to 1000 [ 439.514643][ T5899] cdc_ncm 5-1:1.0: CDC Union missing and no IAD found [ 439.521495][ T5899] cdc_ncm 5-1:1.0: bind() failure [ 439.530559][ T5899] usb 5-1: USB disconnect, device number 55 [ 440.064196][ T24] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 440.290398][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 440.342113][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 440.355957][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 440.407858][ T24] usb 4-1: New USB device found, idVendor=05ac, idProduct=8241, bcdDevice= 0.00 [ 440.448939][ T24] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 440.473614][ T24] usb 4-1: config 0 descriptor?? [ 440.501113][T11239] loop4: detected capacity change from 0 to 7 [ 440.514314][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.523630][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 440.532713][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.541887][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 440.553922][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.563168][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 440.574640][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.583873][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 440.598405][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.607623][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 440.620287][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.629497][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 440.641186][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.650414][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 440.662104][ T5815] ldm_validate_partition_table(): Disk read failed. [ 440.669482][ C1] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.678675][ C1] Buffer I/O error on dev loop4, logical block 0, async page read [ 440.712401][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.721627][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 440.730740][ C0] I/O error, dev loop4, sector 0 op 0x0:(READ) flags 0x0 phys_seg 1 prio class 0 [ 440.739899][ C0] Buffer I/O error on dev loop4, logical block 0, async page read [ 440.749237][ T5815] Dev loop4: unable to read RDB block 0 [ 440.769291][ T5815] loop4: unable to read partition table [ 440.776686][ T5815] loop4: partition table beyond EOD, truncated [ 440.792083][T11239] ldm_validate_partition_table(): Disk read failed. [ 440.800119][T11239] Dev loop4: unable to read RDB block 0 [ 440.808726][T11239] loop4: unable to read partition table [ 440.885319][T11239] loop4: partition table beyond EOD, truncated [ 440.899949][T11239] loop_reread_partitions: partition scan of loop4 (þ被xü—ŸÑà– ) failed (rc=-5) [ 440.901912][ T24] input: HID 05ac:8241 as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:05AC:8241.0012/input/input38 [ 441.074179][ T24] appleir 0003:05AC:8241.0012: input,hiddev0,hidraw0: USB HID v0.00 Device [HID 05ac:8241] on usb-dummy_hcd.3-1/input0 [ 441.275988][ T30] audit: type=1400 audit(1746178538.459:839): avc: denied { view } for pid=11269 comm="syz.2.1584" scontext=root:sysadm_r:sysadm_t tcontext=system_u:system_r:kernel_t tclass=key permissive=1 [ 441.622901][ T24] usb 4-1: USB disconnect, device number 54 [ 441.817264][ T5899] usb 5-1: new high-speed USB device number 56 using dummy_hcd [ 441.839887][T11278] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1586'. [ 441.996465][ T5899] usb 5-1: Using ep0 maxpacket: 32 [ 442.014951][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 255, changing to 11 [ 442.051848][ T5899] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid maxpacket 59391, setting to 1024 [ 442.085780][ T5899] usb 5-1: New USB device found, idVendor=046d, idProduct=c31c, bcdDevice= 0.40 [ 442.103527][ T5899] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.117702][ T5899] usb 5-1: config 0 descriptor?? [ 442.151828][T11261] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 442.164723][ T5899] hub 5-1:0.0: USB hub found [ 442.329128][ T5901] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 442.383860][ T5899] hub 5-1:0.0: 1 port detected [ 442.531233][ T5901] usb 3-1: Using ep0 maxpacket: 16 [ 442.558070][ T5901] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 442.572182][ T6004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 442.599788][ T5901] usb 3-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 9 [ 442.618003][ T5901] usb 3-1: New USB device found, idVendor=045e, idProduct=07da, bcdDevice= 0.00 [ 442.627846][ T5901] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 442.648877][ T5901] usb 3-1: config 0 descriptor?? [ 442.798436][ T5899] usb 5-1: USB disconnect, device number 56 [ 443.062671][ T5901] usbhid 3-1:0.0: can't add hid device: -71 [ 443.070408][T11333] netlink: 'syz.0.1608': attribute type 3 has an invalid length. [ 443.079064][ T5901] usbhid 3-1:0.0: probe with driver usbhid failed with error -71 [ 443.092587][ T5901] usb 3-1: USB disconnect, device number 54 [ 443.187942][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 443.396795][T11353] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 443.443899][ T82] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 443.468582][T11355] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 443.622148][ T82] usb 2-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 443.640411][ T82] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 443.666489][ T82] usb 2-1: config 0 descriptor?? [ 443.808706][T11370] tmpfs: Bad value for 'nr_blocks' [ 444.127464][ T24] usb 5-1: new high-speed USB device number 57 using dummy_hcd [ 445.271940][ T82] asix 2-1:0.0 (unnamed net_device) (uninitialized): Failed to read reg index 0x0000: -71 [ 445.300295][ T24] usb 5-1: Using ep0 maxpacket: 16 [ 445.305665][ T82] asix 2-1:0.0: probe with driver asix failed with error -71 [ 445.316463][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 445.333684][ T82] usb 2-1: USB disconnect, device number 64 [ 445.340740][ T24] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 445.354290][ T24] usb 5-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 445.367484][T11390] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1634'. [ 445.376844][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=0317, bcdDevice= 0.00 [ 445.392688][ T24] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 445.419898][ T24] usb 5-1: config 0 descriptor?? [ 445.538845][ T952] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 445.878843][ T24] wacom 0003:056A:0317.0013: unbalanced collection at end of report description [ 445.932265][ T24] wacom 0003:056A:0317.0013: parse failed [ 445.948903][ T24] wacom 0003:056A:0317.0013: probe with driver wacom failed with error -22 [ 445.982552][ T82] usb 4-1: new high-speed USB device number 55 using dummy_hcd [ 446.070266][ T24] usb 5-1: USB disconnect, device number 57 [ 446.157655][ T952] usb 3-1: Using ep0 maxpacket: 32 [ 446.167998][ T952] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x85 has invalid maxpacket 32 [ 446.201344][ T952] usb 3-1: New USB device found, idVendor=0499, idProduct=1010, bcdDevice= 5.f5 [ 446.213111][ T952] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 446.223297][ T952] usb 3-1: Product: syz [ 446.227501][ T952] usb 3-1: Manufacturer: syz [ 446.234895][ T952] usb 3-1: SerialNumber: syz [ 446.238150][ T82] usb 4-1: Using ep0 maxpacket: 8 [ 446.260451][ T952] usb 3-1: config 0 descriptor?? [ 446.266832][T11386] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 446.300311][ T952] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 446.310518][ T82] usb 4-1: config 0 has no interfaces? [ 446.321106][ T82] usb 4-1: New USB device found, idVendor=1241, idProduct=5015, bcdDevice= 0.00 [ 446.330677][ T82] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=111 [ 446.338887][ T82] usb 4-1: SerialNumber: syz [ 446.352475][ T82] usb 4-1: config 0 descriptor?? [ 446.548294][ T952] usb 3-1: USB disconnect, device number 55 [ 446.602727][ T5899] usb 4-1: USB disconnect, device number 55 [ 446.670847][T11416] kvm_intel: set kvm_intel.dump_invalid_vmcs=1 to dump internal KVM state. [ 447.585170][ T24] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 447.916024][ T24] usb 2-1: config 0 interface 0 has no altsetting 0 [ 447.969475][ T24] usb 2-1: New USB device found, idVendor=046d, idProduct=c626, bcdDevice= 0.00 [ 447.970155][ T24] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 448.224958][ T24] usb 2-1: config 0 descriptor?? [ 448.249092][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 448.617823][T11471] hfsplus: unable to find HFS+ superblock [ 448.808393][ T24] logitech 0003:046D:C626.0014: hidraw0: USB HID v0.02 Device [HID 046d:c626] on usb-dummy_hcd.1-1/input0 [ 448.883151][ T4257] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 449.870077][ T24] usb 2-1: USB disconnect, device number 65 [ 450.141967][T11492] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1672'. [ 452.031367][T11510] smc: net device lo applied user defined pnetid SYZ1 [ 452.193354][ T30] audit: type=1400 audit(1746178549.338:840): avc: denied { write } for pid=11497 comm="syz.0.1675" name="renderD128" dev="devtmpfs" ino=626 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:dri_device_t tclass=chr_file permissive=1 [ 452.581708][ T24] usb 4-1: new high-speed USB device number 56 using dummy_hcd [ 452.925100][T11521] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1681'. [ 453.760293][ T24] usb 4-1: Using ep0 maxpacket: 32 [ 453.814705][ T24] usb 4-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 453.849877][T11527] vivid-000: disconnect [ 453.882435][ T24] usb 4-1: config 1 interface 0 has no altsetting 0 [ 453.890066][ T24] usb 4-1: language id specifier not provided by device, defaulting to English [ 453.921342][ T24] usb 4-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 453.946372][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 453.956211][ T24] usb 4-1: Product: syz [ 453.961168][ T24] usb 4-1: Manufacturer: syz [ 453.968707][ T8767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 454.043499][ T24] usb 4-1: SerialNumber: syz [ 454.090016][T11532] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1684'. [ 455.795740][T11526] vivid-000: reconnect [ 456.245877][ T24] usb 4-1: can't set config #1, error -71 [ 456.252493][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 456.258878][ T24] usb 4-1: USB disconnect, device number 56 [ 457.957986][ T30] audit: type=1400 audit(1746178555.305:841): avc: denied { ioctl } for pid=11552 comm="syz.0.1692" path="socket:[32638]" dev="sockfs" ino=32638 ioctlcmd=0x890b scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 459.060303][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 459.750712][T11570] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1696'. [ 459.840101][T11572] hfsplus: unable to find HFS+ superblock [ 461.451728][ T6004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 462.388288][ T5899] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 462.496794][T11608] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1710'. [ 462.537890][ T5899] usb 2-1: Using ep0 maxpacket: 16 [ 462.997136][T11612] fuse: Unknown parameter 'user_id00000000000000000000' [ 463.008407][ T5899] usb 2-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 463.017982][ T5899] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 463.027333][ T5899] usb 2-1: Product: syz [ 463.034047][ T5899] usb 2-1: Manufacturer: syz [ 463.373453][ T5899] usb 2-1: SerialNumber: syz [ 463.394085][ T5899] r8152-cfgselector 2-1: Unknown version 0x0000 [ 463.400401][ T5899] r8152-cfgselector 2-1: config 0 descriptor?? [ 463.921956][ T5899] r8152-cfgselector 2-1: USB disconnect, device number 66 [ 465.615691][ T6004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 466.187096][T11644] hfsplus: unable to find HFS+ superblock [ 466.245379][T11650] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1721'. [ 466.708687][T11653] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1723'. [ 466.729357][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 467.950244][T11669] bond1 (unregistering): Released all slaves [ 469.962945][ T10] kworker/0:1 (10) used greatest stack depth: 21320 bytes left [ 471.048638][T11705] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1735'. [ 471.744700][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 473.486165][ T52] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 476.450788][T11761] hfsplus: unable to find HFS+ superblock [ 477.439405][ T6004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 477.492942][T11763] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1752'. [ 478.497416][T11778] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1756'. [ 478.764789][ T9846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 478.873690][T11785] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1758'. [ 479.852852][T11793] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1761'. [ 480.858688][T11806] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1765'. [ 481.417969][T11813] fuse: Bad value for 'fd' [ 482.016075][T11820] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1769'. [ 482.709475][T11833] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1773'. [ 483.319484][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.322633][ T24] usb 4-1: new high-speed USB device number 57 using dummy_hcd [ 484.565024][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 484.601542][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 484.635415][T11854] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1778'. [ 484.648542][ T24] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 484.668342][ T24] usb 4-1: config 0 has no interface number 0 [ 485.070003][ T24] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 485.083538][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 485.092988][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 485.101407][ T24] usb 4-1: Product: syz [ 485.108251][ T24] usb 4-1: Manufacturer: syz [ 485.285134][ T24] usb 4-1: SerialNumber: syz [ 485.612286][ T24] usb 4-1: config 0 descriptor?? [ 485.781866][T11872] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1782'. [ 485.827015][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 485.855806][T11840] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.162522][T11876] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 486.183663][T11876] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 486.253933][T11878] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1783'. [ 486.831877][T11885] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1785'. [ 486.910221][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 486.910572][ T9444] usb 4-1: Failed to submit usb control message: -110 [ 486.923631][ T82] usb 4-1: USB disconnect, device number 57 [ 487.014246][ T9444] usb 4-1: unable to send the bmi data to the device: -110 [ 487.290076][ T9444] usb 4-1: unable to get target info from device [ 487.340231][ T9444] usb 4-1: could not get target info (-110) [ 487.346261][ T9444] usb 4-1: could not probe fw (-110) [ 488.599938][ T4257] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 488.774998][T11902] hfsplus: unable to find HFS+ superblock [ 490.446329][ T9846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 493.306067][ T24] usb 5-1: new high-speed USB device number 58 using dummy_hcd [ 494.188225][ T8767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 494.355546][ T24] usb 5-1: Using ep0 maxpacket: 32 [ 495.185620][ T24] usb 5-1: config 1 interface 0 altsetting 13 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 495.270613][T11963] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 495.297297][ T30] audit: type=1400 audit(1746178592.689:842): avc: granted { setsecparam } for pid=11960 comm="syz.3.1807" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 495.973881][ T24] usb 5-1: config 1 interface 0 has no altsetting 0 [ 496.019522][ T24] usb 5-1: string descriptor 0 read error: -71 [ 496.057025][ T24] usb 5-1: New USB device found, idVendor=056a, idProduct=00de, bcdDevice= 0.40 [ 496.104318][ T24] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 496.317552][ T24] usb 5-1: can't set config #1, error -71 [ 496.881525][T11986] bridge0: port 3(batadv0) entered blocking state [ 496.888308][T11986] bridge0: port 3(batadv0) entered disabled state [ 496.894986][T11986] batadv0: entered allmulticast mode [ 496.901767][T11986] batadv0: entered promiscuous mode [ 496.907726][T11986] bridge0: port 3(batadv0) entered blocking state [ 496.914383][T11986] bridge0: port 3(batadv0) entered forwarding state [ 496.927670][T11986] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 497.305394][ T30] audit: type=1400 audit(1746178594.299:843): avc: granted { setsecparam } for pid=11977 comm="syz.1.1814" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 497.320820][ T24] usb 5-1: USB disconnect, device number 58 [ 498.125728][ T8767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 498.142857][ T9846] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 498.152202][ T9846] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 498.302451][T11994] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1817'. [ 500.017721][ T9846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 500.068571][T12012] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1821'. [ 500.585920][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 501.369317][ T5171] kworker/1:3 (5171) used greatest stack depth: 20824 bytes left [ 502.363409][T12034] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1828'. [ 502.622588][ T5867] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 502.982495][T12046] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 503.061205][ T30] audit: type=1400 audit(1746178600.301:844): avc: granted { setsecparam } for pid=12038 comm="syz.1.1829" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 503.390651][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 504.342158][ T5867] usb 3-1: Using ep0 maxpacket: 16 [ 504.580688][ T5867] usb 3-1: New USB device found, idVendor=17ef, idProduct=721e, bcdDevice=de.06 [ 504.593670][ T5867] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 504.602407][ T5867] usb 3-1: Product: syz [ 504.623079][ T5867] usb 3-1: Manufacturer: syz [ 504.627903][ T5867] usb 3-1: SerialNumber: syz [ 504.659033][ T5867] r8152-cfgselector 3-1: Unknown version 0x0000 [ 504.682933][ T5867] r8152-cfgselector 3-1: config 0 descriptor?? [ 504.825322][T12065] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1836'. [ 505.387266][ T5867] r8152-cfgselector 3-1: USB disconnect, device number 56 [ 505.939666][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 506.507518][T12080] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 506.721377][ T30] audit: type=1400 audit(1746178603.922:845): avc: granted { setsecparam } for pid=12073 comm="syz.4.1837" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 507.947033][T12094] input: syz1 as /devices/virtual/input/input39 [ 508.720898][ T5901] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 508.902093][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 508.940987][ T5901] usb 3-1: device descriptor read/64, error -71 [ 509.660937][ T5901] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 509.811858][ T5901] usb 3-1: device descriptor read/64, error -71 [ 511.021337][ T5901] usb usb3-port1: attempt power cycle [ 511.054644][T12126] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1852'. [ 513.139890][ T4257] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 513.320109][ T82] usb 1-1: new high-speed USB device number 65 using dummy_hcd [ 513.979998][ T82] usb 1-1: Using ep0 maxpacket: 16 [ 514.046571][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 514.074164][ T82] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 514.082607][ T82] usb 1-1: config 0 has no interface number 0 [ 514.089203][ T82] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 514.103801][ T82] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 514.946235][ T82] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 514.984860][ T82] usb 1-1: Product: syz [ 514.998850][ T82] usb 1-1: Manufacturer: syz [ 515.016864][ T82] usb 1-1: SerialNumber: syz [ 515.066057][ T82] usb 1-1: config 0 descriptor?? [ 515.144541][ T82] usb 1-1: can't set config #0, error -71 [ 515.164874][ T82] usb 1-1: USB disconnect, device number 65 [ 515.858838][ T30] audit: type=1400 audit(1746178613.074:846): avc: granted { setsecparam } for pid=12164 comm="syz.1.1863" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 516.566141][T12180] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1866'. [ 520.280419][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 520.291616][ T9444] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 521.839240][ T30] audit: type=1400 audit(1746178619.255:847): avc: granted { setsecparam } for pid=12204 comm="syz.3.1876" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 522.269451][ T5901] usb 5-1: new high-speed USB device number 59 using dummy_hcd [ 523.000785][ T5901] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 523.882697][ T5901] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 523.918344][ T5901] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 523.973176][ T5901] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 524.011635][T12229] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1881'. [ 524.036693][ T5901] usb 5-1: Product: syz [ 524.066355][ T5901] usb 5-1: Manufacturer: syz [ 524.093760][ T5901] usb 5-1: SerialNumber: syz [ 524.170336][T12212] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 524.530994][ T5901] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 59 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 525.866838][ T7673] usb 5-1: USB disconnect, device number 59 [ 525.878062][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 525.929742][ T7673] usblp0: removed [ 526.189828][ T9846] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 527.149453][T12262] hfsplus: unable to find HFS+ superblock [ 527.816862][ T30] audit: type=1400 audit(1746178625.245:848): avc: denied { bind } for pid=12265 comm="syz.1.1894" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 528.033567][T12274] input: syz1 as /devices/virtual/input/input41 [ 528.520879][ T5901] usb 5-1: new high-speed USB device number 60 using dummy_hcd [ 528.546169][T12277] fuse: Unknown parameter 'fd0x0000000000000003' [ 528.599661][T12280] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1899'. [ 528.668673][ T5901] usb 5-1: device descriptor read/64, error -71 [ 529.468797][ T5901] usb 5-1: new high-speed USB device number 61 using dummy_hcd [ 529.818650][ T5901] usb 5-1: device descriptor read/64, error -71 [ 529.928812][ T5901] usb usb5-port1: attempt power cycle [ 530.704361][T12305] hfsplus: unable to find HFS+ superblock [ 530.958729][ T5901] usb 5-1: new high-speed USB device number 62 using dummy_hcd [ 531.028805][ T24] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 531.250506][ T24] usb 2-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 16 [ 531.277258][ T24] usb 2-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 531.302145][ T6004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 531.361376][ T5901] usb 5-1: device not accepting address 62, error -71 [ 531.376001][ T24] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.40 [ 531.437592][ T24] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 531.549835][ T24] usb 2-1: Product: syz [ 531.564354][ T24] usb 2-1: Manufacturer: syz [ 531.578989][ T24] usb 2-1: SerialNumber: syz [ 531.590749][T12300] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 531.957988][ T4257] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 532.458780][ T24] usblp 2-1:1.0: usblp0: USB Unidirectional printer dev 67 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 532.796995][ C0] usblp0: nonzero write bulk status received: -71 [ 532.805006][ T5899] usb 2-1: USB disconnect, device number 67 [ 533.336260][ T5899] usblp0: removed [ 536.163108][T12356] hfsplus: unable to find HFS+ superblock [ 536.444663][T12359] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1922'. [ 536.877346][T12368] SELinux: security_context_str_to_sid (system_u) failed with errno=-22 [ 537.018508][ T30] audit: type=1400 audit(1746178634.305:849): avc: granted { setsecparam } for pid=12360 comm="syz.1.1923" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security [ 537.148148][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 537.705104][ T80] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 538.258382][ T5899] usb 1-1: new high-speed USB device number 66 using dummy_hcd [ 538.385073][T12386] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1931'. [ 538.428280][ T5899] usb 1-1: Using ep0 maxpacket: 16 [ 538.441596][ T5899] usb 1-1: config 0 has an invalid interface number: 68 but max is 0 [ 538.461831][ T5899] usb 1-1: config 0 has no interface number 0 [ 538.480575][ T5899] usb 1-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 538.519550][ T5899] usb 1-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 538.538262][ T5899] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 538.557461][ T5899] usb 1-1: Product: syz [ 538.567311][ T5899] usb 1-1: Manufacturer: syz [ 538.572441][ T5899] usb 1-1: SerialNumber: syz [ 538.601033][ T5899] usb 1-1: config 0 descriptor?? [ 538.638272][ T24] usb 4-1: new high-speed USB device number 58 using dummy_hcd [ 538.673569][ T5899] usb 1-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 539.420812][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 539.438162][ T24] usb 4-1: config 0 has an invalid interface number: 68 but max is 0 [ 539.555651][T12383] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 539.587614][ T24] usb 4-1: config 0 has no interface number 0 [ 539.597110][ T24] usb 4-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 539.619369][T12383] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 539.654121][ T5894] usb 1-1: USB disconnect, device number 66 [ 539.660318][ T24] usb 4-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 539.660565][ T36] usb 1-1: Failed to submit usb control message: -71 [ 539.700910][ T36] usb 1-1: unable to send the bmi data to the device: -71 [ 539.708673][ T36] usb 1-1: unable to get target info from device [ 539.716710][ T36] usb 1-1: could not get target info (-71) [ 539.720484][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 539.723481][ T36] usb 1-1: could not probe fw (-71) [ 539.752842][ T24] usb 4-1: Product: syz [ 539.948276][ T24] usb 4-1: Manufacturer: syz [ 539.969880][ T24] usb 4-1: SerialNumber: syz [ 540.027906][ T24] usb 4-1: config 0 descriptor?? [ 540.103830][ T24] usb 4-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 540.104234][T12416] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1938'. [ 541.149626][ T24] usb 4-1: USB disconnect, device number 58 [ 541.269291][ T8767] usb 4-1: Failed to submit usb control message: -71 [ 541.279985][ T8767] usb 4-1: unable to send the bmi data to the device: -71 [ 541.469695][ T8767] usb 4-1: unable to get target info from device [ 541.490278][ T8767] usb 4-1: could not get target info (-71) [ 541.503024][ T8767] usb 4-1: could not probe fw (-71) [ 542.868871][ T6004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.552944][ T80] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 543.635674][T12451] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1949'. [ 546.598818][T12482] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1959'. [ 548.036069][T12497] hfsplus: unable to find HFS+ superblock [ 548.636751][ T12] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 549.220247][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 551.740354][T12524] input: syz1 as /devices/virtual/input/input42 [ 552.196211][ T5894] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 552.941320][ T5894] usb 2-1: device descriptor read/64, error -71 [ 553.208005][ T5894] usb 2-1: new high-speed USB device number 69 using dummy_hcd [ 553.908003][ T5894] usb 2-1: device descriptor read/64, error -71 [ 553.908005][ T7673] usb 5-1: new high-speed USB device number 64 using dummy_hcd [ 554.098160][ T7673] usb 5-1: Using ep0 maxpacket: 16 [ 554.128101][ T5894] usb usb2-port1: attempt power cycle [ 554.221853][ T7673] usb 5-1: config 0 has an invalid interface number: 68 but max is 0 [ 554.236206][ T7673] usb 5-1: config 0 has no interface number 0 [ 554.245938][ T7673] usb 5-1: config 0 interface 68 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 554.271207][ T7673] usb 5-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=dc.c4 [ 554.947994][ T5894] usb 2-1: new high-speed USB device number 70 using dummy_hcd [ 554.976817][ T7673] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 554.978350][ T8767] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 555.043886][ T7673] usb 5-1: Product: syz [ 555.157805][ T7673] usb 5-1: Manufacturer: syz [ 555.193130][ T7673] usb 5-1: SerialNumber: syz [ 555.226683][ T30] audit: type=1400 audit(1746178652.656:850): avc: denied { accept } for pid=12561 comm="syz.1.1986" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 555.482371][ T5894] usb 2-1: device not accepting address 70, error -71 [ 555.500905][ T7673] usb 5-1: config 0 descriptor?? [ 555.941675][ T7673] usb 5-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 555.975317][T12579] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1988'. [ 556.130604][T12583] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 556.152250][T12583] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 557.061485][ T8767] usb 5-1: Failed to submit usb control message: -110 [ 557.107961][ T8767] usb 5-1: unable to send the bmi data to the device: -110 [ 557.119714][ T8767] usb 5-1: unable to get target info from device [ 557.156019][ T8767] usb 5-1: could not get target info (-110) [ 557.164158][ T8767] usb 5-1: could not probe fw (-110) [ 558.131908][ T5894] usb 5-1: USB disconnect, device number 64 [ 559.724943][ T30] audit: type=1400 audit(1746178657.156:851): avc: denied { bind } for pid=12615 comm="syz.0.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 559.746778][T12620] syz.0.1999 uses old SIOCAX25GETINFO [ 559.763892][T12620] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1999'. [ 559.818988][ T30] audit: type=1400 audit(1746178657.176:852): avc: denied { ioctl } for pid=12615 comm="syz.0.1999" path="socket:[36577]" dev="sockfs" ino=36577 ioctlcmd=0x89e9 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ax25_socket permissive=1 [ 560.308913][ T5894] usb 4-1: new high-speed USB device number 59 using dummy_hcd [ 560.316778][T12627] SELinux: security_context_str_to_sid (Eá…) failed with errno=-22 [ 560.474353][T12625] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1999'. [ 560.502869][T12625] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 560.525399][ T30] audit: type=1400 audit(1746178657.956:853): avc: denied { getopt } for pid=12615 comm="syz.0.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 560.546632][ T5894] usb 4-1: Using ep0 maxpacket: 32 [ 560.587332][ T30] audit: type=1400 audit(1746178658.016:854): avc: denied { write } for pid=12615 comm="syz.0.1999" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 560.631300][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 560.680426][T12636] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(11) [ 560.687687][T12636] vhci_hcd vhci_hcd.0: devid(0) speed(3) speed_str(high-speed) [ 560.704392][ T5894] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 560.724433][ T5894] usb 4-1: New USB device found, idVendor=04fc, idProduct=05d8, bcdDevice= 0.00 [ 560.741164][T12636] vhci_hcd vhci_hcd.0: Device attached [ 560.751922][ T5894] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 560.779950][ T5894] usb 4-1: config 0 descriptor?? [ 560.869427][T12638] vhci_hcd: connection closed [ 560.874045][ T1151] vhci_hcd: stop threads [ 560.894018][ T1151] vhci_hcd: release socket [ 560.900027][ T1151] vhci_hcd: disconnect device [ 561.423544][ T952] vhci_hcd: vhci_device speed not set [ 561.828592][ T5894] sunplus 0003:04FC:05D8.0015: hidraw0: USB HID v0.00 Device [HID 04fc:05d8] on usb-dummy_hcd.3-1/input0 [ 562.024560][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 562.729012][T12668] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2009'. [ 563.633061][ C1] hrtimer: interrupt took 12347438 ns [ 563.680520][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.748624][ C1] vkms_vblank_simulate: vblank timer overrun [ 563.949732][ T24] usb 4-1: USB disconnect, device number 59 [ 563.974613][ C1] vkms_vblank_simulate: vblank timer overrun [ 564.379139][ C1] vkms_vblank_simulate: vblank timer overrun [ 565.097937][ C1] vkms_vblank_simulate: vblank timer overrun [ 566.397434][ T6004] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 566.471573][ C1] vkms_vblank_simulate: vblank timer overrun [ 568.787155][ C1] vkms_vblank_simulate: vblank timer overrun [ 572.739567][ C1] vkms_vblank_simulate: vblank timer overrun [ 579.486421][ T82] usb 5-1: new high-speed USB device number 65 using dummy_hcd [ 607.746359][ T0] sched: DL replenish lagged too much [ 613.557532][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 613.576404][ T36] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 699.448264][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 804.447687][ C0] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 804.454660][ C0] rcu: 1-...!: (2 ticks this GP) idle=3c04/1/0x4000000000000000 softirq=56062/56062 fqs=0 [ 804.465404][ C0] rcu: (detected by 0, t=10502 jiffies, g=44881, q=1471 ncpus=2) [ 804.473208][ C0] Sending NMI from CPU 0 to CPUs 1: [ 804.473231][ C1] NMI backtrace for cpu 1 [ 804.473244][ C1] CPU: 1 UID: 0 PID: 1151 Comm: kworker/u8:6 Not tainted 6.15.0-rc4-syzkaller-00147-gebd297a2affa #0 PREEMPT(full) [ 804.473260][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 804.473270][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 804.473291][ C1] RIP: 0010:lock_acquire+0x127/0x350 [ 804.473311][ C1] Code: 0d 32 19 ed 0e 85 c9 0f 84 b1 00 00 00 65 8b 05 f7 0a 0c 12 85 c0 0f 85 a2 00 00 00 65 48 8b 05 77 cd 0b 12 8b 90 ec 0a 00 00 <85> d2 0f 85 8c 00 00 00 9c 8f 04 24 fa 48 c7 c7 fb 16 cd 8d e8 00 [ 804.473323][ C1] RSP: 0018:ffffc90000a08db8 EFLAGS: 00000046 [ 804.473333][ C1] RAX: ffff8880279d8000 RBX: ffff8880b8527858 RCX: 0000000000000001 [ 804.473341][ C1] RDX: 0000000000000000 RSI: ffffffff8b6f38b6 RDI: ffffed10170a4f0b [ 804.473349][ C1] RBP: 0000000000000000 R08: 0000000000000001 R09: 0000000000000000 [ 804.473356][ C1] R10: 0000000000000001 R11: 0000000000000000 R12: 0000000000000001 [ 804.473363][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 804.473371][ C1] FS: 0000000000000000(0000) GS:ffff888124ae2000(0000) knlGS:0000000000000000 [ 804.473384][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 804.473392][ C1] CR2: 0000200000020000 CR3: 0000000013051000 CR4: 00000000003526f0 [ 804.473400][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 804.473408][ C1] DR3: 3a810b1eb6134bdc DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 804.473416][ C1] Call Trace: [ 804.473421][ C1] [ 804.473430][ C1] _raw_spin_lock_irq+0x36/0x50 [ 804.473444][ C1] ? __hrtimer_run_queues+0x2bc/0xad0 [ 804.473457][ C1] __hrtimer_run_queues+0x2bc/0xad0 [ 804.473472][ C1] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 804.473484][ C1] ? read_tsc+0x9/0x20 [ 804.473502][ C1] hrtimer_interrupt+0x397/0x8e0 [ 804.473520][ C1] __sysvec_apic_timer_interrupt+0x108/0x3f0 [ 804.473535][ C1] sysvec_apic_timer_interrupt+0x9f/0xc0 [ 804.473550][ C1] [ 804.473554][ C1] [ 804.473558][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 804.473572][ C1] RIP: 0010:lock_acquire+0x62/0x350 [ 804.473589][ C1] Code: ce 0b 12 83 f8 07 0f 87 bc 02 00 00 89 c0 48 0f a3 05 42 ea ec 0e 0f 82 74 02 00 00 8b 35 da 19 ed 0e 85 f6 0f 85 8d 00 00 00 <48> 8b 44 24 30 65 48 2b 05 19 ce 0b 12 0f 85 c7 02 00 00 48 83 c4 [ 804.473600][ C1] RSP: 0018:ffffc90003cd6ce8 EFLAGS: 00000206 [ 804.473610][ C1] RAX: 0000000000000046 RBX: ffffffff8e3bf5c0 RCX: 000000006a8cc5f0 [ 804.473622][ C1] RDX: 0000000000000000 RSI: ffffffff8dbbb25f RDI: ffffffff8bf47e20 [ 804.473631][ C1] RBP: 0000000000000002 R08: 1c4cc753edc2cd36 R09: 0000000000000000 [ 804.473638][ C1] R10: 0000000000000004 R11: 0000000000000000 R12: 0000000000000000 [ 804.473645][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000000 [ 804.473658][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 804.473672][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 804.473688][ C1] unwind_next_frame+0xd1/0x20a0 [ 804.473701][ C1] ? unwind_next_frame+0xbd/0x20a0 [ 804.473714][ C1] ? process_one_work+0x9cc/0x1b70 [ 804.473728][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 804.473743][ C1] arch_stack_walk+0x94/0x100 [ 804.473760][ C1] ? process_one_work+0x9cc/0x1b70 [ 804.473773][ C1] stack_trace_save+0x8e/0xc0 [ 804.473787][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 804.473803][ C1] ? __lock_acquire+0xaa4/0x1ba0 [ 804.473820][ C1] kasan_save_stack+0x33/0x60 [ 804.473838][ C1] ? kasan_save_stack+0x33/0x60 [ 804.473854][ C1] ? kasan_record_aux_stack+0xb8/0xd0 [ 804.473869][ C1] ? kvfree_call_rcu+0x76/0x470 [ 804.473885][ C1] ? cfg80211_update_known_bss+0x39f/0x11a0 [ 804.473899][ C1] ? __cfg80211_bss_update+0x1b7/0x23c0 [ 804.473913][ C1] ? cfg80211_inform_single_bss_data+0x7ba/0x1df0 [ 804.473928][ C1] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 804.473943][ C1] ? cfg80211_inform_bss_frame_data+0x26e/0x7a0 [ 804.473958][ C1] ? ieee80211_bss_info_update+0x310/0xab0 [ 804.473970][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 804.473983][ C1] ? ieee80211_iface_work+0xbf4/0x1020 [ 804.473996][ C1] ? cfg80211_wiphy_work+0x3dc/0x550 [ 804.474012][ C1] ? process_one_work+0x9cc/0x1b70 [ 804.474035][ C1] kasan_record_aux_stack+0xb8/0xd0 [ 804.474050][ C1] kvfree_call_rcu+0x76/0x470 [ 804.474068][ C1] cfg80211_update_known_bss+0x39f/0x11a0 [ 804.474083][ C1] __cfg80211_bss_update+0x1b7/0x23c0 [ 804.474098][ C1] ? do_raw_spin_lock+0x12c/0x2b0 [ 804.474110][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 804.474122][ C1] ? __kmalloc_noprof+0x242/0x510 [ 804.474142][ C1] cfg80211_inform_single_bss_data+0x7ba/0x1df0 [ 804.474158][ C1] ? unwind_next_frame+0x3f4/0x20a0 [ 804.474173][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 804.474195][ C1] ? ieee802_11_parse_elems_full+0x1d7/0x3780 [ 804.474210][ C1] ? stack_trace_save+0x8e/0xc0 [ 804.474223][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 804.474237][ C1] ? stack_depot_save_flags+0x28/0xa50 [ 804.474255][ C1] ? cfg80211_inform_bss_data+0x224/0x3bd0 [ 804.474270][ C1] cfg80211_inform_bss_data+0x224/0x3bd0 [ 804.474286][ C1] ? __kmalloc_noprof+0x223/0x510 [ 804.474303][ C1] ? ieee802_11_parse_elems_full+0x1d7/0x3780 [ 804.474315][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xc69/0x2fd0 [ 804.474327][ C1] ? ieee80211_iface_work+0xbf4/0x1020 [ 804.474339][ C1] ? process_one_work+0x9cc/0x1b70 [ 804.474350][ C1] ? ret_from_fork+0x45/0x80 [ 804.474362][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 804.474380][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 804.474398][ C1] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 804.474417][ C1] ? _ieee802_11_parse_elems_full+0x626/0x44e0 [ 804.474436][ C1] ? __lock_acquire+0x5ca/0x1ba0 [ 804.474454][ C1] ? ieee802_11_parse_elems_full+0x145/0x3780 [ 804.474470][ C1] cfg80211_inform_bss_frame_data+0x26e/0x7a0 [ 804.474488][ C1] ieee80211_bss_info_update+0x310/0xab0 [ 804.474501][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 804.474516][ C1] ? find_held_lock+0x2b/0x80 [ 804.474529][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x18cb/0x2fd0 [ 804.474543][ C1] ieee80211_ibss_rx_queued_mgmt+0x1905/0x2fd0 [ 804.474560][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 804.474579][ C1] ? kcov_remote_start+0x3c9/0x6d0 [ 804.474592][ C1] ieee80211_iface_work+0xbf4/0x1020 [ 804.474605][ C1] ? rcu_is_watching+0x12/0xc0 [ 804.474623][ C1] cfg80211_wiphy_work+0x3dc/0x550 [ 804.474641][ C1] process_one_work+0x9cc/0x1b70 [ 804.474656][ C1] ? __pfx_cfg80211_wiphy_work+0x10/0x10 [ 804.474673][ C1] ? __pfx_process_one_work+0x10/0x10 [ 804.474688][ C1] ? assign_work+0x1a0/0x250 [ 804.474700][ C1] worker_thread+0x6c8/0xf10 [ 804.474715][ C1] ? __pfx_worker_thread+0x10/0x10 [ 804.474728][ C1] kthread+0x3c2/0x780 [ 804.474739][ C1] ? __pfx_kthread+0x10/0x10 [ 804.474749][ C1] ? __pfx_kthread+0x10/0x10 [ 804.474758][ C1] ? __pfx_kthread+0x10/0x10 [ 804.474768][ C1] ? __pfx_kthread+0x10/0x10 [ 804.474778][ C1] ? rcu_is_watching+0x12/0xc0 [ 804.474792][ C1] ? __pfx_kthread+0x10/0x10 [ 804.474802][ C1] ret_from_fork+0x45/0x80 [ 804.474813][ C1] ? __pfx_kthread+0x10/0x10 [ 804.474823][ C1] ret_from_fork_asm+0x1a/0x30 [ 804.474844][ C1] [ 804.475226][ C0] rcu: rcu_preempt kthread timer wakeup didn't happen for 10501 jiffies! g44881 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 [ 805.193465][ C0] rcu: Possible timer handling issue on cpu=1 timer-softirq=43719 [ 805.201345][ C0] rcu: rcu_preempt kthread starved for 10502 jiffies! g44881 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x402 ->cpu=1 [ 805.212709][ C0] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 805.222684][ C0] rcu: RCU grace-period kthread stack dump: [ 805.228569][ C0] task:rcu_preempt state:I stack:27704 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 805.240487][ C0] Call Trace: [ 805.243762][ C0] [ 805.246694][ C0] __schedule+0x116f/0x5de0 [ 805.251204][ C0] ? __lock_acquire+0x5ca/0x1ba0 [ 805.256155][ C0] ? __pfx___schedule+0x10/0x10 [ 805.261007][ C0] ? find_held_lock+0x2b/0x80 [ 805.265683][ C0] ? schedule+0x2d7/0x3a0 [ 805.270011][ C0] schedule+0xe7/0x3a0 [ 805.274078][ C0] schedule_timeout+0x123/0x290 [ 805.278925][ C0] ? __pfx_schedule_timeout+0x10/0x10 [ 805.284290][ C0] ? __pfx_process_timeout+0x10/0x10 [ 805.289579][ C0] ? _raw_spin_unlock_irqrestore+0x3b/0x80 [ 805.295383][ C0] ? prepare_to_swait_event+0xf5/0x480 [ 805.300846][ C0] rcu_gp_fqs_loop+0x1ea/0xb00 [ 805.305614][ C0] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 805.310901][ C0] ? rcu_gp_init+0xc76/0x15a0 [ 805.315583][ C0] ? rcu_gp_cleanup+0x7c1/0xd90 [ 805.320438][ C0] ? _raw_spin_unlock_irqrestore+0x52/0x80 [ 805.326244][ C0] rcu_gp_kthread+0x270/0x380 [ 805.330923][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 805.336120][ C0] ? rcu_is_watching+0x12/0xc0 [ 805.340881][ C0] ? lockdep_hardirqs_on+0x7c/0x110 [ 805.346078][ C0] ? __kthread_parkme+0x19e/0x250 [ 805.351104][ C0] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 805.356303][ C0] kthread+0x3c2/0x780 [ 805.360370][ C0] ? __pfx_kthread+0x10/0x10 [ 805.364950][ C0] ? __pfx_kthread+0x10/0x10 [ 805.369532][ C0] ? __pfx_kthread+0x10/0x10 [ 805.374119][ C0] ? __pfx_kthread+0x10/0x10 [ 805.378704][ C0] ? rcu_is_watching+0x12/0xc0 [ 805.383467][ C0] ? __pfx_kthread+0x10/0x10 [ 805.388055][ C0] ret_from_fork+0x45/0x80 [ 805.392467][ C0] ? __pfx_kthread+0x10/0x10 [ 805.397052][ C0] ret_from_fork_asm+0x1a/0x30 [ 805.401831][ C0]