last executing test programs: 13m38.913238444s ago: executing program 4 (id=597): socket$inet_tcp(0x2, 0x1, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x50) pipe2$9p(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x0) r2 = socket(0x10, 0x80002, 0x0) write$P9_RLERRORu(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="1c00000007ffff", @ANYRES16=r2, @ANYRESDEC], 0x52) mount$9p_fd(0x0, &(0x7f0000000040)='./file0\x00', &(0x7f0000000100), 0x0, &(0x7f0000000080)={'trans=fd,', {'rfdno', 0x3d, r0}, 0x2c, {'wfdno', 0x3d, r1}, 0x2c, {[{@loose}]}}) 13m38.808591259s ago: executing program 4 (id=600): write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000040)={0x50, 0x0, 0x0, {0x7, 0x1f}}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$AUTOFS_DEV_IOCTL_SETPIPEFD(0xffffffffffffffff, 0xc0189378, &(0x7f0000001700)={{0x1, 0x1, 0x18, r0, {r0}}, './file0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x3) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e22, 0xa, @private0, 0x3}}, 0x0, 0x0, 0xf, 0x0, "af8f6a5629dee17c1ea8fcc5528f98f32d047e15a236612c9137ec68409d548796ba7ded9034a2de9571b82dd0f9c7a4769b12286dd9f4e7e9d850eb1db2dc98cef6339ce0b9d79977348a2f36aa04aa"}, 0xd8) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000000), 0x0) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000008000000000"], 0x48) r4 = syz_open_dev$tty1(0xc, 0x4, 0x1) ioctl$GIO_CMAP(r4, 0x4bfa, &(0x7f00000000c0)) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r3, 0x0) r5 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r5, 0x3) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r7 = accept4(r5, 0x0, 0x0, 0x0) sendmmsg(r7, &(0x7f0000007040)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1000000000000000ff00000002010000000000000000020001000000e3ffffffcb89105f0104000014ae44350c166c1d4ad4d1133f3b79ff0041a8b465937b8174b38fe10d131c5557d497225a9e68cb4692572398559f86702b326eed3a426d8bda2a16b4dd97673047f7322edf9b424be5ff951cbfedc43de1ec6a03aec2bc53754aabdd8852fa8f078b356197ef521c"], 0x20}}], 0x1, 0x0) 13m37.909176938s ago: executing program 4 (id=601): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000400)=""/239, 0xef}, {&(0x7f0000001740)=""/237, 0xed}, {&(0x7f0000000740)=""/4096, 0x1000}], 0x3}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x4084880) r2 = dup(r0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x2, {0x0, 0x1}, 0xff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bf"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x80) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x1, 0x3d3}, &(0x7f0000000100), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) fdatasync(0xffffffffffffffff) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYBLOB="000000000000000000000000000000000000000045af425b090023c421ae64f14f19c62140a0a49ff6594f15d95705db449f7b16465b5a88244ca1cd7eb04ed55e1c8efb3c39882bfa741e2a42afa6d1f5fd9ec74a043afa01e558605754ddbebafab971f2725cb165fae562f09f537aa88679682d7a1d329f69a324f4a808be3f3128351bbb9b29f90c406fb00103", @ANYRES32=0x0, @ANYBLOB="9eb3b747c72c4ffc9219e4ad80fe8ef428d8bad106ded4c3a7d703cf71d93a69f999e755e96953f086dfb704090de478f45ef45555f68e4523612a1f91be04657ae5710afead9a0622d0c6b4996f82abb016e5fb2552fe4bc3dac7261aaf7e9fad196664733dbc00c952a04c6d7a5fe1ded2dbdd", @ANYBLOB="0000003f9300"/21], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 13m33.476016076s ago: executing program 4 (id=615): mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x0) mount$tmpfs(0x0, &(0x7f0000000240)='./file0\x00', &(0x7f0000000280), 0x0, 0x0) mount$bind(0x0, &(0x7f00000005c0)='./file0\x00', 0x0, 0x100000, 0x0) mount$bind(&(0x7f00000002c0)='.\x00', &(0x7f0000000200)='./file0/../file0\x00', 0x0, 0x101091, 0x0) mount$bind(&(0x7f00000003c0)='./file0\x00', &(0x7f0000000440)='./file0/file0\x00', 0x0, 0x12f451, 0x0) mount$bind(&(0x7f0000000400)='.\x00', &(0x7f0000000080)='./file0/file0\x00', 0x0, 0x80700a, 0x0) r0 = add_key$fscrypt_v1(&(0x7f0000001000), &(0x7f0000001040)={'fscrypt:', @desc4}, &(0x7f0000001080)={0x0, "ddbccf094c5457df7a3f7457a4e81d59f6bffca5bf7c026c91255969954a3cec19ae878c0ca3fce72e29df4e4dbd001eb127ffbed6cc47890c19c3edc50daa56"}, 0x48, 0xfffffffffffffffe) r1 = request_key(&(0x7f0000000000)='user\x00', &(0x7f0000000040)={'syz', 0x0}, &(0x7f0000000080)='\x00', r0) r2 = request_key(&(0x7f0000000180)='rxrpc_s\x00', &(0x7f00000001c0)={'syz', 0x0}, &(0x7f0000000200)='syz', r0) keyctl$KEYCTL_MOVE(0x1e, r2, r1, r1, 0x1) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000480), &(0x7f00000004c0)=0xc) r3 = socket(0xa, 0x2, 0x0) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xa) setresuid(0x0, r4, 0x0) keyctl$setperm(0x5, r0, 0x13220c28) fchown(0xffffffffffffffff, r4, r5) lstat(&(0x7f0000000140)='./file0\x00', &(0x7f0000000180)) statx(0xffffffffffffffff, 0x0, 0x0, 0x77f, &(0x7f0000000480)) syz_usb_connect(0x3, 0x36, &(0x7f00000000c0)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f0000100109050b362f167dc13b91488654db734565687ba29a55a5cf0de6ef6178765434a73b7e69376c86cab0333bc140d7ceaf01671d44a36dfb570ec21d91df40d35750c51ae159e404a8391d860b7a6692294dded0d5dbeb02d6e555f76512fdb42771e9858548ebc71dd02dc932fa5f16428e3a4ceedad97aa2d13dc5e829e891cd64132e0fed1cc1e12b978a77c4ce35928eb1c06e0c776e37248f9eccfacdc0d8e2ddd821cd68bceb3cc9e65be89a81f74b451a13fd613dcf71c04a07527fafe86d1340827fc3ab3cec786d0a733da9bce4131288c5d3f11f1e5bc7ac7aa83ce043553a"], 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) prlimit64(0x0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r7 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x1) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x200400d0) read$msr(r7, &(0x7f0000019680)=""/102392, 0x18ff8) open$dir(0x0, 0x2, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x50) 13m31.775754106s ago: executing program 4 (id=623): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f0000000000)={r1, 0x1, 0x6, @local}, 0x10) (async) getsockopt$inet_int(r3, 0x0, 0x22, 0x0, &(0x7f00000001c0)) r5 = syz_io_uring_setup(0xac9, &(0x7f0000000480)={0x0, 0xee6, 0x100, 0x0, 0x26}, &(0x7f0000000300)=0x0, &(0x7f00000001c0)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0x3, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f0000000200)=@IORING_OP_OPENAT2={0x1c, 0x41, 0x0, 0xffffffffffffffff, &(0x7f0000000580)={0x8402, 0x0, 0x3d}, 0x0, 0x18, 0x0, 0x23456}) io_uring_enter(r5, 0x47ba, 0x0, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@delchain={0x24, 0x65, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0xffe0, 0xfff3}, {0xe}, {0x1, 0x9}}}, 0x24}}, 0x20044000) 13m31.458367777s ago: executing program 4 (id=624): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="87"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000e40)=@keyring={'key_or_keyring:', r3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 13m31.352043327s ago: executing program 32 (id=624): syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12014000f273a440cd061501c3d90102030109021b0001000000000904000c019d0178000905", @ANYBLOB="87"], 0x0) r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) fcntl$dupfd(0xffffffffffffffff, 0x0, 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) getpid() mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, r2, 0x0) connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = add_key$keyring(0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd) r4 = add_key$keyring(&(0x7f0000000180), 0x0, 0x0, 0x0, 0x0) add_key$keyring(0x0, 0x0, 0x0, 0x0, r4) socket$nl_netfilter(0x10, 0x3, 0xc) keyctl$KEYCTL_RESTRICT_KEYRING(0x1d, r4, &(0x7f0000000080)='asymmetric\x00', &(0x7f0000000e40)=@keyring={'key_or_keyring:', r3}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x58, r5, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x44, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_TIMEOUT={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_SCHED_NAME={0x9, 0x6, 'none\x00'}, @IPVS_SVC_ATTR_PE_NAME={0x8}, @IPVS_SVC_ATTR_FWMARK={0x8}]}]}, 0x58}}, 0x0) r6 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') writev(r6, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) madvise(&(0x7f0000000000/0x600000)=nil, 0x600003, 0x15) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x8031, 0xffffffffffffffff, 0x0) 20.011907692s ago: executing program 5 (id=3028): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x100}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) ioctl$SNDRV_TIMER_IOCTL_GINFO(0xffffffffffffffff, 0xc0f85403, &(0x7f0000000040)={{0x3}, 0x0, 0x0, 'id1\x00', 'timer1\x00', 0x0, 0x0, 0x1, 0xffffffffffffd0c4}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=0x0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f000000060027000000000008000a00a8"], 0x6c}}, 0x0) 18.857094155s ago: executing program 5 (id=3031): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) 14.985242469s ago: executing program 5 (id=3039): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r0, &(0x7f0000000480), 0x400034f, 0x2, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r3 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r3, 0x400448c8, &(0x7f0000000340)={r1, r2, 0x8, 0x0, 0x0, 0xa, 0x81, 0x46d, 0x8, 0x3, 0x0, 0xffffffff, 'syz0\x00'}) shutdown(r2, 0x1) 10.234503839s ago: executing program 0 (id=3055): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) r3 = syz_open_dev$vim2m(&(0x7f0000000480), 0x40000008000, 0x2) ioctl$SNDRV_PCM_IOCTL_FORWARD(0xffffffffffffffff, 0x40084149, 0x0) r4 = syz_io_uring_setup(0x231, 0x0, &(0x7f0000000000), 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r5 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r5, &(0x7f0000019680)=""/102392, 0x18ff8) syz_io_uring_setup(0x1a06, &(0x7f0000000340)={0x0, 0xf51b, 0xe61decb38a98842b, 0x3, 0xaa, 0x0, r4}, &(0x7f0000000180), &(0x7f0000000280)) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000009c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="00000000000000001c001a8018000580140006800800020000000000080001"], 0x3c}}, 0x0) r9 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt(r9, 0x800000010d, 0x2, &(0x7f0000000080)="922b22c0", 0x4) ioctl$vim2m_VIDIOC_REQBUFS(r3, 0xc0145608, &(0x7f0000000000)={0x3, 0x2, 0x2}) ioctl$vim2m_VIDIOC_ENUM_FMT(r3, 0xc0d05605, &(0x7f0000000440)={0x2, 0x0, 0x0, "5d4a03c0d6b1f7891dd5efb410ad15591ada81da3c2f10483741a6bd19dd2c23"}) r10 = socket(0x10, 0x3, 0x0) sendto$inet6(r10, &(0x7f0000000080)="7800000018002507b9409b14ffff00030204be04020b06050e021009430009003f00644c0a0000000d0085a168d0bf46d32345653600648d0a000b000a00000049935ade4a460c89b6ec0cff3959547f509058ba86c902000000004a2300040018000b000a0000000000e000e218d1ddf66ed538f2523250", 0x78, 0x0, 0x0, 0x0) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001640)={0x0, 0x0, &(0x7f0000001600)={&(0x7f0000001140)={0x40, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_FRAME={0x24, 0x33, @reassoc_resp={{{}, {}, @broadcast, @device_b}, 0x0, 0x0, @default, @val, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc016}, 0x0) r11 = socket$netlink(0x10, 0x3, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r11, 0x4008f510, &(0x7f0000000000)=0x9) 10.026334711s ago: executing program 2 (id=3058): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x40}}, &(0x7f0000000240)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000340)={r0, 0x0, 0x2c, 0x0, @val=@tcx={@void, @value=r0}}, 0x1c) 9.914598061s ago: executing program 2 (id=3059): prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) r0 = getpgrp(0xffffffffffffffff) prlimit64(r0, 0xe, &(0x7f0000000000)={0x8, 0x100008b}, 0x0) r1 = memfd_create(&(0x7f0000000b40)='\x9d#\x00\xe6Z\x00\xafq%\xa5\x83\xa6\xb5\x00\x83y\xf3\xb2\xe6b \x00\x00\x00\x00\x00\x00\x01\x00\x00\xf7\xffg\xf5\x12oP\xfe\xe6\xd2SLR\xa1\x00\x00\x17\x1f$^\xe1\x00\x00\x00\x00\x00\x00\a\xff;\xeb\xf1\xd0\xce\xe5\x19\x12\b\x01\xd9\xae>/\x05\x00\x00\x00\x15\x00\x00\x00\xa1\xa2\xe0g\x98\xbf*\xdcc\x12.\xb7\xbe`\'\xcb\xb6\xaf\xdc\xa0D\x93.\xf25\x957\xec\xfb\xe6|\\\xe4h\xfc\x14\x05\x00\x00\x00\x00\x00\x00\x00\x91\x98\x15\xec\xdb\xaa\t9\x11\xb4h$&0\xdd\x19\x86\x90\xbe\xd7\xdc\n\xcbC\x15\xfcp\x11\xdai\f{a?\xd0\xe1{\x84\xb5\x82q\x19\xacS\x88|\x99\xfd\x9eS\x80\xcb\x14G\xfa\xff\xff\xff\xff\xff\xff\xff\xcd\xf0%\x97!\xba\xe3J\xc2t\x96\xf8\xb1\xd2\x168\xbf`$\xbf\xca\xea\xa3\x83\x8e-k\x12\xdf\xb9q\xb6Pr\xd4\xb5X\\\xdbD\n\x03G\x00\x04\x00\x00\xbc\xac\x18\xba\xce\xb3%QF\x03\b\x9dh\xcb)\xf4f\x12[\xf9\r\t\xef{h\xb0\xc0:\x8f|\x8f\x06\xf8T\x826`M\x11\x1c\xb0*8\v\x1e\xcf\x03\xd3\xe8,?P\xac\x86\x13b\xa8D\x0f\x93\xab\x1c\x11\x00\xc5\x8d\x82\x9c\xd6B[\xc9\x00\xf5]\x81\xf3\xfd\x06M\xbe\xf9\xba\x9em\xe9\"\x03\x933P\x9b\xcc\x9b\f\xa7\x8f\x91O\xc9\xb9\x14M\x8b\xd0\xc0\xb8L\xbd\x1c4\xb59\x988\tgC\xbc\xe0\xc5\xf4\xe0E%\xd9\xd8w\x00k\x042Y\xd9\xc5\xe59\xa95\xd1m\xd8hCuZYi\x10D\xb9\xe6\xff\x04K%yH\xe5\xf4\x8b\x03Ca8\x1e\xe9\\#\xf8O\fw\xd9\xf5cF\xcc\x1a2ex\xb4\x0fi$\x97\x81.\x02\x04m\xfbT2\xd4\"\x1e\xf0\x16\x0f\x97\xe6j}J\xca\xb8)f\xd5\xfd>\x9bU\xb0\x03Zt0\xc0b\xad\xef@o\xc1\xd6\x17T\f\xc30\xe2\x89\xf6L\x1b1\x9c\t\xa7\x80\x1b:\xbb\x04\xd7\xd1\x06\xa0\xe9\xbah\xb6\xb2\xea/{Q\xca\x14\x13\x9ajWt\xc9\xecd\xe7\xf6\t\x9dJ\xa4^m\xf3\xb5Y\f\x8f\r\xd5)>A\xe9\xf59\'G[\xf0`\xf3\'\xe4\xb2\x1d\xaf\n\xc0\xc1\x1d}DY\x95&\xe7\xf4U\xff\xcd&\a\x9f\x1bg\xe5|~\xc1\xc5n\x12%ur\xa1\x9e`\xc2\x01\b,\x18\xaf\xccD\xdeag\xc6\xf3\xd6\x94\x9d\xae\x8bl\xee\x7fu\xe5bu\x84\x04\xb3@\xa1\xf7\xc6\x13\xf9I?^\xf3,\",aT\xfd\"\x01\x92\xb1\xbf\x8a\x15\x88\xfd\x8f\x88\x87\x82\x9c:L\xd2\xb8\xfa5\x066\x82\xf3_LUr\xfa\xd2\x99d \x97c9G\x99\xe3\xcc$\x96cu\x97\xe7\xc7a\tm\xe8F\xc7j\xf8\x98\x81\xe7\xf7\xab3F\xf4u\xdaav\xd21\v\x99HG\xdfx\x1cPl\t#\xc1\x8e\xddW', 0x6) fcntl$addseals(r1, 0x409, 0xc) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) syz_open_dev$loop(0x0, 0x6, 0x80) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = socket$inet(0xa, 0x801, 0x84) connect$inet(r5, &(0x7f0000004cc0)={0x2, 0x4e20, @loopback}, 0x10) r6 = syz_open_dev$media(&(0x7f00000012c0), 0x66, 0x180502) ioctl$MEDIA_IOC_G_TOPOLOGY(r6, 0xc0487c04, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x19, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000180)=[{}, {0x0, 0x80000000}, {}, {0x0, 0x80000000, 0x0, {0x0}}], 0x0, 0x0, 0x0}) ioctl$MEDIA_IOC_SETUP_LINK(r6, 0xc0347c03, &(0x7f00000009c0)={{0x80000000, r8, 0x4, [0xc, 0x2]}, {r7, 0x0, 0x3, [0xfffffff9, 0xffffff79]}, 0x2, [0x3]}) r9 = fsopen(&(0x7f00000000c0)='gadgetfs\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r9, 0x6, 0x0, 0x0, 0x0) io_uring_register$IORING_UNREGISTER_EVENTFD(0xffffffffffffffff, 0x5, 0x0, 0x0) r10 = openat$rtc(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$RTC_SET_TIME(r10, 0x4024700a, &(0x7f0000000240)={0x2a, 0x900, 0x0, 0x4, 0x2, 0x4f}) openat$iommufd(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) getresgid(&(0x7f0000000400), &(0x7f0000000440), &(0x7f0000000480)) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000100)={0x0, 0x1, 0x200, 0xf24}) 8.925956529s ago: executing program 0 (id=3061): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/239, 0xac}, {&(0x7f0000001740)=""/237}, {&(0x7f0000000740)=""/4096}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x4084880) r2 = dup(r0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x2, {0x0, 0x1}, 0xff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bf"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x80) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x1, 0x3d3}, &(0x7f0000000100), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) fdatasync(0xffffffffffffffff) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="9eb3b747c72c4ffc9219e4ad80fe8ef428d8bad106ded4c3a7d703cf71d93a69f999e755e96953f086dfb704090de478f45ef45555f68e4523612a1f91be04657ae5710afead9a0622d0c6b4996f82abb016e5fb2552fe4bc3dac7261aaf7e9fad196664733dbc00c952a04c6d7a5fe1ded2dbdd", @ANYBLOB="0000003f9300"/21], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 8.673573766s ago: executing program 1 (id=3062): r0 = socket$pppoe(0x18, 0x1, 0x0) accept4(r0, 0x0, 0x0, 0x80000) (fail_nth: 2) 8.143395055s ago: executing program 1 (id=3064): socket$packet(0x11, 0x3, 0x300) r0 = accept4$nfc_llcp(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000100)=0x60, 0x800) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'pimreg\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010", @ANYRES32=r1, @ANYBLOB="0000000000000000480012800e", @ANYRES32], 0x68}}, 0x0) io_setup(0x81, &(0x7f0000000180)) open(&(0x7f0000000780)='./bus\x00', 0x14507e, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200001b0aeb49d11f3f0004000000080000ab01000000800000", @ANYRES32=0x0, @ANYBLOB='\x00'/19, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/27], 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = accept$unix(0xffffffffffffffff, &(0x7f0000000500), &(0x7f0000000000)=0x6e) sendmmsg$unix(r3, 0x0, 0x0, 0x44000000) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, 0x0, 0x0) getsockopt$bt_hci(0xffffffffffffffff, 0x84, 0x81, 0x0, &(0x7f0000000040)) write$UHID_INPUT(0xffffffffffffffff, &(0x7f0000002080)={0xfc, {"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", 0x1000}}, 0x1006) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000400)={r2}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0xf, 0x10, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff", @ANYRES32=r2], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, @fallback=0x29, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={0x3c, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0xa}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}], @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = syz_io_uring_setup(0xd2, &(0x7f0000000480)={0x0, 0x82f5}, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r8, 0x4, &(0x7f0000000180)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r8, r9, &(0x7f0000000280)=@IORING_OP_TIMEOUT={0xb, 0x10, 0x0, 0x0, 0x7, &(0x7f0000002540)={0x77359400}}) r10 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r10, 0x6, 0xe, 0x0, 0x0) io_uring_enter(r7, 0x47ba, 0x0, 0x0, 0x0, 0x0) 6.576636155s ago: executing program 2 (id=3065): r0 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r0, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040)={0xffffffffffffffff}, 0x106}}, 0x20) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x8, 0x0) seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, 0x0) write$RDMA_USER_CM_CMD_RESOLVE_ADDR(r0, &(0x7f0000000280)={0x15, 0x110, 0xfa00, {r1, 0x74c, 0x0, 0x30, 0x0, @in6={0xa, 0x4e20, 0x8, @mcast1, 0x4a99}, @in={0x2, 0x4e23, @rand_addr=0x64010100}}}, 0x118) close(r0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, 0x0) r2 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r3 = ioctl$KVM_CREATE_VM(r2, 0xae01, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='hugetlb.2MB.usage_in_bytes\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000240), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x280000b, 0x28011, r4, 0x0) r5 = dup(r3) r6 = ioctl$KVM_CREATE_VCPU(r5, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r3, 0x4020ae46, &(0x7f0000000080)={0x0, 0x2, 0x0, 0x2000, &(0x7f0000000000/0x2000)=nil}) syz_kvm_setup_cpu$x86(0xffffffffffffffff, r6, &(0x7f0000000000/0x18000)=nil, &(0x7f0000000300)=[@textreal={0x8, 0x0}], 0x1, 0x0, 0x0, 0x0) ioctl$KVM_REGISTER_COALESCED_MMIO(r3, 0x4010ae67, &(0x7f00000001c0)={0x0, 0xd000}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r7, &(0x7f00000015c0)={0x0, 0x0, &(0x7f0000001580)={&(0x7f0000001680)={0x20, 0x1, 0x7, 0x201, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x9}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x80) ioctl$KVM_NMI(r6, 0xae9a) ioctl$KVM_RUN(r6, 0xae80, 0x0) 6.543390633s ago: executing program 3 (id=3066): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETCHAIN(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x20, 0x4, 0xa, 0x401, 0x0, 0x3400, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x24000000) 6.447440105s ago: executing program 5 (id=3067): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(r0, 0xffffffffffffff80, &(0x7f0000000240)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x2, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000300)='sched_switch\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00'}, 0x10) read$FUSE(0xffffffffffffffff, &(0x7f0000000a40)={0x2020}, 0x2020) r4 = socket(0x10, 0x400000000080803, 0x0) fcntl$dupfd(r4, 0x0, r4) ioctl$sock_SIOCETHTOOL(r4, 0x89f0, &(0x7f0000000040)={'bridge0\x00', &(0x7f0000000480)=@ethtool_ringparam={0x4, 0x0, 0x5, 0x0, 0x8fc3, 0x1, 0x20000, 0x0, 0xf}}) openat$6lowpan_enable(0xffffffffffffff9c, &(0x7f0000000000), 0x2, 0x0) syz_open_dev$dri(&(0x7f0000000600), 0x3, 0x30000) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={0x0, r5}, 0x18) r6 = getpid() process_vm_readv(r6, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x36}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640), 0x0, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r7, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) sendto$inet6(r7, 0x0, 0x0, 0x22004001, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r7, 0x6, 0xe, &(0x7f0000000340)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x39, 0x0, "b0fd7b07ff8a216915a8d3215a3225178096acf74c85ad01ba95fd9d0543750fb5a62a045888e8febca073f1f821abb8083f4d192383c47b3800abd4d841e2d4b56039653b95d0cd0a00a6ea35bdfaf6"}, 0xd8) sendto$inet6(r7, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090000006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a54049f0c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590a", 0x64, 0x0, 0x0, 0x0) 6.446655702s ago: executing program 3 (id=3068): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) mkdirat(0xffffffffffffffff, &(0x7f0000000200)='\x13\x13w\xc5\xfc5\xd4\x14T\xd5\xd4\x1d)\xad\x1a`)Y\x81F\xe6\xbe\x16nA\xad\r\xbd@T\x03<\x9f3\xbb\xda\x82$\xa2\xf3\xd7r\xe7cnH\xb3<\xbfp\x83r\xe8\xf1\xb9\x93>\xc5\x12wC\xbe\"\x06 \x9e\xf0-\xf9\xcb\xf2\xf6\xe8\x80\xd38/\x00', 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) io_pgetevents(0x0, 0xa74e, 0x0, 0x0, &(0x7f0000000100), 0x0) 6.366011494s ago: executing program 1 (id=3069): socket$nl_netfilter(0x10, 0x3, 0xc) socket(0xa, 0x3, 0x3a) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0xfffffffffffffeb7, &(0x7f0000000300)=0x400200bce) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000002fc0)=""/102400, 0x19000) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00'}) openat$sysfs(0xffffffffffffff9c, &(0x7f0000000400)='/sys/power/resume', 0x149a82, 0x0) timerfd_settime(0xffffffffffffffff, 0x0, &(0x7f0000000040)={{0x77359400}, {0x0, 0x989680}}, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, 0x0, 0x0) r2 = getpid() process_vm_readv(r2, &(0x7f0000008400)=[{&(0x7f0000000300)=""/54, 0x7ffff000}, {&(0x7f0000006180)=""/152, 0x98}], 0x2, &(0x7f0000008640)=[{&(0x7f0000008480)=""/95, 0x7ffff000}], 0x286, 0x0) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x401, 0x2) 6.267942579s ago: executing program 3 (id=3070): syz_usb_control_io(0xffffffffffffffff, 0x0, &(0x7f0000000f80)={0x84, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) r0 = syz_open_procfs(0x0, &(0x7f0000000240)='clear_refs\x00') readv(r0, &(0x7f0000000380)=[{&(0x7f0000001040)=""/4096, 0x1000}, {&(0x7f0000000000)=""/221, 0xdd}, {&(0x7f0000000140)=""/222, 0xde}, {&(0x7f0000000280)=""/231, 0xe7}], 0x4) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000200)=0x4) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r4, 0x1, 0x3c, 0x0, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000340)='./file1\x00', 0x0) openat$mixer(0xffffffffffffff9c, &(0x7f0000000300), 0x80400, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x1, 0x0, 0xffffffffffffffff, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x4, 0x0, @void, @value, @void, @value}, 0x48) sendmmsg$inet(r4, &(0x7f0000003240), 0x0, 0x4000800) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x64, 0x6, 0x690, 0xd0, 0xd0, 0x448, 0x300, 0x1b8, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x5c0, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE2={0x28, 'NFQUEUE\x00', 0x2, {0x0, 0x5}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00', {}, {}, 0x11, 0x0, 0x0, 0x44}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@broadcast}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'syzkaller0\x00'}, 0x0, 0x100, 0x148, 0x0, {}, [@common=@unspec=@connmark={{0x30}}, @common=@inet=@socket1={{0x28}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@private}}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0x138, 0x178, 0x0, {}, [@common=@dst={{0x48}}, @common=@dst={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv4=@dev}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x6f0) ioctl$BTRFS_IOC_DEV_INFO(0xffffffffffffffff, 0xd000941e, &(0x7f0000000340)={0x0, "b742b4d0d79441749fdc87c088e1a0ee"}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, 0x0, 0x0) writev(r0, &(0x7f0000000100)=[{&(0x7f00000004c0)='4', 0x1}], 0x9) 5.566533083s ago: executing program 2 (id=3071): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x400000bce) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000300)=0x3) r0 = syz_open_dev$I2C(&(0x7f0000000040), 0x0, 0x0) ioctl$I2C_PEC(r0, 0x708, 0x2) ioctl$I2C_SMBUS(r0, 0x720, &(0x7f00000000c0)={0x1, 0x0, 0x5, &(0x7f00000003c0)={0x16, "90f541a5e64f61909103f1fbbc2bd3c9f144d76e44c7b2986eb5e52829e7cb8393"}}) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) ioctl$SNDRV_SEQ_IOCTL_CREATE_QUEUE(0xffffffffffffffff, 0xc08c5332, 0x0) sched_setscheduler(0x0, 0x0, &(0x7f00000005c0)=0x40400007) getpid() r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x24, &(0x7f0000000080)=0xdfd, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioprio_set$pid(0x2, 0x0, 0x0) ioprio_get$pid(0x1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) ioctl$AUTOFS_DEV_IOCTL_ASKUMOUNT(0xffffffffffffffff, 0xc018937d, &(0x7f0000000180)={{0x1, 0x1, 0x18, r3, {0x8}}, './file0\x00'}) r7 = openat$cgroup_int(r6, &(0x7f0000000340)='cpu.max\x00', 0x2, 0x0) write$cgroup_int(r7, &(0x7f0000000040)=0x101, 0x12) ioctl$sock_SIOCSIFBR(0xffffffffffffffff, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2000000000002}) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000008004e2630c1b372490c2799fd699210f8338214649b02c2a684a4d7e15fe456d5852d5acc6514c0c925debfaeddb4656b4f530e86", @ANYRES32=r8, @ANYBLOB="0c0099000100008029000000"], 0x28}}, 0x4) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) 4.969360942s ago: executing program 0 (id=3072): r0 = openat$loop_ctrl(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) shmget$private(0x0, 0x1000, 0x0, &(0x7f0000fff000/0x1000)=nil) sendfile(0xffffffffffffffff, r0, 0x0, 0x0) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$BPF_GET_MAP_INFO(0xf, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4000}, {}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x2d) bpf$PROG_LOAD(0x5, 0x0, 0x54) socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r5) socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'bond_slave_1\x00', 0x0}) r8 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r8, 0x84, 0xe, &(0x7f00000003c0)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in={{0x2, 0x0, @broadcast}}}}, &(0x7f0000000280)=0xb0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f00000001c0)={r11}, &(0x7f0000000300)=0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100039a00"/20, @ANYRES32=r7, @ANYBLOB="000020000008000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) 3.681356153s ago: executing program 0 (id=3073): sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x38}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0x11, 0x3, 0x3ffdcf, 0x7ff, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffc, 0x20}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000140)=0x6, 0x4) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)={0x94, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa}, [@CTA_TUPLE_ORIG={0x3c, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @mcast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8}]}, 0x94}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x5c, 0x0, 0x1, 0x401, 0x0, 0x0, {0xa, 0x0, 0x5}, [@CTA_TUPLE_ORIG={0x18, 0x1, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x30, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}]}]}, 0x5c}}, 0x0) r6 = openat$sequencer(0xffffffffffffff9c, &(0x7f0000000000), 0x80, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r7, 0x107, 0xe, 0x0, &(0x7f0000001880)) ioctl$SNDCTL_SEQ_NRSYNTHS(r6, 0x8004510a, &(0x7f0000000380)) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f00000001c0)={0x0, 0x3, 0xa, [0x5, 0x3, 0x1, 0x3ff, 0x28, 0x776, 0x4, 0x632, 0x6, 0xf]}, &(0x7f0000000240)=0x1c) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(r6, 0x84, 0x6c, &(0x7f0000000400)={r8, 0x8d, "dde40d1c3c8034bef8b5bac6df5888c989456ee4ec1b66d6963984a0b4b2b1066ed0850eafaa31e4653152f6421589ad17849a124a7bbb36978cdcab44918d6235455069b5538807dca5aeeda8bf5e1c44548c5a6fad7e7824ed2be87c9dd5dda35a45ca7025fa1be97aef979f288b66529b7c240244f5069c1d43d58b8c20b8a1ffbc0ddab6f65a8a0c4e0924"}, &(0x7f0000000280)=0x95) 3.638018476s ago: executing program 3 (id=3074): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x409, 0x64000000, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 3.438639242s ago: executing program 2 (id=3075): syz_usb_connect(0x0, 0x24, &(0x7f0000000140)=ANY=[@ANYBLOB="12010000f2d07c40501d89601dd0000000010902120001000000000904"], 0x0) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) shmat(0x0, &(0x7f0000ffc000/0x2000)=nil, 0x4000) madvise(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x16) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, 0x0, 0x0) sendmmsg$unix(r1, &(0x7f0000000000), 0x651, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) recvmmsg(r0, 0x0, 0x0, 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000240)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16, @ANYBLOB="01000000000000000000010000000c0006000100000000c64c000c00020000000000000000000400078033eea86290f84b3acec50066e7ea34a87527f6cd89e7e409287350d1df3cb3fc104dbb8bde5c3b9b756065b56477d193037da199e7f191b0a31f55922af3c11b4d865a4f78a8c4555255ac86"], 0x30}}, 0x0) 3.415582543s ago: executing program 1 (id=3076): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000200)={0x14, 0x76, 0x31f, 0x0, 0x0, "", [@nested={0x4}]}, 0x14}], 0x1}, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="38000000031401"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) 3.250441709s ago: executing program 1 (id=3077): r0 = accept4$x25(0xffffffffffffffff, 0x0, &(0x7f0000000040), 0x80000) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f00000000c0)=@add_del={0x2, &(0x7f0000000080)='tunl0\x00'}) r1 = socket$inet_sctp(0x2, 0x5, 0x84) bind$inet(r1, 0x0, 0x0) ioctl$BTRFS_IOC_GET_SUPPORTED_FEATURES(0xffffffffffffffff, 0x50009405, &(0x7f0000000180)) openat(0xffffffffffffff9c, &(0x7f000000c380)='./file0\x00', 0x40, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, 0x0, 0x0) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x4) r4 = openat$vmci(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$IOCTL_VMCI_INIT_CONTEXT(r4, 0x7a0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x4e21}, 0x6e) sendmmsg$unix(r6, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x24000850}, 0x0) r7 = memfd_create(0x0, 0x0) r8 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r8, 0x0, 0x0) mmap$dsp(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x1, 0x13, 0xffffffffffffffff, 0x0) listen(r8, 0x0) r9 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r9, &(0x7f0000000240)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x2, {0x1, 0x0, 0xffffffff}}, 0x10, 0x0}, 0x0) accept4(r8, 0x0, 0x0, 0x0) close_range(r7, 0xffffffffffffffff, 0x0) shmat(0x0, &(0x7f0000ff9000/0x4000)=nil, 0x0) 3.089521016s ago: executing program 3 (id=3078): r0 = syz_usb_connect$hid(0x3, 0x36, &(0x7f00000000c0)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1532, 0x10d, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x0, [{{0x9, 0x4, 0x0, 0x0, 0x2, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x7}}, {{{0x9, 0x5, 0x81, 0x3, 0x0, 0x0, 0x0, 0x3}}}}}]}}]}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18010000200180000000000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) close(0xffffffffffffffff) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x5) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f0000000480), 0x400034f, 0x2, 0x0) openat$binderfs(0xffffffffffffff9c, 0x0, 0x805, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) epoll_create(0x6) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r4, r5, 0x8, 0x0, 0x0, 0xa, 0x81, 0x46d, 0x8, 0x3, 0x0, 0xffffffff, 'syz0\x00'}) shutdown(r5, 0x1) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/12, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/21], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x16, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_usb_control_io$hid(r0, 0x0, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0x188, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x188, 0xffffffff, 0xffffffff, 0x188, 0xffffffff, 0x3, 0x0, {[{{@ip={@remote, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffff00, 'veth0_to_hsr\x00', 'macsec0\x00', {0xff}, {}, 0x29, 0x0, 0x20}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x12, 0x3, 0x8, 0x2, 'netbios-ns\x00', 'syz1\x00', {0x3}}}}, {{@ip={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote, 0xffffffff, 0xff000000, 'geneve1\x00', 'pimreg1\x00', {}, {}, 0x6, 0x1}, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x9, 0x6, "02faea85e630c91d8aa58f67263587935c17ee73e3e6000789f0ebec8e9e"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x280) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000013c0)={'wlan1\x00'}) 2.148441375s ago: executing program 1 (id=3079): r0 = socket$inet_sctp(0x2, 0x1, 0x84) pipe2$watch_queue(0x0, 0x80) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, 0x0) nanosleep(0x0, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000000040)=ANY=[@ANYBLOB="120100004b4e7b08030450f8c904010203010902120001000000000904"], 0x0) io_uring_setup(0x26ce, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec8500000075000000040000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000200)='sched_switch\x00'}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() syz_emit_ethernet(0x4e, &(0x7f0000000440)=ANY=[@ANYBLOB="b8a3eb209aa0aaaaaaaaaa0086dd6000010000183afffe800000000000000000000000000000ff020000000000000000000000000001860090780000000000000000000000000000010021000000c0a5f7e42c"], 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) bind$inet(r5, &(0x7f0000000300)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r5, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000000)='batadv_slave_1\x00', 0x10) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(r0, 0x84, 0x74, &(0x7f0000000080)=""/213, &(0x7f0000000180)=0xd5) 2.147480133s ago: executing program 0 (id=3080): request_key(&(0x7f0000000040)='asymmetric\x00', &(0x7f0000001ffb)={'syz', 0x0}, &(0x7f0000001fee)='R\x10rust\xe3c*sgrVdn(#e', 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sysinfo(0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0, 0x0, 0x3}, 0x18) r1 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x55f2, 0x0, 0x0, 0x1000}, 0x10) write(r1, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40ac00e000100", 0x41d) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000080000000017000000400006803c0004"], 0x54}}, 0x0) sysinfo(&(0x7f0000000000)=""/243) 2.004646633s ago: executing program 0 (id=3081): lsetxattr$system_posix_acl(&(0x7f0000000400)='.\x00', &(0x7f0000000440)='system.posix_acl_default\x00', &(0x7f00000004c0)=ANY=[@ANYRES32, @ANYRES32=0x0, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0xee00, @ANYBLOB="02000000", @ANYRES32=0x0, @ANYBLOB="040000000000800020000000d92c80ac3e1e6c1bc2ed53ecdc06e70a59cfccaa9ef6cce2071500444c518e044f7abb60307c9fc9a1eca07a26b477df7510afa826626f4abdc1493820515963c6ccf6cd4daec9dc8073b1e4fd8400b424244b34133d01b97ac3", @ANYRES32=0x0, @ANYBLOB='\b\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="08ffff00", @ANYRES32=0x0, @ANYRES64], 0x5c, 0x0) syz_usb_connect(0x0, 0x24, &(0x7f0000002c80)=ANY=[@ANYBLOB="120100008b1d7b4094225a42f68f0000000109021200010000000400"], 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r0 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r0, 0x1, &(0x7f0000000280)=0x6) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r1, &(0x7f000057eff8)=@file={0x0, './file0/file0\x00'}, 0x6e) sendmmsg$unix(r2, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r1, &(0x7f00000000c0), 0x10106, 0x2, 0x0) unshare(0x22020600) socket$inet6(0xa, 0x3, 0x8) write(0xffffffffffffffff, &(0x7f0000000000)="240000001a005f0214f9f407000901000a00000003400003000000000300040001000000", 0x24) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x40001}], 0x1, 0x0) r5 = getpgid(r0) prlimit64(r5, 0x7, &(0x7f0000000340)={0x1, 0xffffffffffffffff}, &(0x7f0000000380)) 1.991898954s ago: executing program 5 (id=3082): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000300)=[{&(0x7f0000000400)=""/239, 0xac}, {&(0x7f0000001740)=""/237}, {&(0x7f0000000740)=""/4096}], 0x1}, 0x0) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)}, 0x4084880) r2 = dup(r0) r3 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000080)={0x1d, r4, 0x2, {0x0, 0x1}, 0xff}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000080000000000000000001801000020786c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000100000001801000020756c2500000000002020207b1af8ff00000000bf"], 0x0, 0xfffffffd, 0x0, 0x0, 0x41000, 0x0, '\x00', r4, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r2, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x80) syz_io_uring_setup(0x24fa, &(0x7f0000000080)={0x0, 0x3, 0x10100, 0x1, 0x3d3}, &(0x7f0000000100), &(0x7f0000000140)) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) madvise(&(0x7f0000a93000/0x4000)=nil, 0x4000, 0xe) mremap(&(0x7f0000a96000/0x1000)=nil, 0x1000, 0x800000, 0x3, &(0x7f0000130000/0x800000)=nil) mlock(&(0x7f0000000000/0x800000)=nil, 0x800000) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x0, 0x0, 0x0, 0x2) prctl$PR_SET_IO_FLUSHER(0x43, 0x1) fdatasync(0xffffffffffffffff) prctl$PR_SET_IO_FLUSHER(0x43, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, 0x0, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="190000000400000008000000ff7f000000000000", @ANYRES32, @ANYRES32=0x0, @ANYBLOB="9eb3b747c72c4ffc9219e4ad80fe8ef428d8bad106ded4c3a7d703cf71d93a69f999e755e96953f086dfb704090de478f45ef45555f68e4523612a1f91be04657ae5710afead9a0622d0c6b4996f82abb016e5fb2552fe4bc3dac7261aaf7e9fad196664733dbc00c952a04c6d7a5fe1ded2dbdd", @ANYBLOB="0000003f9300"/21], 0x48) socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) 1.534042246s ago: executing program 2 (id=3083): sched_setscheduler(0x0, 0x2, 0x0) openat$rtc(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$BTRFS_IOC_INO_PATHS(0xffffffffffffffff, 0xc0389423, 0x0) r0 = syz_usb_connect(0x0, 0x2d, &(0x7f0000000340)=ANY=[@ANYBLOB="9f01020083667d1040206402d14e0102030109021b000100000000090400000190f19c000905f351"], 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$hid(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io$printer(r0, 0x0, 0x0) syz_usb_control_io(r0, 0x0, &(0x7f0000000840)={0x84, &(0x7f00000003c0)=ANY=[@ANYBLOB="400f01000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) 3.486957ms ago: executing program 3 (id=3084): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x8, 0xe, &(0x7f0000000840)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) r1 = openat$audio(0xffffffffffffff9c, &(0x7f0000000000), 0x408040, 0x0) write(r1, &(0x7f0000000040)="0ba43c25b94bb757285713bfba80a73af037cbd43ab63e287eacbb98b35d", 0x1e) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)=ANY=[@ANYBLOB="2000000010000104000000000000000000480000", @ANYRES32=r4, @ANYBLOB="ae1e0200000000003c6e2373e07d44243eb3"], 0x20}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@ipv6_newaddr={0x34, 0x14, 0x401, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r4}, [@IFA_ADDRESS={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFA_FLAGS={0x8, 0x8, 0x200}]}, 0x34}}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r0, 0xfeffff, 0x113, 0x3f00f000, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0x4a, 0xffffff0c}, 0x40) 0s ago: executing program 5 (id=3085): openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x2000, 0x0) openat$sequencer(0xffffff9c, &(0x7f0000004700), 0x0, 0x0) io_uring_setup(0x3f0f, &(0x7f0000000040)={0x0, 0x8000fdcb, 0x40, 0xfffffffe, 0x1}) socket$nl_route(0x10, 0x3, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) r0 = openat$sysfs(0xffffffffffffff9c, &(0x7f00000002c0)='/sys/power/resume', 0x149a82, 0x0) write$cgroup_int(r0, &(0x7f0000000140)=0x400900, 0x12) syz_usb_connect(0x0, 0x2d, &(0x7f0000000040)=ANY=[@ANYBLOB="12010000fdc01a40f30c74933bbc0000000109021b0001000000000904000001a7a00f00090582020002"], 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_rx_ring(r2, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0xffd, 0x3a, 0x0, 0x80000000}, 0x1c) socket$unix(0x1, 0x1, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x6, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) socket$inet6(0xa, 0x3, 0x8000000003c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00\x00@\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) socket$inet6_udp(0xa, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0xe, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b702000002000000850000008600000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{r6}, &(0x7f0000000240), &(0x7f00000003c0)=r8}, 0x20) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000000)={r7, r4, 0x25, 0x2, @void}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000340)={@random="6ea88d319b8c", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x13}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x43, 0x4e22, 0x8}}}}}, 0x0) timer_create(0x2, 0x0, &(0x7f00000000c0)) kernel console output (not intermixed with test programs): [ 813.340376][ T965] vhci_hcd: vhci_device speed not set [ 813.403267][ T5845] Bluetooth: hci5: sending frame failed (-49) [ 813.412657][ T54] Bluetooth: hci5: Opcode 0x1003 failed: -49 [ 813.576095][T15058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 813.662266][T15076] xt_TPROXY: Can be used only with -p tcp or -p udp [ 814.160117][T15077] netlink: 'syz.2.2349': attribute type 29 has an invalid length. [ 814.183547][T15077] netlink: 'syz.2.2349': attribute type 29 has an invalid length. [ 814.191341][T15058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.192214][T15077] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2349'. [ 814.414699][T15058] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 814.429734][T15058] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 814.447167][T13257] usb 1-1: USB disconnect, device number 70 [ 815.129868][T15091] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2356'. [ 815.847609][ T5887] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 816.067469][ T9939] usb 1-1: new high-speed USB device number 71 using dummy_hcd [ 816.146512][T15117] xt_TPROXY: Can be used only with -p tcp or -p udp [ 816.521518][ T5887] usb 6-1: New USB device found, idVendor=077b, idProduct=2226, bcdDevice=ca.8b [ 816.530764][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 816.543875][ T5887] usb 6-1: config 0 descriptor?? [ 817.186611][ T9939] usb 1-1: device descriptor read/64, error -71 [ 817.226008][T15123] 9pnet_fd: Insufficient options for proto=fd [ 817.272243][T15124] tap0: tun_chr_ioctl cmd 1074025677 [ 817.272432][T15124] tap0: linktype set to 821 [ 817.539944][ T9939] usb 1-1: new high-speed USB device number 72 using dummy_hcd [ 817.662650][T15131] xt_TPROXY: Can be used only with -p tcp or -p udp [ 818.140065][ T5887] asix 6-1:0.0 (unnamed net_device) (uninitialized): Failed to write reg index 0x0000: -71 [ 818.152191][ T5887] asix 6-1:0.0: probe with driver asix failed with error -71 [ 818.166946][ T5887] usb 6-1: USB disconnect, device number 35 [ 818.216039][ T9939] usb 1-1: device descriptor read/64, error -71 [ 818.326637][ T9939] usb usb1-port1: attempt power cycle [ 818.710291][ T9939] usb 1-1: new high-speed USB device number 73 using dummy_hcd [ 819.245527][ T9939] usb 1-1: device descriptor read/8, error -71 [ 819.785001][ T9939] usb 1-1: new high-speed USB device number 74 using dummy_hcd [ 819.834315][ T9939] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 819.844629][ T9939] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 819.950872][ T9939] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=8f.f6 [ 819.959936][ T9939] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 819.969605][ T9939] usb 1-1: config 0 descriptor?? [ 821.319273][ T29] audit: type=1400 audit(1732175652.906:57085): avc: denied { connect } for pid=15162 comm="syz.3.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 824.369938][T15183] xt_TPROXY: Can be used only with -p tcp or -p udp [ 826.919077][ T8] usb 1-1: USB disconnect, device number 74 [ 827.957485][ T29] audit: type=1400 audit(1732175659.550:57086): avc: denied { mount } for pid=15206 comm="syz.0.2386" name="/" dev="devtmpfs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 827.973598][T15211] devtmpfs: Too small a size for current use [ 828.086815][ T29] audit: type=1400 audit(1732175659.550:57087): avc: denied { remount } for pid=15206 comm="syz.0.2386" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 828.161398][T15211] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2386'. [ 828.174209][T15211] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2386'. [ 828.186016][T15211] erspan1: entered promiscuous mode [ 828.206556][T15211] erspan1: entered allmulticast mode [ 828.306259][ T29] audit: type=1400 audit(1732175659.901:57088): avc: denied { unmount } for pid=5843 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=filesystem permissive=1 [ 828.428728][ T29] audit: type=1400 audit(1732175660.021:57089): avc: denied { write } for pid=15193 comm="syz.1.2382" path="socket:[43119]" dev="sockfs" ino=43119 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 828.432073][T15223] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2391'. [ 828.659334][ T8] usb 6-1: new high-speed USB device number 36 using dummy_hcd [ 828.721493][T15227] xt_TPROXY: Can be used only with -p tcp or -p udp [ 828.872333][T15223] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(4) [ 828.878880][T15223] vhci_hcd vhci_hcd.0: devid(0) speed(5) speed_str(super-speed) [ 829.209235][T15223] vhci_hcd vhci_hcd.0: Device attached [ 829.280985][T15229] vhci_hcd: connection closed [ 829.283195][T13246] vhci_hcd: stop threads [ 829.340751][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 829.411677][T13246] vhci_hcd: release socket [ 829.431285][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 829.450885][T13246] vhci_hcd: disconnect device [ 830.062733][ T8] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 830.072381][ T8] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 830.081656][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 830.104554][ T8] usb 6-1: config 0 descriptor?? [ 831.135370][T15244] overlayfs: failed to resolve './file0': -2 [ 831.543175][T15251] input: syz0 as /devices/virtual/input/input54 [ 832.196368][T15251] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 832.238118][T15251] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 832.261889][T15256] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 832.268404][T15256] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 832.338509][T15256] vhci_hcd vhci_hcd.0: Device attached [ 832.376992][T15256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 832.417672][T15256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 832.448152][T15256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 832.461994][T15256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 832.476826][T15256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 832.496827][T15256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 832.506378][T15256] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 832.528187][T15256] vhci_hcd vhci_hcd.0: port 0 already used [ 833.565518][ T9939] vhci_hcd: vhci_device speed not set [ 833.774967][ T9939] usb 33-1: new full-speed USB device number 6 using vhci_hcd [ 833.778092][ T8] usb 6-1: USB disconnect, device number 36 [ 835.402394][T15283] xt_TPROXY: Can be used only with -p tcp or -p udp [ 835.671131][T15257] vhci_hcd: connection reset by peer [ 836.032192][ T12] vhci_hcd: stop threads [ 836.042484][ T12] vhci_hcd: release socket [ 836.048172][ T12] vhci_hcd: disconnect device [ 837.415088][T15296] FAULT_INJECTION: forcing a failure. [ 837.415088][T15296] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 837.551206][T15300] 9pnet_fd: Insufficient options for proto=fd [ 837.820883][T15296] CPU: 1 UID: 0 PID: 15296 Comm: syz.0.2408 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 837.831336][T15296] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 837.841392][T15296] Call Trace: [ 837.844659][T15296] [ 837.847576][T15296] dump_stack_lvl+0x16c/0x1f0 [ 837.852241][T15296] should_fail_ex+0x497/0x5b0 [ 837.856905][T15296] _copy_from_user+0x2e/0xd0 [ 837.861479][T15296] copy_msghdr_from_user+0x99/0x160 [ 837.866663][T15296] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 837.872458][T15296] ___sys_sendmsg+0xff/0x1e0 [ 837.877034][T15296] ? __pfx____sys_sendmsg+0x10/0x10 [ 837.882237][T15296] ? __pfx_lock_release+0x10/0x10 [ 837.887243][T15296] ? trace_lock_acquire+0x14a/0x1d0 [ 837.892440][T15296] ? __fget_files+0x206/0x3a0 [ 837.897102][T15296] __sys_sendmsg+0x16e/0x220 [ 837.901681][T15296] ? __pfx___sys_sendmsg+0x10/0x10 [ 837.906785][T15296] do_syscall_64+0xcd/0x250 [ 837.911281][T15296] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 837.917160][T15296] RIP: 0033:0x7fde31d7e819 [ 837.921554][T15296] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 837.941138][T15296] RSP: 002b:00007fde32b5b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 837.949553][T15296] RAX: ffffffffffffffda RBX: 00007fde31f35fa0 RCX: 00007fde31d7e819 [ 837.957505][T15296] RDX: 9cdc2384056b48bc RSI: 0000000020000040 RDI: 0000000000000003 [ 837.965454][T15296] RBP: 00007fde32b5b090 R08: 0000000000000000 R09: 0000000000000000 [ 837.973408][T15296] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 837.981360][T15296] R13: 0000000000000000 R14: 00007fde31f35fa0 R15: 00007ffc556926e8 [ 837.989319][T15296] [ 839.860786][ T9939] vhci_hcd: vhci_device speed not set [ 841.103248][T15327] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 843.217630][T15365] netlink: 'syz.0.2427': attribute type 10 has an invalid length. [ 843.951177][T15362] could not allocate digest TFM handle cbcmac-aes-neon [ 844.347818][ T5890] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 844.500531][ T5890] usb 6-1: Using ep0 maxpacket: 32 [ 844.709716][ T5890] usb 6-1: New USB device found, idVendor=0fd9, idProduct=0025, bcdDevice=29.40 [ 845.390031][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 845.431182][ T5890] usb 6-1: config 0 descriptor?? [ 845.665537][ T5890] dvb-usb: found a 'Elgato EyeTV Sat' in warm state. [ 845.675693][ T5890] dvb-usb: will pass the complete MPEG2 transport stream to the software demuxer. [ 845.696094][ T5890] dvbdev: DVB: registering new adapter (Elgato EyeTV Sat) [ 845.696912][T15389] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2432'. [ 845.715780][ T5890] usb 6-1: media controller created [ 845.752091][ T5890] dvbdev: dvb_create_media_entity: media entity 'dvb-demux' registered. [ 846.049689][T13257] usb 2-1: new high-speed USB device number 50 using dummy_hcd [ 846.090502][ T5890] az6027: usb out operation failed. (-71) [ 846.098897][ T5890] stb0899_attach: Driver disabled by Kconfig [ 846.115609][ T5890] az6027: no front-end attached [ 846.115609][ T5890] [ 846.130848][ T5890] az6027: usb out operation failed. (-71) [ 846.137923][ T5890] dvb-usb: no frontend was attached by 'Elgato EyeTV Sat' [ 846.149048][ T5890] input: IR-receiver inside an USB DVB receiver as /devices/platform/dummy_hcd.5/usb6/6-1/input/input55 [ 846.163402][ T5890] dvb-usb: schedule remote query interval to 400 msecs. [ 846.170943][ T5890] dvb-usb: Elgato EyeTV Sat successfully initialized and connected. [ 846.181840][ T5890] usb 6-1: USB disconnect, device number 37 [ 846.230353][T13257] usb 2-1: Using ep0 maxpacket: 8 [ 846.267293][T13257] usb 2-1: unable to get BOS descriptor or descriptor too short [ 846.293414][ T5890] dvb-usb: Elgato EyeTV Sat successfully deinitialized and disconnected. [ 846.300446][T13257] usb 2-1: config 8 has an invalid interface number: 255 but max is 0 [ 846.319491][T13257] usb 2-1: config 8 has no interface number 0 [ 846.330663][T13257] usb 2-1: config 8 interface 255 has no altsetting 0 [ 846.342654][T13257] usb 2-1: string descriptor 0 read error: -22 [ 846.348916][T13257] usb 2-1: New USB device found, idVendor=0423, idProduct=000c, bcdDevice=2e.bf [ 846.362051][T13257] usb 2-1: New USB device strings: Mfr=1, Product=130, SerialNumber=3 [ 846.379571][ T9939] usb 3-1: new high-speed USB device number 58 using dummy_hcd [ 846.531352][ T9939] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 846.542780][ T9939] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 846.554064][ T9939] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=8f.f6 [ 846.569373][ T9939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.591886][ T9939] usb 3-1: config 0 descriptor?? [ 848.335694][T15427] 9pnet_fd: Insufficient options for proto=fd [ 848.599083][ T29] audit: type=1400 audit(1732175680.212:57090): avc: denied { map } for pid=15428 comm="syz.5.2443" path="/dev/bus/usb/003/001" dev="devtmpfs" ino=727 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 848.635114][T15433] fuse: Bad value for 'rootmode' [ 848.647824][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2442'. [ 848.657011][T15432] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2442'. [ 848.958876][T13257] eth%d: CATC EL1210A NetMate USB Ethernet at usb-dummy_hcd.1-1, 00:00:00:00:00:00. [ 849.156781][T13257] usb 3-1: USB disconnect, device number 58 [ 849.879930][ T9939] usb 2-1: USB disconnect, device number 50 [ 850.047056][T15457] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=3088 sclass=netlink_route_socket pid=15457 comm=syz.3.2447 [ 850.233644][T15459] xt_TPROXY: Can be used only with -p tcp or -p udp [ 851.816985][ T9939] usb 2-1: new high-speed USB device number 51 using dummy_hcd [ 851.925741][T15480] 9pnet_fd: Insufficient options for proto=fd [ 851.992500][ T9939] usb 2-1: Using ep0 maxpacket: 16 [ 852.024719][ T9939] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 852.101441][ T9939] usb 2-1: config 0 interface 0 altsetting 8 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.162128][ T9939] usb 2-1: config 0 interface 0 altsetting 8 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 852.216114][ T9939] usb 2-1: config 0 interface 0 has no altsetting 0 [ 852.228610][ T9939] usb 2-1: New USB device found, idVendor=09da, idProduct=022b, bcdDevice= 0.00 [ 852.270092][ T9939] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.302730][ T9939] usb 2-1: config 0 descriptor?? [ 852.763746][ T9939] a4tech 0003:09DA:022B.001A: unknown main item tag 0x0 [ 852.771956][ T9939] a4tech 0003:09DA:022B.001A: unknown main item tag 0x0 [ 852.801264][ T9939] a4tech 0003:09DA:022B.001A: unknown main item tag 0x0 [ 852.818664][ T9939] a4tech 0003:09DA:022B.001A: unknown main item tag 0x0 [ 852.843314][ T9939] a4tech 0003:09DA:022B.001A: hidraw0: USB HID v0.00 Device [HID 09da:022b] on usb-dummy_hcd.1-1/input0 [ 853.060737][ T9939] usb 2-1: USB disconnect, device number 51 [ 853.754457][T15499] FAULT_INJECTION: forcing a failure. [ 853.754457][T15499] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 853.767590][T15499] CPU: 1 UID: 0 PID: 15499 Comm: syz.5.2453 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 853.778077][T15499] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 853.788119][T15499] Call Trace: [ 853.791383][T15499] [ 853.794301][T15499] dump_stack_lvl+0x16c/0x1f0 [ 853.798972][T15499] should_fail_ex+0x497/0x5b0 [ 853.803639][T15499] _copy_from_user+0x2e/0xd0 [ 853.808223][T15499] copy_msghdr_from_user+0x99/0x160 [ 853.813414][T15499] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 853.819244][T15499] ___sys_sendmsg+0xff/0x1e0 [ 853.823833][T15499] ? __pfx____sys_sendmsg+0x10/0x10 [ 853.829037][T15499] ? __pfx_lock_release+0x10/0x10 [ 853.834047][T15499] ? trace_lock_acquire+0x14a/0x1d0 [ 853.839239][T15499] ? __fget_files+0x206/0x3a0 [ 853.843914][T15499] __sys_sendmsg+0x16e/0x220 [ 853.848498][T15499] ? __pfx___sys_sendmsg+0x10/0x10 [ 853.853605][T15499] do_syscall_64+0xcd/0x250 [ 853.858100][T15499] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 853.863979][T15499] RIP: 0033:0x7fdd4477e819 [ 853.868387][T15499] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 853.887987][T15499] RSP: 002b:00007fdd45536038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 853.896386][T15499] RAX: ffffffffffffffda RBX: 00007fdd44936080 RCX: 00007fdd4477e819 [ 853.904338][T15499] RDX: 0000000000004000 RSI: 0000000020000300 RDI: 0000000000000003 [ 853.912291][T15499] RBP: 00007fdd45536090 R08: 0000000000000000 R09: 0000000000000000 [ 853.920243][T15499] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 853.928196][T15499] R13: 0000000000000000 R14: 00007fdd44936080 R15: 00007ffd1525cbf8 [ 853.936157][T15499] [ 853.939163][ C1] vkms_vblank_simulate: vblank timer overrun [ 854.570580][ T9939] libceph: connect (1)[c::]:6789 error -22 [ 854.576716][ T9939] libceph: mon0 (1)[c::]:6789 connect error [ 854.587203][T15504] ceph: No mds server is up or the cluster is laggy [ 855.040243][ T29] audit: type=1400 audit(1732175686.645:57091): avc: denied { lock } for pid=15515 comm="syz.5.2459" path="/dev/cpu/0/msr" dev="devtmpfs" ino=87 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:cpu_device_t tclass=chr_file permissive=1 [ 855.098528][T15525] xt_TPROXY: Can be used only with -p tcp or -p udp [ 856.117287][ T29] audit: type=1326 audit(1732175687.716:57092): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 856.152453][ T29] audit: type=1326 audit(1732175687.716:57093): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 856.177390][ T29] audit: type=1326 audit(1732175687.716:57094): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 856.201661][ T29] audit: type=1326 audit(1732175687.716:57095): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 856.226735][ T29] audit: type=1326 audit(1732175687.716:57096): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 856.284478][T15527] could not allocate digest TFM handle cbcmac-aes-neon [ 856.302153][ T29] audit: type=1326 audit(1732175687.716:57097): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 856.326773][ T29] audit: type=1326 audit(1732175687.716:57098): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 856.375363][ T29] audit: type=1326 audit(1732175687.716:57099): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 856.410637][ T29] audit: type=1326 audit(1732175687.716:57100): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15537 comm="syz.5.2463" exe="/root/syz-executor" sig=0 arch=c000003e syscall=307 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 856.554844][ T5890] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 856.624245][T13257] usb 3-1: new high-speed USB device number 59 using dummy_hcd [ 856.638846][T15545] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2466'. [ 856.705918][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 856.717278][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 856.729128][ T5890] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xD8, changing to 0x88 [ 856.740898][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has an invalid bInterval 0, changing to 7 [ 856.752067][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x88 has invalid wMaxPacketSize 0 [ 856.775244][ T5890] usb 6-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 856.785054][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.801571][ T5890] usb 6-1: config 0 descriptor?? [ 856.822050][T13257] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 856.832560][T13257] usb 3-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 856.850799][T13257] usb 3-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=8f.f6 [ 856.860155][T13257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 856.884609][T13257] usb 3-1: config 0 descriptor?? [ 857.255179][ T5889] usb 2-1: new high-speed USB device number 52 using dummy_hcd [ 857.275363][ T5890] corsair-psu 0003:1B1C:1C0D.001B: hidraw0: USB HID v0.00 Device [HID 1b1c:1c0d] on usb-dummy_hcd.5-1/input0 [ 857.819717][ T5890] corsair-psu 0003:1B1C:1C0D.001B: unable to initialize device (-38) [ 857.830762][T15551] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 857.850933][ T5890] corsair-psu 0003:1B1C:1C0D.001B: probe with driver corsair-psu failed with error -38 [ 857.874499][ T5889] usb 2-1: device descriptor read/64, error -71 [ 857.881005][T15551] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 857.960170][ T8] usb 6-1: USB disconnect, device number 38 [ 858.121965][ T5889] usb 2-1: new high-speed USB device number 53 using dummy_hcd [ 858.833098][ T5889] usb 2-1: device descriptor read/64, error -71 [ 858.943481][ T5889] usb usb2-port1: attempt power cycle [ 859.292892][ T5889] usb 2-1: new high-speed USB device number 54 using dummy_hcd [ 859.343696][ T5889] usb 2-1: device descriptor read/8, error -71 [ 860.147200][T13257] usb 1-1: new high-speed USB device number 75 using dummy_hcd [ 860.273951][ T965] usb 3-1: USB disconnect, device number 59 [ 860.323925][T13257] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 860.352311][T13257] usb 1-1: New USB device found, idVendor=28bd, idProduct=0042, bcdDevice= 0.00 [ 860.404095][T13257] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 860.453102][T15588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=11 sclass=netlink_route_socket pid=15588 comm=syz.3.2478 [ 860.510455][T13257] usb 1-1: config 0 descriptor?? [ 860.802157][ T965] usb 3-1: new high-speed USB device number 60 using dummy_hcd [ 861.321936][ T965] usb 3-1: device descriptor read/64, error -71 [ 861.336481][T15601] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=15601 comm=syz.1.2482 [ 861.424940][T15564] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 861.434745][T15564] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 861.651670][ T965] usb 3-1: new high-speed USB device number 61 using dummy_hcd [ 862.371354][ T965] usb 3-1: device descriptor read/64, error -71 [ 862.620320][ T965] usb usb3-port1: attempt power cycle [ 862.620756][ T5887] usb 1-1: USB disconnect, device number 75 [ 862.638506][ T29] kauditd_printk_skb: 15 callbacks suppressed [ 862.638520][ T29] audit: type=1400 audit(1732175694.249:57116): avc: denied { write } for pid=15617 comm="syz.5.2486" name="btrfs-control" dev="devtmpfs" ino=1309 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 863.358565][ T29] audit: type=1400 audit(1732175694.249:57117): avc: denied { ioctl } for pid=15617 comm="syz.5.2486" path="/dev/btrfs-control" dev="devtmpfs" ino=1309 ioctlcmd=0x4800 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:lvm_control_t tclass=chr_file permissive=1 [ 866.038021][T15657] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2493'. [ 866.499295][ T965] usb 2-1: new high-speed USB device number 56 using dummy_hcd [ 867.582411][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 867.608576][ T965] usb 2-1: Using ep0 maxpacket: 16 [ 867.635478][ T29] audit: type=1400 audit(1732175699.061:57118): avc: denied { listen } for pid=15679 comm="syz.5.2497" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 867.940507][ T965] usb 2-1: config 0 has no interfaces? [ 867.963239][ T965] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 867.983462][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 868.018846][ T965] usb 2-1: Product: syz [ 868.036819][ T965] usb 2-1: Manufacturer: syz [ 868.063783][ T965] usb 2-1: SerialNumber: syz [ 868.107116][ T965] usb 2-1: config 0 descriptor?? [ 870.088315][ T5887] usb 3-1: new high-speed USB device number 63 using dummy_hcd [ 870.129278][T13257] usb 2-1: USB disconnect, device number 56 [ 871.766632][T15713] netlink: 'syz.0.2505': attribute type 29 has an invalid length. [ 871.866475][T15713] netlink: 'syz.0.2505': attribute type 29 has an invalid length. [ 871.930373][T15710] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2505'. [ 872.213163][ T5887] usb 3-1: device descriptor read/all, error -71 [ 872.512533][T15729] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=15729 comm=syz.0.2513 [ 872.666002][T13257] usb 2-1: new high-speed USB device number 57 using dummy_hcd [ 872.818194][T13257] usb 2-1: device descriptor read/64, error -71 [ 873.281573][T13257] usb 2-1: new high-speed USB device number 58 using dummy_hcd [ 873.875730][T11303] usb 1-1: new high-speed USB device number 76 using dummy_hcd [ 873.935377][T13257] usb 2-1: device descriptor read/64, error -71 [ 874.035636][T15742] could not allocate digest TFM handle cbcmac-aes-neon [ 874.045750][T13257] usb usb2-port1: attempt power cycle [ 874.085532][T11303] usb 1-1: Using ep0 maxpacket: 16 [ 874.241253][T15757] netlink: 124 bytes leftover after parsing attributes in process `syz.5.2518'. [ 874.707242][T11303] usb 1-1: config index 0 descriptor too short (expected 16456, got 72) [ 874.730161][T11303] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 874.754948][T11303] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 874.763122][T11303] usb 1-1: config 0 has an invalid interface number: 125 but max is 1 [ 874.771372][T11303] usb 1-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 874.828236][T11303] usb 1-1: config 0 has no interface number 0 [ 874.834400][T11303] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x4 has invalid maxpacket 21760, setting to 64 [ 874.845568][T11303] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0xB has invalid wMaxPacketSize 0 [ 874.855502][T11303] usb 1-1: config 0 interface 125 altsetting 4 endpoint 0x2 has invalid wMaxPacketSize 0 [ 874.865443][T11303] usb 1-1: config 0 interface 125 altsetting 1 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 874.884987][T11303] usb 1-1: config 0 interface 125 has no altsetting 0 [ 874.891790][T11303] usb 1-1: config 0 interface 125 has no altsetting 2 [ 875.039169][T13257] usb 2-1: new high-speed USB device number 59 using dummy_hcd [ 875.088744][T11303] usb 1-1: New USB device found, idVendor=050d, idProduct=0002, bcdDevice=23.27 [ 875.098535][T11303] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 875.107103][T13257] usb 2-1: device descriptor read/8, error -71 [ 875.113747][T11303] usb 1-1: Product: syz [ 875.118321][T11303] usb 1-1: Manufacturer: syz [ 875.122938][T11303] usb 1-1: SerialNumber: syz [ 875.129737][T11303] usb 1-1: config 0 descriptor?? [ 875.138691][T11303] usb 1-1: selecting invalid altsetting 2 [ 875.194836][ T8] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 875.354856][ T8] usb 6-1: Using ep0 maxpacket: 16 [ 875.362364][ T8] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 875.373248][ T8] usb 6-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 875.397106][ T8] usb 6-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 875.417958][ T8] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 875.438235][ T8] usb 6-1: config 0 descriptor?? [ 875.532648][T13257] usb 2-1: new high-speed USB device number 60 using dummy_hcd [ 876.114638][T13257] usb 2-1: device not accepting address 60, error -71 [ 876.123148][T13257] usb usb2-port1: unable to enumerate USB device [ 876.560777][T11303] get_1284_register timeout [ 876.565498][ C1] usb 1-1: async_complete: urb error -104 [ 876.571330][ C1] usb 1-1: async_complete: urb error -104 [ 876.577164][ C1] usb 1-1: async_complete: urb error -104 [ 876.582992][T11303] uss720 1-1:0.125: probe with driver uss720 failed with error -5 [ 877.011699][ T5887] usb 1-1: USB disconnect, device number 76 [ 877.307932][T15782] : renamed from lo (while UP) [ 878.015518][ C0] hrtimer: interrupt took 44652 ns [ 878.902445][T15799] netlink: 124 bytes leftover after parsing attributes in process `syz.2.2529'. [ 879.572543][ T8] usb 6-1: string descriptor 0 read error: -71 [ 879.580729][ T8] usbhid 6-1:0.0: couldn't find an input interrupt endpoint [ 879.589255][ T8] usb 6-1: USB disconnect, device number 39 [ 881.247196][T15811] netlink: 'syz.2.2532': attribute type 29 has an invalid length. [ 881.256706][T15811] netlink: 'syz.2.2532': attribute type 29 has an invalid length. [ 881.266361][T15811] netlink: 596 bytes leftover after parsing attributes in process `syz.2.2532'. [ 881.729684][T15824] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2533'. [ 882.258614][T15814] could not allocate digest TFM handle cbcmac-aes-neon [ 882.766322][T15830] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=123 sclass=netlink_route_socket pid=15830 comm=syz.2.2535 [ 884.381621][T13257] usb 6-1: new high-speed USB device number 40 using dummy_hcd [ 884.561050][T13257] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9271, bcdDevice= 1.08 [ 884.835913][ T5890] usb 1-1: new high-speed USB device number 77 using dummy_hcd [ 884.926071][T15849] netlink: 124 bytes leftover after parsing attributes in process `syz.1.2542'. [ 885.129729][T13257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 885.137842][T13257] usb 6-1: Product: syz [ 885.142121][T13257] usb 6-1: Manufacturer: syz [ 885.146779][T13257] usb 6-1: SerialNumber: syz [ 885.197045][T13257] usb 6-1: ath9k_htc: Firmware ath9k_htc/htc_9271-1.4.0.fw requested [ 885.199898][ T5890] usb 1-1: Using ep0 maxpacket: 16 [ 885.903627][ T5890] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 885.915357][ T5890] usb 1-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 885.934102][ T5887] usb 6-1: ath9k_htc: Transferred FW: ath9k_htc/htc_9271-1.4.0.fw, size: 51008 [ 885.945152][ T5890] usb 1-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 885.974684][ T5890] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 885.992107][ T5890] usb 1-1: config 0 descriptor?? [ 887.330502][ T5887] ath9k_htc 6-1:1.0: ath9k_htc: Target is unresponsive [ 887.337667][ T5887] ath9k_htc: Failed to initialize the device [ 887.365925][T15859] : renamed from lo (while UP) [ 887.725875][T15865] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 887.802150][T15862] vhci_hcd vhci_hcd.0: pdev(2) rhport(0) sockfd(3) [ 887.808705][T15862] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 887.818197][T15868] random: crng reseeded on system resumption [ 887.823467][T15867] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 887.828871][T15862] vhci_hcd vhci_hcd.0: Device attached [ 887.833260][ T5887] usb 6-1: ath9k_htc: USB layer deinitialized [ 887.874040][ T5939] usb 6-1: USB disconnect, device number 40 [ 887.889610][T15862] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 887.906217][T15862] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 887.930694][T15862] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 888.018497][ T5889] vhci_hcd: vhci_device speed not set [ 888.024710][T15862] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 888.042926][T15862] vhci_hcd vhci_hcd.0: port 0 already used [ 888.108218][ T5889] usb 37-1: new full-speed USB device number 3 using vhci_hcd [ 888.267147][ T5890] usb 1-1: string descriptor 0 read error: -71 [ 888.274440][ T5890] usbhid 1-1:0.0: couldn't find an input interrupt endpoint [ 888.283473][ T5890] usb 1-1: USB disconnect, device number 77 [ 888.687826][T15863] vhci_hcd: connection reset by peer [ 888.705207][T13246] vhci_hcd: stop threads [ 888.711426][T13246] vhci_hcd: release socket [ 888.738143][T15886] netlink: 'syz.2.2551': attribute type 9 has an invalid length. [ 888.745989][T15886] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2551'. [ 888.755326][T13246] vhci_hcd: disconnect device [ 888.776717][T15874] could not allocate digest TFM handle cbcmac-aes-neon [ 892.127830][T15907] FAULT_INJECTION: forcing a failure. [ 892.127830][T15907] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 892.236412][T15907] CPU: 1 UID: 0 PID: 15907 Comm: syz.5.2558 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 892.246857][T15907] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 892.256919][T15907] Call Trace: [ 892.260203][T15907] [ 892.263137][T15907] dump_stack_lvl+0x16c/0x1f0 [ 892.267833][T15907] should_fail_ex+0x497/0x5b0 [ 892.272535][T15907] _copy_to_user+0x32/0xd0 [ 892.276976][T15907] simple_read_from_buffer+0xd0/0x160 [ 892.282367][T15907] proc_fail_nth_read+0x198/0x270 [ 892.287403][T15907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 892.292941][T15907] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 892.298486][T15907] vfs_read+0x1df/0xbe0 [ 892.302628][T15907] ? __fget_files+0x1fc/0x3a0 [ 892.307289][T15907] ? __pfx___mutex_lock+0x10/0x10 [ 892.312320][T15907] ? __pfx_vfs_read+0x10/0x10 [ 892.317006][T15907] ? __fget_files+0x206/0x3a0 [ 892.321677][T15907] ksys_read+0x12b/0x250 [ 892.325907][T15907] ? __pfx_ksys_read+0x10/0x10 [ 892.330656][T15907] do_syscall_64+0xcd/0x250 [ 892.335159][T15907] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 892.341061][T15907] RIP: 0033:0x7fdd4477d25c [ 892.345468][T15907] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 892.365073][T15907] RSP: 002b:00007fdd45557030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 892.373473][T15907] RAX: ffffffffffffffda RBX: 00007fdd44935fa0 RCX: 00007fdd4477d25c [ 892.381438][T15907] RDX: 000000000000000f RSI: 00007fdd455570a0 RDI: 0000000000000004 [ 892.389388][T15907] RBP: 00007fdd45557090 R08: 0000000000000000 R09: 0000000000000000 [ 892.397342][T15907] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 892.405308][T15907] R13: 0000000000000000 R14: 00007fdd44935fa0 R15: 00007ffd1525cbf8 [ 892.413279][T15907] [ 892.416365][ C1] vkms_vblank_simulate: vblank timer overrun [ 892.446755][T15919] : renamed from lo (while UP) [ 893.245741][ T5889] vhci_hcd: vhci_device speed not set [ 893.271149][T15931] iommufd_mock iommufd_mock0: Adding to iommu group 0 [ 893.276856][ T29] audit: type=1400 audit(1732175724.894:57119): avc: denied { setopt } for pid=15933 comm="syz.1.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 893.297590][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.313619][ T29] audit: type=1400 audit(1732175724.924:57120): avc: denied { write } for pid=15933 comm="syz.1.2564" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 893.333231][ C1] vkms_vblank_simulate: vblank timer overrun [ 893.447084][ T29] audit: type=1326 audit(1732175725.075:57121): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15938 comm="syz.1.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 893.475610][ T5890] usb 1-1: new high-speed USB device number 78 using dummy_hcd [ 893.517738][ T29] audit: type=1326 audit(1732175725.105:57122): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15938 comm="syz.1.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 893.545705][ T29] audit: type=1326 audit(1732175725.105:57123): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15938 comm="syz.1.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=278 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 893.575166][ T29] audit: type=1326 audit(1732175725.105:57124): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15938 comm="syz.1.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 893.611096][ T29] audit: type=1326 audit(1732175725.105:57125): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15938 comm="syz.1.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 893.650370][T15941] overlayfs: failed to resolve './file0': -2 [ 893.655472][ T5890] usb 1-1: Using ep0 maxpacket: 8 [ 893.666542][ T5890] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 4.c9 [ 893.675862][ T5890] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 893.708543][ T29] audit: type=1326 audit(1732175725.115:57126): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15938 comm="syz.1.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 893.732990][ T5890] usb 1-1: Product: syz [ 893.737369][ T5890] usb 1-1: Manufacturer: syz [ 893.742224][ T5890] usb 1-1: SerialNumber: syz [ 893.754558][ T5890] usb 1-1: config 0 descriptor?? [ 893.762871][ T29] audit: type=1326 audit(1732175725.115:57127): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15938 comm="syz.1.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 893.795617][ T29] audit: type=1326 audit(1732175725.115:57128): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15938 comm="syz.1.2565" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 893.820434][ T5890] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 893.829089][ T5890] ftdi_sio ttyUSB0: unknown device type: 0x4c9 [ 894.669972][T15952] vivid-003: disconnect [ 895.017249][T15946] vivid-003: reconnect [ 895.591372][T15945] lo speed is unknown, defaulting to 1000 [ 896.556487][ T965] usb 1-1: USB disconnect, device number 78 [ 896.567260][ T965] ftdi_sio 1-1:0.0: device disconnected [ 896.841602][ T5939] usb 6-1: new high-speed USB device number 41 using dummy_hcd [ 897.623760][T15977] IPVS: set_ctl: invalid protocol: 115 172.20.20.187:21 [ 897.658733][T15977] IPVS: set_ctl: invalid protocol: 47 224.0.0.1:20001 [ 897.798841][ T5939] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 897.809320][ T5939] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 897.818479][ T5939] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=8f.f6 [ 897.828290][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 897.913013][ T5939] usb 6-1: config 0 descriptor?? [ 900.125606][ T5889] usb 6-1: USB disconnect, device number 41 [ 901.824684][T15992] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 902.076256][ T29] kauditd_printk_skb: 13 callbacks suppressed [ 902.076275][ T29] audit: type=1400 audit(1732175733.669:57142): avc: denied { call } for pid=16007 comm="syz.1.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 902.258195][ T29] audit: type=1400 audit(1732175733.679:57143): avc: denied { transfer } for pid=16007 comm="syz.1.2582" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=binder permissive=1 [ 902.858198][ T54] Bluetooth: hci0: command 0x0406 tx timeout [ 903.077574][ T29] audit: type=1400 audit(1732175734.709:57144): avc: denied { getopt } for pid=16019 comm="syz.5.2585" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 903.078721][T16024] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2585'. [ 903.704966][T16008] vlan3: entered promiscuous mode [ 903.710754][T16008] vlan3: entered allmulticast mode [ 904.781178][T16018] could not allocate digest TFM handle cbcmac-aes-neon [ 904.959990][ T965] usb 6-1: new high-speed USB device number 42 using dummy_hcd [ 905.079798][T13257] usb 2-1: new high-speed USB device number 61 using dummy_hcd [ 905.110992][ T965] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 905.133440][ T965] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 905.150578][ T965] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=8f.f6 [ 905.168912][ T965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.186202][ T965] usb 6-1: config 0 descriptor?? [ 905.259606][T13257] usb 2-1: Using ep0 maxpacket: 16 [ 905.280741][T13257] usb 2-1: config 0 has an invalid interface number: 4 but max is 0 [ 905.288784][T13257] usb 2-1: config 0 has no interface number 0 [ 905.306254][T13257] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 905.329769][T13257] usb 2-1: config 0 interface 4 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 905.352116][T13257] usb 2-1: New USB device found, idVendor=6161, idProduct=4d15, bcdDevice= 0.00 [ 905.372889][T13257] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 905.397112][T13257] usb 2-1: config 0 descriptor?? [ 906.298456][T13257] usb 2-1: USB disconnect, device number 61 [ 906.687665][T16058] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2594'. [ 907.898643][T13257] usb 6-1: USB disconnect, device number 42 [ 909.908212][ T965] usb 3-1: new high-speed USB device number 65 using dummy_hcd [ 910.061711][T16095] hub 5-0:1.0: USB hub found [ 910.066752][T16095] hub 5-0:1.0: 1 port detected [ 910.643051][ T965] usb 3-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 910.654322][ T965] usb 3-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 910.664544][ T965] usb 3-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 910.673801][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 910.703261][T16084] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 910.729974][ T965] usb 3-1: Quirk or no altset; falling back to MIDI 1.0 [ 911.023280][T16084] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.047932][T16084] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 911.910906][T16105] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 911.920744][T16105] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 913.391335][ T8] usb 3-1: USB disconnect, device number 65 [ 914.953793][T16129] overlayfs: failed to resolve './file0': -2 [ 915.134077][T16137] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=16137 comm=syz.3.2616 [ 915.859094][T16152] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=7960 sclass=netlink_route_socket pid=16152 comm=syz.3.2622 [ 915.942689][T16156] netlink: 'syz.2.2624': attribute type 9 has an invalid length. [ 916.728588][T16156] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2624'. [ 916.784941][ T29] audit: type=1400 audit(1732175748.426:57145): avc: denied { read } for pid=16132 comm="syz.0.2615" laddr=::1 lport=20003 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=sctp_socket permissive=1 [ 918.794277][T16175] xt_TPROXY: Can be used only with -p tcp or -p udp [ 918.832979][ T54] Bluetooth: hci4: command 0x0406 tx timeout [ 918.839277][ T29] audit: type=1400 audit(1732175750.467:57146): avc: denied { getopt } for pid=16176 comm="syz.2.2630" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 920.234379][T16192] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=65296 sclass=netlink_route_socket pid=16192 comm=syz.0.2633 [ 921.242087][T13257] usb 3-1: new full-speed USB device number 66 using dummy_hcd [ 921.266925][T16203] team0 (unregistering): Port device team_slave_0 removed [ 921.278972][T16203] team0 (unregistering): Port device team_slave_1 removed [ 921.291168][T16203] team0 (unregistering): Port device batadv0 removed [ 921.298965][T16203] vlan0: left allmulticast mode [ 921.304206][T16203] veth0_vlan: left allmulticast mode [ 921.309541][T16203] vlan0: left promiscuous mode [ 921.316700][T16203] team0 (unregistering): Port device vlan2 removed [ 921.444964][T13257] usb 3-1: config 0 has an invalid descriptor of length 247, skipping remainder of the config [ 921.596938][T13257] usb 3-1: config 0 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 2 [ 921.710306][T13257] usb 3-1: New USB device found, idVendor=0458, idProduct=0087, bcdDevice= 0.00 [ 921.783467][T13257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 921.803090][T13257] usb 3-1: config 0 descriptor?? [ 922.202151][T13257] usb 3-1: string descriptor 0 read error: -71 [ 922.210216][T13257] usbhid 3-1:0.0: couldn't find an input interrupt endpoint [ 922.326565][T16219] xt_TPROXY: Can be used only with -p tcp or -p udp [ 922.404475][T13257] usb 3-1: USB disconnect, device number 66 [ 923.390785][T13257] usb 3-1: new high-speed USB device number 67 using dummy_hcd [ 923.585096][T13257] usb 3-1: unable to get BOS descriptor or descriptor too short [ 923.598913][T13257] usb 3-1: config 1 interface 0 altsetting 0 bulk endpoint 0x82 has invalid maxpacket 16 [ 923.720500][T13257] usb 3-1: config 1 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 19 [ 923.761470][T13257] usb 3-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 923.780440][T13257] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=1 [ 923.813471][T13257] usb 3-1: SerialNumber: syz [ 923.843667][T16229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 923.864138][T16241] overlayfs: missing 'lowerdir' [ 924.077097][T16229] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 924.417484][ T29] audit: type=1400 audit(1732175756.060:57147): avc: denied { connect } for pid=16253 comm="syz.1.2652" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 924.484423][ T29] audit: type=1326 audit(1732175756.130:57148): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.5.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 924.508713][ T29] audit: type=1326 audit(1732175756.130:57149): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.5.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 924.534058][ T29] audit: type=1326 audit(1732175756.130:57150): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.5.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=240 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 924.549038][T13257] cdc_ether 3-1:1.0 eth5: register 'cdc_ether' at usb-dummy_hcd.2-1, CDC Ethernet Device, 42:42:42:42:42:42 [ 924.578036][ T29] audit: type=1326 audit(1732175756.130:57151): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.5.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 924.637371][ T29] audit: type=1326 audit(1732175756.130:57152): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.5.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=41 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 924.670132][ T5887] usb 2-1: new full-speed USB device number 62 using dummy_hcd [ 924.692575][ T29] audit: type=1326 audit(1732175756.130:57153): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.5.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 924.722896][ T29] audit: type=1326 audit(1732175756.130:57154): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.5.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=157 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 924.747851][ T29] audit: type=1326 audit(1732175756.130:57155): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.5.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 924.791940][ T29] audit: type=1326 audit(1732175756.130:57156): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=16256 comm="syz.5.2653" exe="/root/syz-executor" sig=0 arch=c000003e syscall=444 compat=0 ip=0x7fdd4477e819 code=0x7ffc0000 [ 924.845025][ T5887] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 924.884542][ T5887] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 925.058673][T16263] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 925.130050][ T5887] usb 2-1: New USB device found, idVendor=07fd, idProduct=0001, bcdDevice=48.99 [ 925.139151][ T5887] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 925.148028][ T5887] usb 2-1: Product: syz [ 925.152858][ T5887] usb 2-1: Manufacturer: syz [ 925.157551][ T5887] usb 2-1: SerialNumber: syz [ 925.181196][ T5887] usb 2-1: config 0 descriptor?? [ 925.364164][T16254] raw-gadget.1 gadget.1: fail, usb_ep_enable returned -22 [ 925.601378][ T5887] usb 2-1: Quirk or no altset; falling back to MIDI 1.0 [ 925.664114][T16276] could not allocate digest TFM handle cbcmac-aes-neon [ 926.132226][ T5887] usb 2-1: USB disconnect, device number 62 [ 926.296941][ T5890] usb 3-1: USB disconnect, device number 67 [ 926.315032][ T5890] cdc_ether 3-1:1.0 eth5: unregister 'cdc_ether' usb-dummy_hcd.2-1, CDC Ethernet Device [ 927.437960][T15399] udevd[15399]: error opening ATTR{/sys/devices/platform/dummy_hcd.1/usb2/2-1/2-1:0.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 929.133673][ T5889] usb 6-1: new high-speed USB device number 43 using dummy_hcd [ 929.201553][T16324] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2664'. [ 929.213994][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 929.408311][T16330] SELinux: policydb table sizes (0,0) do not match mine (6,7) [ 929.415929][T16330] SELinux: failed to load policy [ 929.562740][T16336] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2668'. [ 930.045011][T16337] syz.0.2667 uses old SIOCAX25GETINFO [ 930.985527][T16372] binder: 16371:16372 ioctl c0306201 0 returned -14 [ 930.997694][T16372] binder: 16371:16372 ioctl c0306201 0 returned -14 [ 931.004593][T16372] binder: 16371:16372 ioctl c0306201 0 returned -14 [ 931.014392][T16372] binder: 16371:16372 ioctl c0306201 0 returned -14 [ 931.021303][T16372] binder: 16371:16372 ioctl c0306201 0 returned -14 [ 931.059963][T16375] netlink: 'syz.0.2676': attribute type 9 has an invalid length. [ 931.087023][T16375] netlink: 399 bytes leftover after parsing attributes in process `syz.0.2676'. [ 932.707697][T16406] overlayfs: failed to resolve './file0': -2 [ 932.796403][T16412] overlayfs: missing 'lowerdir' [ 933.321079][T16423] could not allocate digest TFM handle cbcmac-aes-neon [ 936.156669][ T5889] IPVS: starting estimator thread 0... [ 936.244151][T16455] IPVS: using max 45 ests per chain, 108000 per kthread [ 936.604018][ T5887] usb 3-1: new full-speed USB device number 68 using dummy_hcd [ 936.632755][T16461] tmpfs: Bad value for 'mpol' [ 936.785375][ T5887] usb 3-1: config index 0 descriptor too short (expected 63186, got 210) [ 936.800043][ T5887] usb 3-1: config 0 has an invalid interface number: 106 but max is 0 [ 936.808427][ T5887] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 936.819001][ T5887] usb 3-1: config 0 has no interface number 0 [ 936.958796][ T5887] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0xF has invalid wMaxPacketSize 0 [ 936.968762][ T5887] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has an invalid bInterval 0, changing to 10 [ 936.980261][ T5887] usb 3-1: config 0 interface 106 altsetting 0 endpoint 0x1 has invalid maxpacket 255, setting to 64 [ 936.991257][ T5887] usb 3-1: config 0 interface 106 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 6 [ 937.004527][ T5887] usb 3-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=df.bb [ 937.013578][ T5887] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 937.752423][ T5887] usb 3-1: config 0 descriptor?? [ 937.767465][T16459] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 937.866840][ T5887] usb 3-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 937.876745][ T29] kauditd_printk_skb: 33 callbacks suppressed [ 937.876786][ T29] audit: type=1400 audit(1732175769.527:57190): avc: denied { ioctl } for pid=16478 comm="syz.5.2703" path="/dev/fuse" dev="devtmpfs" ino=99 ioctlcmd=0x89f3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:fuse_device_t tclass=chr_file permissive=1 [ 937.999790][ T29] audit: type=1400 audit(1732175769.637:57191): avc: denied { append } for pid=16478 comm="syz.5.2703" name="ppp" dev="devtmpfs" ino=709 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:ppp_device_t tclass=chr_file permissive=1 [ 938.024183][ C0] vkms_vblank_simulate: vblank timer overrun [ 938.172865][T16479] nbd: couldn't find a device at index 4096 [ 938.248741][T16459] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2697'. [ 938.292413][T16459] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 938.321436][T16459] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 938.979961][ T5946] usb 3-1: Failed to submit usb control message: -110 [ 939.000507][ T5946] usb 3-1: unable to send the bmi data to the device: -110 [ 939.029910][ T5946] usb 3-1: unable to get target info from device [ 939.230418][ T5946] usb 3-1: could not get target info (-110) [ 939.256731][ T5946] usb 3-1: could not probe fw (-110) [ 939.957178][ T965] usb 3-1: USB disconnect, device number 68 [ 941.586854][T16544] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2717'. [ 942.127737][T16547] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 943.298337][T16562] binder: BINDER_SET_CONTEXT_MGR already set [ 943.305241][T16562] binder: 16559:16562 ioctl 4018620d 20000040 returned -16 [ 943.470500][ T5939] usb 1-1: new high-speed USB device number 79 using dummy_hcd [ 943.680645][ T5889] usb 6-1: new high-speed USB device number 44 using dummy_hcd [ 943.820429][ T5939] usb 1-1: Using ep0 maxpacket: 16 [ 943.831606][ T5939] usb 1-1: config 0 has an invalid interface number: 8 but max is 0 [ 943.839925][ T5939] usb 1-1: config 0 has no interface number 0 [ 943.887953][ T5939] usb 1-1: config 0 interface 8 altsetting 0 has an endpoint descriptor with address 0x13, changing to 0x3 [ 943.954261][ T5939] usb 1-1: config 0 interface 8 altsetting 0 endpoint 0x3 has invalid maxpacket 53544, setting to 64 [ 944.015301][ T5939] usb 1-1: New USB device found, idVendor=0d8c, idProduct=000e, bcdDevice=8e.8f [ 944.039340][ T5939] usb 1-1: New USB device strings: Mfr=0, Product=24, SerialNumber=3 [ 944.057066][ T5939] usb 1-1: Product: syz [ 944.066609][ T5939] usb 1-1: SerialNumber: syz [ 944.086675][ T5939] usb 1-1: config 0 descriptor?? [ 944.101432][ T5939] usbhid 1-1:0.8: couldn't find an input interrupt endpoint [ 944.107138][ T5889] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 944.131078][ T5889] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 944.169027][ T5889] usb 6-1: New USB device found, idVendor=1c40, idProduct=0534, bcdDevice=6d.cc [ 944.179230][ T5889] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 944.189547][ T5889] usb 6-1: Product: syz [ 944.194125][ T5889] usb 6-1: Manufacturer: syz [ 944.198803][ T5889] usb 6-1: SerialNumber: syz [ 944.210767][ T5889] usb 6-1: config 0 descriptor?? [ 944.463060][T16578] syz.0.2721: attempt to access beyond end of device [ 944.463060][T16578] md0: rw=2048, sector=0, nr_sectors = 8 limit=0 [ 944.824139][T16582] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 944.849593][ T5939] usb 1-1: USB disconnect, device number 79 [ 946.253721][T16597] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 946.262869][T16597] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 946.275248][T16597] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 946.320697][T16597] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 946.770110][T16600] netlink: 'syz.3.2735': attribute type 41 has an invalid length. [ 946.919539][ T29] audit: type=1400 audit(1732175778.581:57192): avc: denied { create } for pid=16605 comm="syz.2.2737" name="file0" scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=blk_file permissive=1 [ 946.941651][ T5887] usb 6-1: USB disconnect, device number 44 [ 947.378724][ T5887] usb 6-1: new high-speed USB device number 45 using dummy_hcd [ 947.478536][ T5889] usb 3-1: new high-speed USB device number 69 using dummy_hcd [ 947.502164][T16633] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 947.541106][T16625] could not allocate digest TFM handle cbcmac-aes-neon [ 947.597769][ T5887] usb 6-1: too many endpoints for config 0 interface 0 altsetting 0: 253, using maximum allowed: 30 [ 947.608703][ T5889] usb 3-1: device descriptor read/64, error -71 [ 947.620097][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 947.631106][ T5887] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 947.640975][ T5887] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 253 [ 947.656932][ T5887] usb 6-1: New USB device found, idVendor=05ac, idProduct=8243, bcdDevice=8b.40 [ 947.666796][ T5887] usb 6-1: New USB device strings: Mfr=11, Product=0, SerialNumber=0 [ 947.674944][ T5887] usb 6-1: Manufacturer: syz [ 947.681419][ T5887] usb 6-1: config 0 descriptor?? [ 947.848415][ T5889] usb 3-1: new high-speed USB device number 70 using dummy_hcd [ 948.715326][ T5889] usb 3-1: device descriptor read/64, error -71 [ 948.721082][ T5887] appleir 0003:05AC:8243.001D: unknown main item tag 0x0 [ 948.729455][ T5887] appleir 0003:05AC:8243.001D: No inputs registered, leaving [ 948.733926][ T29] audit: type=1400 audit(1732175780.392:57193): avc: denied { remount } for pid=16612 comm="syz.5.2740" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 [ 948.780127][T16615] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 948.822599][ T5887] appleir 0003:05AC:8243.001D: hiddev0,hidraw0: USB HID v0.00 Device [syz] on usb-dummy_hcd.5-1/input0 [ 948.829205][ T5889] usb usb3-port1: attempt power cycle [ 948.844530][T16615] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 949.040283][T16615] macvlan0: entered allmulticast mode [ 949.051240][T16615] veth1_vlan: entered allmulticast mode [ 949.119108][ T29] audit: type=1400 audit(1732175780.782:57194): avc: denied { watch watch_reads } for pid=16612 comm="syz.5.2740" path="/432/file0" dev="tmpfs" ino=2354 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=dir permissive=1 [ 949.148233][T16615] veth1_vlan: left allmulticast mode [ 949.416348][ T5889] usb 3-1: new high-speed USB device number 71 using dummy_hcd [ 949.456977][T16615] macvlan0 (unregistering): left allmulticast mode [ 949.463338][ T5889] usb 3-1: device descriptor read/8, error -71 [ 949.591734][T16655] binder: BINDER_SET_CONTEXT_MGR already set [ 949.597957][T16655] binder: 16654:16655 ioctl 4018620d 20000040 returned -16 [ 949.608379][T16653] unsupported nlmsg_type 40 [ 949.679421][ T9939] usb 6-1: USB disconnect, device number 45 [ 949.787405][ T5889] usb 3-1: new high-speed USB device number 72 using dummy_hcd [ 950.044282][ T5889] usb 3-1: device descriptor read/8, error -71 [ 950.168464][ T5889] usb usb3-port1: unable to enumerate USB device [ 950.475018][ T29] audit: type=1400 audit(1732175782.123:57195): avc: denied { accept } for pid=16657 comm="syz.3.2750" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 950.507359][ T5889] usb 3-1: new full-speed USB device number 73 using dummy_hcd [ 950.509166][T16671] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 950.517060][ T5890] usb 2-1: new high-speed USB device number 63 using dummy_hcd [ 950.689806][ T5889] usb 3-1: config index 0 descriptor too short (expected 6427, got 27) [ 950.701640][ T5889] usb 3-1: config 0 has an invalid interface number: 21 but max is 0 [ 950.710025][ T5890] usb 2-1: New USB device found, idVendor=0545, idProduct=808b, bcdDevice=31.ad [ 950.720237][ T5890] usb 2-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 950.728564][ T5889] usb 3-1: config 0 has no interface number 0 [ 950.738733][ T5890] usb 2-1: config 0 descriptor?? [ 950.743877][ T5889] usb 3-1: config 0 interface 21 altsetting 0 has an endpoint descriptor with address 0xFF, changing to 0x8F [ 950.758726][ T5890] gspca_main: tv8532-2.14.0 probing 0545:808b [ 950.765438][ T5889] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has an invalid bInterval 0, changing to 10 [ 950.993127][ T5889] usb 3-1: config 0 interface 21 altsetting 0 endpoint 0x8F has invalid maxpacket 65535, setting to 64 [ 951.004531][ T5889] usb 3-1: New USB device found, idVendor=06cd, idProduct=0202, bcdDevice=92.d4 [ 951.014294][ T5889] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 951.025213][ T5889] usb 3-1: config 0 descriptor?? [ 951.032251][T16665] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 951.913552][ T5889] usb 3-1: USB disconnect, device number 73 [ 952.025341][ T9939] usb 2-1: USB disconnect, device number 63 [ 952.176221][ T5887] usb 6-1: new high-speed USB device number 46 using dummy_hcd [ 952.457079][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 952.465179][ T5887] usb 6-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 4.c9 [ 952.475565][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 952.484258][ T5887] usb 6-1: Product: syz [ 952.488725][ T5887] usb 6-1: Manufacturer: syz [ 952.494652][ T5887] usb 6-1: SerialNumber: syz [ 952.597441][ T5887] usb 6-1: config 0 descriptor?? [ 952.831822][ T5887] ftdi_sio 6-1:0.0: FTDI USB Serial Device converter detected [ 953.009814][ T5887] ftdi_sio ttyUSB0: unknown device type: 0x4c9 [ 953.974648][T16710] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 955.008556][ T965] usb 6-1: USB disconnect, device number 46 [ 955.015437][ T965] ftdi_sio 6-1:0.0: device disconnected [ 955.295511][ T29] audit: type=1400 audit(1732175786.955:57196): avc: denied { read } for pid=16731 comm="syz.0.2772" path="socket:[46754]" dev="sockfs" ino=46754 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rds_socket permissive=1 [ 955.425288][ T29] audit: type=1400 audit(1732175787.076:57197): avc: denied { read } for pid=16737 comm="syz.0.2774" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 956.694058][T16756] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 956.798476][T16753] ADFS-fs (nullb0): error: can't find an ADFS filesystem on dev nullb0. [ 957.773924][ T5939] usb 6-1: new high-speed USB device number 47 using dummy_hcd [ 957.959770][ T5939] usb 6-1: config 0 has an invalid interface number: 136 but max is 0 [ 957.969332][ T5939] usb 6-1: config 0 has no interface number 0 [ 958.104426][ T5939] usb 6-1: config 0 interface 136 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 958.134651][ T5939] usb 6-1: New USB device found, idVendor=06cd, idProduct=0135, bcdDevice=92.a4 [ 958.147532][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 958.163636][ T5939] usb 6-1: config 0 descriptor?? [ 958.189771][ T5939] keyspan 6-1:0.136: Keyspan 2 port adapter converter detected [ 958.197580][ T5939] keyspan 6-1:0.136: found no endpoint descriptor for endpoint 1 [ 958.206899][ T5939] keyspan 6-1:0.136: found no endpoint descriptor for endpoint 84 [ 958.214789][ T5939] keyspan 6-1:0.136: found no endpoint descriptor for endpoint 2 [ 958.224814][ T5939] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB0 [ 958.270542][T16773] could not allocate digest TFM handle cbcmac-aes-neon [ 958.274153][ T5939] keyspan 6-1:0.136: found no endpoint descriptor for endpoint 88 [ 958.285358][ T5939] keyspan 6-1:0.136: found no endpoint descriptor for endpoint 6 [ 958.303275][ T5939] usb 6-1: Keyspan 2 port adapter converter now attached to ttyUSB1 [ 958.401601][ T5939] usb 6-1: USB disconnect, device number 47 [ 958.412814][T16787] FAULT_INJECTION: forcing a failure. [ 958.412814][T16787] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 958.426844][ T5939] keyspan_2 ttyUSB0: Keyspan 2 port adapter converter now disconnected from ttyUSB0 [ 958.481544][T16789] FAULT_INJECTION: forcing a failure. [ 958.481544][T16789] name failslab, interval 1, probability 0, space 0, times 0 [ 958.493204][ T5939] keyspan_2 ttyUSB1: Keyspan 2 port adapter converter now disconnected from ttyUSB1 [ 958.504504][ T5939] keyspan 6-1:0.136: device disconnected [ 958.513406][T16787] CPU: 1 UID: 0 PID: 16787 Comm: syz.0.2787 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 958.523931][T16787] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 958.533989][T16787] Call Trace: [ 958.537273][T16787] [ 958.540200][T16787] dump_stack_lvl+0x16c/0x1f0 [ 958.544875][T16787] should_fail_ex+0x497/0x5b0 [ 958.549546][T16787] _copy_from_user+0x2e/0xd0 [ 958.554132][T16787] __sys_bpf+0x21c/0x49a0 [ 958.558457][T16787] ? __pfx_lock_release+0x10/0x10 [ 958.563467][T16787] ? __pfx___sys_bpf+0x10/0x10 [ 958.568215][T16787] ? vfs_write+0x306/0x1150 [ 958.572703][T16787] ? __mutex_unlock_slowpath+0x164/0x690 [ 958.578337][T16787] ? fput+0x67/0x440 [ 958.582219][T16787] ? ksys_write+0x1ba/0x250 [ 958.586743][T16787] ? __pfx_ksys_write+0x10/0x10 [ 958.591616][T16787] __x64_sys_bpf+0x78/0xc0 [ 958.596040][T16787] ? lockdep_hardirqs_on+0x7c/0x110 [ 958.601225][T16787] do_syscall_64+0xcd/0x250 [ 958.605715][T16787] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.611590][T16787] RIP: 0033:0x7fde31d7e819 [ 958.615990][T16787] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.635583][T16787] RSP: 002b:00007fde32b5b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 958.643977][T16787] RAX: ffffffffffffffda RBX: 00007fde31f35fa0 RCX: 00007fde31d7e819 [ 958.651945][T16787] RDX: 000000000000001c RSI: 0000000020000340 RDI: 000000000000001c [ 958.659906][T16787] RBP: 00007fde32b5b090 R08: 0000000000000000 R09: 0000000000000000 [ 958.667862][T16787] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 958.675815][T16787] R13: 0000000000000000 R14: 00007fde31f35fa0 R15: 00007ffc556926e8 [ 958.683789][T16787] [ 958.734647][T16789] CPU: 1 UID: 0 PID: 16789 Comm: syz.1.2788 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 958.745103][T16789] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 958.755172][T16789] Call Trace: [ 958.758469][T16789] [ 958.761403][T16789] dump_stack_lvl+0x16c/0x1f0 [ 958.766103][T16789] should_fail_ex+0x497/0x5b0 [ 958.770795][T16789] ? fs_reclaim_acquire+0xae/0x150 [ 958.775928][T16789] should_failslab+0xc2/0x120 [ 958.780628][T16789] __kmalloc_cache_noprof+0x6b/0x300 [ 958.785930][T16789] ? tls_set_sw_offload+0xafe/0x12c0 [ 958.791243][T16789] tls_set_sw_offload+0xafe/0x12c0 [ 958.796605][T16789] tls_setsockopt+0x1111/0x1440 [ 958.801467][T16789] ? __pfx_tls_setsockopt+0x10/0x10 [ 958.806659][T16789] ? selinux_socket_setsockopt+0x6a/0x80 [ 958.812272][T16789] ? sock_common_setsockopt+0x2e/0xf0 [ 958.817630][T16789] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 958.823508][T16789] do_sock_setsockopt+0x222/0x480 [ 958.828516][T16789] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 958.834070][T16789] ? lock_acquire+0x2f/0xb0 [ 958.838564][T16789] __sys_setsockopt+0x1a0/0x230 [ 958.843402][T16789] __x64_sys_setsockopt+0xbd/0x160 [ 958.848499][T16789] ? do_syscall_64+0x91/0x250 [ 958.853166][T16789] ? lockdep_hardirqs_on+0x7c/0x110 [ 958.858353][T16789] do_syscall_64+0xcd/0x250 [ 958.862847][T16789] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 958.868725][T16789] RIP: 0033:0x7f348db7e819 [ 958.873123][T16789] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 958.892748][T16789] RSP: 002b:00007f348e9e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 958.901175][T16789] RAX: ffffffffffffffda RBX: 00007f348dd35fa0 RCX: 00007f348db7e819 [ 958.909160][T16789] RDX: 0000000000000001 RSI: 000000000000011a RDI: 0000000000000006 [ 958.917140][T16789] RBP: 00007f348e9e1090 R08: 0000000000000028 R09: 0000000000000000 [ 958.925108][T16789] R10: 0000000020000140 R11: 0000000000000246 R12: 0000000000000001 [ 958.933086][T16789] R13: 0000000000000000 R14: 00007f348dd35fa0 R15: 00007fff0017bea8 [ 958.941050][T16789] [ 959.071681][T16801] vhci_hcd vhci_hcd.0: pdev(5) rhport(0) sockfd(3) [ 959.078247][T16801] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 959.096756][T16801] vhci_hcd vhci_hcd.0: Device attached [ 959.122363][T16800] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 959.127486][T16801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 959.170352][T16801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 959.204231][T16801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 959.336452][T16810] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 959.353507][T16801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 959.372879][ T965] vhci_hcd: vhci_device speed not set [ 959.381695][T16801] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 959.397623][T16801] vhci_hcd vhci_hcd.0: port 0 already used [ 959.448438][ T965] usb 43-1: new full-speed USB device number 5 using vhci_hcd [ 959.495095][T16816] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 959.563737][T16820] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2792'. [ 960.062287][T16802] vhci_hcd: connection reset by peer [ 960.070096][T13246] vhci_hcd: stop threads [ 960.075158][T13246] vhci_hcd: release socket [ 960.123751][T16833] netlink: 596 bytes leftover after parsing attributes in process `syz.0.2798'. [ 960.190692][T13246] vhci_hcd: disconnect device [ 964.338003][ T5888] kworker/1:5 (5888) used greatest stack depth: 20000 bytes left [ 964.560083][ T965] vhci_hcd: vhci_device speed not set [ 966.236788][T16831] netlink: 'syz.0.2798': attribute type 29 has an invalid length. [ 967.191048][ T5887] usb 1-1: new high-speed USB device number 80 using dummy_hcd [ 967.428732][ T5887] usb 1-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 967.437811][ T5887] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 967.461073][ T5887] usb 1-1: config 0 descriptor?? [ 967.675044][ T5887] hackrf 1-1:0.0: usb_control_msg() failed -71 request 0e [ 967.702168][ T5887] hackrf 1-1:0.0: Could not detect board [ 967.744525][ T5887] hackrf 1-1:0.0: probe with driver hackrf failed with error -71 [ 967.750004][T16887] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2812'. [ 967.765205][ T5887] usb 1-1: USB disconnect, device number 80 [ 967.879855][T16890] ubi: mtd0 is already attached to ubi0 [ 968.285134][ T5887] usb 6-1: new high-speed USB device number 48 using dummy_hcd [ 968.568096][ T5887] usb 6-1: Using ep0 maxpacket: 8 [ 968.582685][ T5887] usb 6-1: config 0 has an invalid interface number: 151 but max is 1 [ 968.622682][ T5887] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 968.667041][ T5887] usb 6-1: config 0 has 1 interface, different from the descriptor's value: 2 [ 969.036861][ T5887] usb 6-1: config 0 has no interface number 0 [ 969.056665][ T5887] usb 6-1: config 0 interface 151 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 969.080493][ T5887] usb 6-1: config 0 interface 151 altsetting 0 has an endpoint descriptor with address 0xA3, changing to 0x83 [ 969.259337][ T5887] usb 6-1: config 0 interface 151 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 969.269831][ T5887] usb 6-1: config 0 interface 151 altsetting 0 bulk endpoint 0x83 has invalid maxpacket 0 [ 969.280386][ T5887] usb 6-1: config 0 interface 151 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 1 [ 969.324585][ T5887] usb 6-1: New USB device found, idVendor=0499, idProduct=500a, bcdDevice=e7.b7 [ 969.354614][ T5887] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 969.443696][ T5887] usb 6-1: Product: syz [ 969.507833][ T5887] usb 6-1: Manufacturer: syz [ 969.512516][ T5887] usb 6-1: SerialNumber: syz [ 969.934251][ T5887] usb 6-1: config 0 descriptor?? [ 970.094275][ T5887] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 970.349562][ T5887] snd-usb-audio 6-1:0.151: probe with driver snd-usb-audio failed with error -12 [ 970.403873][ T5887] usb 6-1: USB disconnect, device number 48 [ 970.426625][T16916] udevd[16916]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.151/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 971.176704][ T8] usb 1-1: new high-speed USB device number 81 using dummy_hcd [ 971.329694][ T8] usb 1-1: New USB device found, idVendor=0bda, idProduct=8153, bcdDevice=e2.3d [ 971.346442][ T8] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 971.355253][ T8] usb 1-1: Product: syz [ 971.369171][ T8] usb 1-1: Manufacturer: syz [ 971.373905][ T8] usb 1-1: SerialNumber: syz [ 971.393303][ T8] r8152-cfgselector 1-1: Unknown version 0x0000 [ 971.404907][ T8] r8152-cfgselector 1-1: config 0 descriptor?? [ 972.456017][ T29] audit: type=1400 audit(1732175804.024:57198): avc: denied { wake_alarm } for pid=16928 comm="syz.0.2826" capability=35 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability2 permissive=1 [ 973.206300][ T54] Bluetooth: hci4: unexpected event for opcode 0x203c [ 973.468354][T16959] netlink: 'syz.2.2833': attribute type 9 has an invalid length. [ 973.482302][T16959] netlink: 399 bytes leftover after parsing attributes in process `syz.2.2833'. [ 974.596656][ T8] r8152-cfgselector 1-1: Unknown version 0x0000 [ 974.603028][ T8] r8152-cfgselector 1-1: bad CDC descriptors [ 974.690625][ T8] r8152-cfgselector 1-1: USB disconnect, device number 81 [ 976.591208][T17006] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2843'. [ 977.997218][ T29] audit: type=1326 audit(1732175809.667:57199): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 978.112829][ T29] audit: type=1326 audit(1732175809.697:57200): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 978.216025][T17018] could not allocate digest TFM handle cbcmac-aes-neon [ 978.282071][ T29] audit: type=1326 audit(1732175809.707:57201): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 978.612816][ T29] audit: type=1326 audit(1732175809.707:57202): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 978.752442][ T29] audit: type=1326 audit(1732175809.707:57203): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 978.782904][ T9939] usb 6-1: new high-speed USB device number 49 using dummy_hcd [ 978.982762][ T29] audit: type=1326 audit(1732175809.707:57204): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f348db7d1b0 code=0x7ffc0000 [ 979.007337][ T29] audit: type=1400 audit(1732175809.707:57205): avc: denied { open } for pid=17022 comm="syz.1.2852" path="/dev/ptyq6" dev="devtmpfs" ino=125 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:bsdpty_device_t tclass=chr_file permissive=1 [ 979.037385][ T9939] usb 6-1: config 0 has an invalid interface number: 204 but max is 0 [ 979.046286][ T9939] usb 6-1: config 0 has no interface number 0 [ 979.059365][ T29] audit: type=1326 audit(1732175809.707:57206): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 979.100818][ T9939] usb 6-1: New USB device found, idVendor=12d6, idProduct=0444, bcdDevice=29.3d [ 979.120207][ T9939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 979.140891][ T9939] usb 6-1: Product: syz [ 979.145207][ T29] audit: type=1326 audit(1732175809.707:57207): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 979.283166][ T9939] usb 6-1: Manufacturer: syz [ 979.288089][ T9939] usb 6-1: SerialNumber: syz [ 979.307588][ T9939] usb 6-1: config 0 descriptor?? [ 979.336779][ T29] audit: type=1326 audit(1732175809.707:57208): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17022 comm="syz.1.2852" exe="/root/syz-executor" sig=0 arch=c000003e syscall=16 compat=0 ip=0x7f348db7e819 code=0x7ffc0000 [ 979.364222][ T9939] ems_usb 6-1:0.204 (unnamed net_device) (uninitialized): couldn't initialize controller: -8 [ 979.375226][ T9939] ems_usb 6-1:0.204: probe with driver ems_usb failed with error -8 [ 979.552610][ T8] usb 1-1: new high-speed USB device number 82 using dummy_hcd [ 979.625206][ T9939] usb 6-1: USB disconnect, device number 49 [ 979.734921][ T8] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 979.750833][ T8] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 979.770228][ T8] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=8f.f6 [ 979.786062][ T8] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 979.802423][ T8] usb 1-1: config 0 descriptor?? [ 981.126538][T17078] netlink: 'syz.3.2867': attribute type 9 has an invalid length. [ 981.136161][T17078] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2867'. [ 981.243604][T13257] usb 6-1: new high-speed USB device number 50 using dummy_hcd [ 981.441881][ T5890] usb 2-1: new high-speed USB device number 64 using dummy_hcd [ 981.524340][T13257] usb 6-1: Using ep0 maxpacket: 16 [ 981.614607][T13257] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 981.627304][T13257] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 982.039844][T13257] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 982.055773][T13257] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.074347][T13257] usb 6-1: Product: syz [ 982.078574][T13257] usb 6-1: Manufacturer: syz [ 982.083329][T13257] usb 6-1: SerialNumber: syz [ 982.097007][T13257] usb 6-1: config 0 descriptor?? [ 982.122710][T13257] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 982.122884][T17084] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2869'. [ 982.132079][T13257] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 982.181138][ T5890] usb 2-1: Using ep0 maxpacket: 16 [ 982.188053][ T5890] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 982.200112][ T5890] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 982.213489][ T5890] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 982.222982][ T5890] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 982.230990][ T5890] usb 2-1: Product: syz [ 982.236919][ T5890] usb 2-1: Manufacturer: syz [ 982.242187][ T5890] usb 2-1: SerialNumber: syz [ 982.258412][ T5890] usb 2-1: config 0 descriptor?? [ 982.269564][ T5890] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 982.283474][ T5890] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 982.380652][ T9939] usb 1-1: USB disconnect, device number 82 [ 982.742784][T13257] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 982.749527][T13257] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 983.009433][T13257] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 983.019181][T13257] em28xx 6-1:0.0: No AC97 audio processor [ 983.049576][T13257] usb 6-1: USB disconnect, device number 50 [ 983.066448][ T5890] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 983.067223][T13257] em28xx 6-1:0.0: Disconnecting em28xx [ 983.080067][ T5890] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 983.087834][ T5890] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 983.172448][ T5890] em28xx 2-1:0.0: No AC97 audio processor [ 983.243560][T13257] em28xx 6-1:0.0: Freeing device [ 983.249396][ T5890] usb 2-1: USB disconnect, device number 64 [ 983.270749][ T5890] em28xx 2-1:0.0: Disconnecting em28xx [ 983.285007][ T5890] em28xx 2-1:0.0: Freeing device [ 984.420032][ T8] usb 3-1: new high-speed USB device number 74 using dummy_hcd [ 984.635247][ T8] usb 3-1: Using ep0 maxpacket: 32 [ 985.289100][ T8] usb 3-1: New USB device found, idVendor=055f, idProduct=d001, bcdDevice=88.92 [ 985.298278][ T8] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 985.495649][ T8] usb 3-1: config 0 descriptor?? [ 985.799505][ T8] gspca_main: nw80x-2.14.0 probing 055f:d001 [ 986.120622][ T29] kauditd_printk_skb: 89 callbacks suppressed [ 986.120639][ T29] audit: type=1400 audit(1732175817.671:57298): avc: denied { setopt } for pid=17125 comm="syz.5.2884" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rxrpc_socket permissive=1 [ 986.720538][ T8] gspca_nw80x: reg_w err -110 [ 986.728763][ T8] nw80x 3-1:0.0: probe with driver nw80x failed with error -110 [ 988.105463][T17148] tipc: Started in network mode [ 988.110781][T17148] tipc: Node identity f7, cluster identity 4711 [ 988.118022][T17148] tipc: Node number set to 247 [ 988.404486][ T29] audit: type=1400 audit(1732175820.022:57299): avc: denied { create } for pid=17152 comm="syz.0.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_fib_lookup_socket permissive=1 [ 988.478800][ T29] audit: type=1400 audit(1732175820.032:57300): avc: denied { connect } for pid=17152 comm="syz.0.2890" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=smc_socket permissive=1 [ 988.527958][ T8] usb 3-1: USB disconnect, device number 74 [ 988.841871][ T29] audit: type=1400 audit(1732175820.382:57301): avc: denied { read } for pid=17158 comm="syz.3.2893" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 988.861464][ T29] audit: type=1400 audit(1732175820.422:57302): avc: denied { audit_write } for pid=17158 comm="syz.3.2893" capability=29 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=capability permissive=1 [ 988.882805][ T29] audit: type=1107 audit(1732175820.422:57303): pid=17158 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t msg='Rl`JگͿqd+@6Sh_DŽ!m9a5LT,Rr㰟5 X@`)S,`ZsJU񺉰AfuⱢXڌ'z+V-a)bH;ʼnL |& [ 988.882805][ T29] 1K[p+o#m' [ 988.923508][T17113] 9pnet_fd: Insufficient options for proto=fd [ 988.935377][ T29] audit: type=1326 audit(1732175820.442:57304): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.3.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762e37e819 code=0x7ffc0000 [ 988.988451][ T29] audit: type=1326 audit(1732175820.442:57305): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.3.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762e37e819 code=0x7ffc0000 [ 989.214399][ T29] audit: type=1326 audit(1732175820.462:57306): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.3.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=257 compat=0 ip=0x7f762e37e819 code=0x7ffc0000 [ 989.237960][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.244807][ T29] audit: type=1326 audit(1732175820.462:57307): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17158 comm="syz.3.2893" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f762e37e819 code=0x7ffc0000 [ 989.950861][ C1] vkms_vblank_simulate: vblank timer overrun [ 989.957914][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 990.081273][T17177] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 991.295900][ T29] kauditd_printk_skb: 8 callbacks suppressed [ 991.295915][ T29] audit: type=1400 audit(1732175822.963:57316): avc: denied { connect } for pid=17193 comm="syz.5.2901" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 991.329130][T17194] fuse: Unknown parameter 'vxcan1' [ 992.145932][T17204] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2898'. [ 992.236275][ T5890] usb 6-1: new high-speed USB device number 51 using dummy_hcd [ 992.417429][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 992.443276][ T5890] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 992.465558][ T5890] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=8f.f6 [ 992.492784][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 992.543698][ T5890] usb 6-1: config 0 descriptor?? [ 996.305738][ T29] audit: type=1400 audit(1732175827.966:57317): avc: denied { execute } for pid=17247 comm="syz.3.2916" path="/dev/bus/usb/007/001" dev="devtmpfs" ino=739 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usb_device_t tclass=chr_file permissive=1 [ 996.516232][ T5205] udevd[5205]: worker [16886] terminated by signal 33 (Unknown signal 33) [ 996.758796][ T5205] udevd[5205]: worker [16848] terminated by signal 33 (Unknown signal 33) [ 996.881229][ T5205] udevd[5205]: worker [16847] terminated by signal 33 (Unknown signal 33) [ 996.890071][ T5205] udevd[5205]: worker [16865] terminated by signal 33 (Unknown signal 33) [ 996.899366][ T5205] udevd[5205]: worker [16916] terminated by signal 33 (Unknown signal 33) [ 996.908505][ T5205] udevd[5205]: worker [16917] terminated by signal 33 (Unknown signal 33) [ 996.980848][ T29] audit: type=1400 audit(1732175828.656:57318): avc: denied { write } for pid=17259 comm="syz.1.2919" path="socket:[48799]" dev="sockfs" ino=48799 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 997.117320][T17266] overlayfs: failed to resolve './file0': -2 [ 997.121155][ T8] usb 6-1: USB disconnect, device number 51 [ 997.216731][T17268] netlink: 209192 bytes leftover after parsing attributes in process `syz.5.2922'. [ 997.226262][T17268] netlink: get zone limit has 8 unknown bytes [ 998.573054][ T5939] usb 6-1: new high-speed USB device number 52 using dummy_hcd [ 998.633312][ T965] usb 2-1: new high-speed USB device number 65 using dummy_hcd [ 998.722871][ T5939] usb 6-1: Using ep0 maxpacket: 8 [ 998.736566][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 998.762900][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 998.772655][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 998.793118][ T965] usb 2-1: Using ep0 maxpacket: 32 [ 998.802136][ T965] usb 2-1: New USB device found, idVendor=0c72, idProduct=000d, bcdDevice=27.9b [ 998.812150][ T965] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 998.820511][ T965] usb 2-1: Product: syz [ 998.825136][ T965] usb 2-1: Manufacturer: syz [ 998.828001][ T5939] usb 6-1: New USB device found, idVendor=1532, idProduct=010d, bcdDevice= 0.00 [ 998.829810][ T965] usb 2-1: SerialNumber: syz [ 998.845447][ T5939] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 998.846269][ T965] usb 2-1: config 0 descriptor?? [ 998.868479][ T5939] usb 6-1: config 0 descriptor?? [ 1000.104311][ T29] audit: type=1400 audit(1732175831.778:57319): avc: denied { shutdown } for pid=17281 comm="syz.5.2927" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=bluetooth_socket permissive=1 [ 1002.520576][ T965] peak_usb 2-1:0.0 can0: unable to request usb[type=0 value=0] err=-71 [ 1002.571304][ T5939] usbhid 6-1:0.0: can't add hid device: -71 [ 1002.579103][ T5939] usbhid 6-1:0.0: probe with driver usbhid failed with error -71 [ 1002.589478][ T5939] usb 6-1: USB disconnect, device number 52 [ 1002.591038][ T965] peak_usb 2-1:0.0: unable to read PCAN-USB Pro bootloader info (err -71) [ 1003.530101][T17309] lo speed is unknown, defaulting to 1000 [ 1003.538489][ T965] peak_usb 2-1:0.0: probe with driver peak_usb failed with error -71 [ 1004.188153][ T965] usb 2-1: USB disconnect, device number 65 [ 1004.319811][T17326] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 1004.939931][ T5939] usb 6-1: new high-speed USB device number 53 using dummy_hcd [ 1005.109999][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 1005.121175][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1005.142674][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid wMaxPacketSize 0 [ 1005.178074][ T5939] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1005.189114][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1005.243443][ T5939] usb 6-1: Product: syz [ 1005.248118][ T5939] usb 6-1: Manufacturer: syz [ 1005.256489][ T5939] usb 6-1: SerialNumber: syz [ 1005.334226][ T5939] usb 6-1: config 0 descriptor?? [ 1005.348210][ T5939] em28xx 6-1:0.0: error: skipping audio endpoint 0x83, because it uses bulk transfers ! [ 1005.495733][T17345] FAULT_INJECTION: forcing a failure. [ 1005.495733][T17345] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 1005.515544][T17345] CPU: 0 UID: 0 PID: 17345 Comm: syz.1.2944 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 1005.525987][T17345] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1005.536053][T17345] Call Trace: [ 1005.539340][T17345] [ 1005.542275][T17345] dump_stack_lvl+0x16c/0x1f0 [ 1005.546973][T17345] should_fail_ex+0x497/0x5b0 [ 1005.551677][T17345] _copy_from_user+0x2e/0xd0 [ 1005.556296][T17345] snd_seq_ioctl+0x1c0/0x3f0 [ 1005.560900][T17345] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1005.566016][T17345] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1005.572898][T17345] ? selinux_file_ioctl+0x180/0x270 [ 1005.578108][T17345] ? selinux_file_ioctl+0xb4/0x270 [ 1005.583231][T17345] ? __pfx_snd_seq_ioctl+0x10/0x10 [ 1005.588352][T17345] __x64_sys_ioctl+0x190/0x200 [ 1005.593124][T17345] do_syscall_64+0xcd/0x250 [ 1005.597648][T17345] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1005.603555][T17345] RIP: 0033:0x7f348db7e819 [ 1005.607978][T17345] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1005.627595][T17345] RSP: 002b:00007f348e9e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1005.636019][T17345] RAX: ffffffffffffffda RBX: 00007f348dd35fa0 RCX: 00007f348db7e819 [ 1005.643990][T17345] RDX: 0000000000000000 RSI: 0000000040bc5311 RDI: 0000000000000003 [ 1005.651947][T17345] RBP: 00007f348e9e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1005.659902][T17345] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1005.667871][T17345] R13: 0000000000000000 R14: 00007f348dd35fa0 R15: 00007fff0017bea8 [ 1005.675834][T17345] [ 1007.485515][T17357] hub 5-0:1.0: USB hub found [ 1007.498710][T17357] hub 5-0:1.0: 1 port detected [ 1007.890355][T13257] usb 6-1: USB disconnect, device number 53 [ 1008.129709][ T5889] usb 1-1: new high-speed USB device number 83 using dummy_hcd [ 1008.137803][ T29] audit: type=1400 audit(1732175839.802:57320): avc: denied { setopt } for pid=17364 comm="syz.1.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_netfilter_socket permissive=1 [ 1008.174703][ T29] audit: type=1400 audit(1732175839.812:57321): avc: denied { getopt } for pid=17364 comm="syz.1.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=packet_socket permissive=1 [ 1008.314474][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1008.557354][ T29] audit: type=1400 audit(1732175839.822:57322): avc: denied { connect } for pid=17364 comm="syz.1.2949" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 1008.677910][ T9939] usb 3-1: new high-speed USB device number 75 using dummy_hcd [ 1008.727921][ T5889] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 1008.752996][ T5889] usb 1-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 1008.762155][ T5889] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1008.806880][ T5889] usb 1-1: config 0 descriptor?? [ 1008.880548][T17373] could not allocate digest TFM handle cbcmac-aes-neon [ 1008.932612][ T9939] usb 3-1: New USB device found, idVendor=0c72, idProduct=0012, bcdDevice=22.96 [ 1009.081234][ T9939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1009.089381][ T9939] usb 3-1: Product: syz [ 1009.097685][ T9939] usb 3-1: Manufacturer: syz [ 1009.102307][ T9939] usb 3-1: SerialNumber: syz [ 1009.108852][ T5889] usbhid 1-1:0.0: can't add hid device: -71 [ 1009.114841][ T5889] usbhid 1-1:0.0: probe with driver usbhid failed with error -71 [ 1009.138257][ T9939] usb 3-1: config 0 descriptor?? [ 1009.196589][ T5889] usb 1-1: USB disconnect, device number 83 [ 1009.356192][ T9939] peak_usb 3-1:0.0: PEAK-System PCAN-USB FD v0 fw v0.0.0 (1 channels) [ 1009.497401][T17398] SELinux: Context #! ./cgroup/file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 1009.516125][ T29] audit: type=1400 audit(1732175841.193:57323): avc: denied { create } for pid=17397 comm="syz.0.2956" name="file1" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616 [ 1009.527929][T17398] overlayfs: missing 'workdir' [ 1009.608509][ T29] audit: type=1400 audit(1732175841.193:57324): avc: denied { associate } for pid=17397 comm="syz.0.2956" name="file1" scontext=system_u:object_r:unlabeled_t tcontext=system_u:object_r:tmpfs_t tclass=filesystem permissive=1 srawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1009.705202][ T29] audit: type=1400 audit(1732175841.203:57325): avc: denied { mounton } for pid=17397 comm="syz.0.2956" path="/604/bus" dev="tmpfs" ino=3299 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C65306161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1009.932951][ T9939] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1010.032356][ T29] audit: type=1400 audit(1732175841.623:57326): avc: denied { rmdir } for pid=5843 comm="syz-executor" name="file1" dev="tmpfs" ino=3297 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=dir permissive=1 trawcon=2321202E2F6367726F75702F66696C653061616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161616161 [ 1010.033866][ T9939] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1010.183549][ T9939] peak_usb 3-1:0.0 can0: sending command failure: -22 [ 1010.277330][ T9939] peak_usb 3-1:0.0: probe with driver peak_usb failed with error -22 [ 1010.290068][ T9939] usb 3-1: USB disconnect, device number 75 [ 1010.533753][ T965] usb 6-1: new high-speed USB device number 54 using dummy_hcd [ 1011.162274][T17419] fuse: Bad value for 'fd' [ 1011.207876][ T965] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1011.218312][ T965] usb 6-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1011.228837][ T965] usb 6-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=8f.f6 [ 1011.294394][ T965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1011.365278][ T965] usb 6-1: config 0 descriptor?? [ 1011.751764][T17428] hub 5-0:1.0: USB hub found [ 1011.757148][T17428] hub 5-0:1.0: 1 port detected [ 1011.799811][T17421] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2964'. [ 1012.266311][ T9939] usb 3-1: new high-speed USB device number 76 using dummy_hcd [ 1012.590959][ T9939] usb 3-1: Using ep0 maxpacket: 8 [ 1012.599255][ T9939] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 1012.609472][ T9939] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1012.618994][ T9939] usb 3-1: config 1 interface 0 altsetting 0 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 1012.632368][ T9939] usb 3-1: New USB device found, idVendor=0225, idProduct=0000, bcdDevice= 0.00 [ 1012.642659][ T9939] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1012.658498][ T9939] hub 3-1:1.0: bad descriptor, ignoring hub [ 1012.664434][ T9939] hub 3-1:1.0: probe with driver hub failed with error -5 [ 1012.672440][ T9939] cdc_wdm 3-1:1.0: skipping garbage [ 1012.677961][ T9939] cdc_wdm 3-1:1.0: probe with driver cdc_wdm failed with error -22 [ 1012.954672][ T29] audit: type=1326 audit(1732175844.634:57327): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17445 comm="syz.0.2970" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fde31d7e819 code=0x0 [ 1013.871356][ T965] usb 6-1: USB disconnect, device number 54 [ 1014.682849][T17463] SELinux: Context is not valid (left unmapped). [ 1015.474331][T13257] usb 3-1: USB disconnect, device number 76 [ 1015.777895][T17473] netlink: 'syz.2.2976': attribute type 11 has an invalid length. [ 1015.919574][T17478] netlink: 'syz.3.2977': attribute type 9 has an invalid length. [ 1015.927495][T17478] netlink: 399 bytes leftover after parsing attributes in process `syz.3.2977'. [ 1016.840782][T17482] vhci_hcd vhci_hcd.0: pdev(0) rhport(0) sockfd(3) [ 1016.847335][T17482] vhci_hcd vhci_hcd.0: devid(0) speed(4) speed_str(wireless) [ 1017.035450][T17487] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1017.154697][T17482] vhci_hcd vhci_hcd.0: Device attached [ 1017.155645][T17494] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1017.198469][T17482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1017.207353][T17482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1017.234521][T17482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1017.333609][T13257] vhci_hcd: vhci_device speed not set [ 1017.350444][T17482] vhci_hcd: Failed attach request for unsupported USB speed: UNKNOWN [ 1017.393619][T13257] usb 33-1: new full-speed USB device number 7 using vhci_hcd [ 1017.433759][T17487] vhci_hcd vhci_hcd.0: pdev(0) rhport(7) sockfd(18) [ 1017.440391][T17487] vhci_hcd vhci_hcd.0: devid(0) speed(1) speed_str(low-speed) [ 1017.475697][T17487] vhci_hcd vhci_hcd.0: Device attached [ 1017.565749][T17503] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1018.083168][T17499] vhci_hcd: connection closed [ 1018.083385][ T3455] vhci_hcd: stop threads [ 1018.085543][T17488] vhci_hcd: connection reset by peer [ 1018.088249][ T3455] vhci_hcd: release socket [ 1018.153318][ T3455] vhci_hcd: disconnect device [ 1018.183227][ T3455] vhci_hcd: stop threads [ 1018.187808][ T3455] vhci_hcd: release socket [ 1018.198994][ T3455] vhci_hcd: disconnect device [ 1020.823951][T17526] workqueue: Failed to create a rescuer kthread for wq "nbd2-recv": -EINTR [ 1020.825231][T17526] block (null): Could not allocate knbd recv work queue. [ 1020.841303][T17526] nbd: failed to add new device [ 1021.938523][ T29] audit: type=1326 audit(1732175853.629:57328): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17545 comm="syz.3.2993" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f762e37e819 code=0x0 [ 1022.151237][T14702] usb 1-1: new low-speed USB device number 84 using dummy_hcd [ 1022.311064][T14702] usb 1-1: Invalid ep0 maxpacket: 32 [ 1022.441047][T14702] usb 1-1: new low-speed USB device number 85 using dummy_hcd [ 1022.546981][T13257] vhci_hcd: vhci_device speed not set [ 1022.610924][T14702] usb 1-1: Invalid ep0 maxpacket: 32 [ 1022.617600][T14702] usb usb1-port1: attempt power cycle [ 1022.928184][T17554] sp0: Synchronizing with TNC [ 1022.980119][T14702] usb 1-1: new low-speed USB device number 86 using dummy_hcd [ 1023.041395][T14702] usb 1-1: Invalid ep0 maxpacket: 32 [ 1023.170943][T14702] usb 1-1: new low-speed USB device number 87 using dummy_hcd [ 1023.211178][T14702] usb 1-1: Invalid ep0 maxpacket: 32 [ 1023.220161][T14702] usb usb1-port1: unable to enumerate USB device [ 1024.460364][T14702] usb 2-1: new high-speed USB device number 66 using dummy_hcd [ 1024.999952][T14702] usb 2-1: Using ep0 maxpacket: 16 [ 1025.006802][T14702] usb 2-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1025.019106][T14702] usb 2-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1025.049835][T14702] usb 2-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1025.059342][T14702] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1025.068156][T14702] usb 2-1: Product: syz [ 1025.177360][T14702] usb 2-1: Manufacturer: syz [ 1025.186476][T14702] usb 2-1: SerialNumber: syz [ 1025.199395][T14702] usb 2-1: config 0 descriptor?? [ 1025.215338][T14702] em28xx 2-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1025.235820][T17588] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=51 sclass=netlink_route_socket pid=17588 comm=syz.2.3005 [ 1025.256489][T14702] em28xx 2-1:0.0: Audio interface 0 found (Vendor Class) [ 1025.904694][T14702] em28xx 2-1:0.0: unknown em28xx chip ID (0) [ 1025.930358][T14702] em28xx 2-1:0.0: Config register raw data: 0xfffffffb [ 1025.977306][T13257] usb 1-1: new high-speed USB device number 88 using dummy_hcd [ 1026.175589][T14702] em28xx 2-1:0.0: AC97 chip type couldn't be determined [ 1026.183629][T14702] em28xx 2-1:0.0: No AC97 audio processor [ 1026.280574][ T29] audit: type=1400 audit(1732175857.921:57329): avc: denied { bind } for pid=17596 comm="syz.5.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1026.464072][ T29] audit: type=1400 audit(1732175857.921:57330): avc: denied { listen } for pid=17596 comm="syz.5.3007" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=vsock_socket permissive=1 [ 1026.509575][T14702] usb 2-1: USB disconnect, device number 66 [ 1026.571822][T14702] em28xx 2-1:0.0: Disconnecting em28xx [ 1026.618006][T13257] usb 1-1: Using ep0 maxpacket: 8 [ 1026.627900][T13257] usb 1-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 4.c9 [ 1026.637145][T13257] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1026.645243][T13257] usb 1-1: Product: syz [ 1026.649523][T13257] usb 1-1: Manufacturer: syz [ 1026.654136][T13257] usb 1-1: SerialNumber: syz [ 1026.654683][T14702] em28xx 2-1:0.0: Freeing device [ 1026.660810][T13257] usb 1-1: config 0 descriptor?? [ 1026.680234][T13257] ftdi_sio 1-1:0.0: FTDI USB Serial Device converter detected [ 1026.688052][T13257] ftdi_sio ttyUSB0: unknown device type: 0x4c9 [ 1027.162311][T17615] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3009'. [ 1027.660916][T17619] netlink: 'syz.5.3012': attribute type 9 has an invalid length. [ 1027.668892][T17619] netlink: 399 bytes leftover after parsing attributes in process `syz.5.3012'. [ 1028.100708][ T5939] usb 6-1: new high-speed USB device number 55 using dummy_hcd [ 1028.338331][ T5939] usb 6-1: Using ep0 maxpacket: 16 [ 1028.460012][ T5939] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1028.605964][ T5939] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1028.730889][ T5939] usb 6-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1028.753990][ T5939] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1028.809350][ T965] usb 1-1: USB disconnect, device number 88 [ 1028.816108][ T965] ftdi_sio 1-1:0.0: device disconnected [ 1028.887806][ T5939] usb 6-1: Product: syz [ 1028.892011][ T5939] usb 6-1: Manufacturer: syz [ 1028.896620][ T5939] usb 6-1: SerialNumber: syz [ 1028.907312][ T5939] usb 6-1: config 0 descriptor?? [ 1029.093934][ T5939] em28xx 6-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1029.107708][ T5939] em28xx 6-1:0.0: Audio interface 0 found (Vendor Class) [ 1029.223461][T17642] ubi: mtd0 is already attached to ubi0 [ 1029.417704][ T965] usb 1-1: new high-speed USB device number 89 using dummy_hcd [ 1029.587449][ T965] usb 1-1: Using ep0 maxpacket: 8 [ 1029.598619][ T965] usb 1-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid maxpacket 56832, setting to 1024 [ 1029.627419][ T965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 1024 [ 1029.647413][ T965] usb 1-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 32 [ 1029.668097][ T965] usb 1-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 1029.687362][ T965] usb 1-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 1029.696422][ T965] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1029.735397][ T5939] em28xx 6-1:0.0: unknown em28xx chip ID (0) [ 1029.762250][ T5939] em28xx 6-1:0.0: Config register raw data: 0xfffffffb [ 1030.004323][ T965] usb 1-1: GET_CAPABILITIES returned 0 [ 1030.011626][ T965] usbtmc 1-1:16.0: can't read capabilities [ 1030.132241][ T5939] em28xx 6-1:0.0: AC97 chip type couldn't be determined [ 1030.139776][ T5939] em28xx 6-1:0.0: No AC97 audio processor [ 1030.150213][ T5939] usb 6-1: USB disconnect, device number 55 [ 1030.157473][ T5939] em28xx 6-1:0.0: Disconnecting em28xx [ 1030.164792][ T5939] em28xx 6-1:0.0: Freeing device [ 1030.731542][T17640] netlink: 'syz.0.3018': attribute type 4 has an invalid length. [ 1030.818834][T17650] netlink: 'syz.0.3018': attribute type 4 has an invalid length. [ 1030.879679][T17640] afs: Unknown parameter '5ݮjR#\G 7dyn' [ 1030.901646][T14702] usb 1-1: USB disconnect, device number 89 [ 1031.637239][T17659] hub 5-0:1.0: USB hub found [ 1031.642803][T17659] hub 5-0:1.0: 1 port detected [ 1033.048776][T17669] : renamed from lo (while UP) [ 1033.054196][T17669] FAULT_INJECTION: forcing a failure. [ 1033.054196][T17669] name failslab, interval 1, probability 0, space 0, times 0 [ 1033.090600][T17669] CPU: 0 UID: 0 PID: 17669 Comm: syz.3.3026 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 1033.101055][T17669] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1033.111117][T17669] Call Trace: [ 1033.114398][T17669] [ 1033.117330][T17669] dump_stack_lvl+0x16c/0x1f0 [ 1033.122024][T17669] should_fail_ex+0x497/0x5b0 [ 1033.126715][T17669] ? fs_reclaim_acquire+0xae/0x150 [ 1033.131845][T17669] should_failslab+0xc2/0x120 [ 1033.136537][T17669] __kmalloc_node_track_caller_noprof+0xcf/0x430 [ 1033.142874][T17669] ? device_rename+0x88/0x230 [ 1033.147537][T17669] kstrdup+0x3c/0x70 [ 1033.151428][T17669] device_rename+0x88/0x230 [ 1033.155920][T17669] dev_change_name+0x2b5/0x920 [ 1033.160666][T17669] ? __pfx_dev_change_name+0x10/0x10 [ 1033.165940][T17669] ? dev_ioctl+0x3ed/0x10c0 [ 1033.170420][T17669] ? full_name_hash+0xbc/0x110 [ 1033.175163][T17669] ? netdev_name_node_lookup+0x127/0x180 [ 1033.180775][T17669] ? trace_contention_end+0xea/0x140 [ 1033.186043][T17669] dev_ifsioc+0x6a5/0x10b0 [ 1033.190451][T17669] ? __pfx_dev_ifsioc+0x10/0x10 [ 1033.195277][T17669] ? __pfx___mutex_lock+0x10/0x10 [ 1033.200284][T17669] ? __pfx_lock_release+0x10/0x10 [ 1033.205284][T17669] ? cap_capable+0x1cf/0x240 [ 1033.209851][T17669] ? bpf_lsm_capable+0x9/0x10 [ 1033.214513][T17669] dev_ioctl+0x3fe/0x10c0 [ 1033.218821][T17669] sock_do_ioctl+0x19e/0x280 [ 1033.223398][T17669] ? __pfx_sock_do_ioctl+0x10/0x10 [ 1033.228494][T17669] ? ioctl_has_perm.constprop.0.isra.0+0x2ea/0x460 [ 1033.234979][T17669] ? ioctl_has_perm.constprop.0.isra.0+0x2f3/0x460 [ 1033.241461][T17669] ? __pfx_ioctl_has_perm.constprop.0.isra.0+0x10/0x10 [ 1033.248291][T17669] sock_ioctl+0x228/0x6c0 [ 1033.252606][T17669] ? __pfx_sock_ioctl+0x10/0x10 [ 1033.257438][T17669] ? selinux_file_ioctl+0x180/0x270 [ 1033.262613][T17669] ? selinux_file_ioctl+0xb4/0x270 [ 1033.267703][T17669] ? __pfx_sock_ioctl+0x10/0x10 [ 1033.272534][T17669] __x64_sys_ioctl+0x190/0x200 [ 1033.277275][T17669] do_syscall_64+0xcd/0x250 [ 1033.281763][T17669] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1033.287648][T17669] RIP: 0033:0x7f762e37e819 [ 1033.292038][T17669] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1033.311621][T17669] RSP: 002b:00007f762f173038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1033.320184][T17669] RAX: ffffffffffffffda RBX: 00007f762e535fa0 RCX: 00007f762e37e819 [ 1033.328134][T17669] RDX: 0000000020000000 RSI: 0000000000008923 RDI: 0000000000000004 [ 1033.336088][T17669] RBP: 00007f762f173090 R08: 0000000000000000 R09: 0000000000000000 [ 1033.344034][T17669] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 1033.351981][T17669] R13: 0000000000000000 R14: 00007f762e535fa0 R15: 00007ffdd6c80c08 [ 1033.359939][T17669] [ 1033.573800][T17671] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3027'. [ 1033.675799][T17681] netlink: 20 bytes leftover after parsing attributes in process `syz.5.3028'. [ 1034.120730][T17679] IPVS: set_ctl: invalid protocol: 92 224.0.0.1:20002 [ 1034.127693][ T5939] usb 2-1: new high-speed USB device number 67 using dummy_hcd [ 1034.155332][T17679] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3030'. [ 1034.312492][ T5939] usb 2-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 1034.322981][ T5939] usb 2-1: config 1 has no interface number 0 [ 1034.379479][ T5939] usb 2-1: config 1 interface 1 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 1034.408494][ T5939] usb 2-1: Duplicate descriptor for config 1 interface 1 altsetting 0, skipping [ 1034.435404][ T5887] usb 6-1: new high-speed USB device number 56 using dummy_hcd [ 1034.466341][ T5939] usb 2-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 1034.475622][ T5939] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1034.483618][ T5939] usb 2-1: Product: syz [ 1034.494235][ T5939] usb 2-1: Manufacturer: syz [ 1034.500355][ T5939] usb 2-1: SerialNumber: syz [ 1034.806407][ T5887] usb 6-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1035.518100][ T5887] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1035.562311][ T5887] usb 6-1: config 0 descriptor?? [ 1036.671998][T17696] 9pnet: Unknown protocol version 9 [ 1036.766337][ T5887] hackrf 6-1:0.0: usb_control_msg() failed -71 request 0e [ 1036.779580][ T5939] cdc_ncm 2-1:1.1: bind() failure [ 1036.793850][ T5887] hackrf 6-1:0.0: Could not detect board [ 1036.799544][ T5887] hackrf 6-1:0.0: probe with driver hackrf failed with error -71 [ 1036.824260][ T5887] usb 6-1: USB disconnect, device number 56 [ 1037.010405][T17711] netlink: 209192 bytes leftover after parsing attributes in process `syz.2.3037'. [ 1037.020366][T17711] netlink: get zone limit has 8 unknown bytes [ 1037.738924][T14702] usb 2-1: USB disconnect, device number 67 [ 1038.120407][T17715] ubi: mtd0 is already attached to ubi0 [ 1038.755531][T17736] netlink: 'syz.1.3042': attribute type 29 has an invalid length. [ 1038.773361][T17736] netlink: 'syz.1.3042': attribute type 29 has an invalid length. [ 1038.790966][T17736] netlink: 596 bytes leftover after parsing attributes in process `syz.1.3042'. [ 1039.413750][ T29] audit: type=1326 audit(1732175871.097:57331): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=17737 comm="syz.1.3044" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7f348db7e819 code=0x0 [ 1039.806337][T17750] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3045'. [ 1041.048987][T17769] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3052'. [ 1041.149375][T17771] netlink: 209192 bytes leftover after parsing attributes in process `syz.0.3051'. [ 1041.159202][T17771] netlink: get zone limit has 8 unknown bytes [ 1042.921151][T17786] ubi: mtd0 is already attached to ubi0 [ 1043.657452][T17793] netlink: 'syz.0.3055': attribute type 11 has an invalid length. [ 1044.400416][T17801] FAULT_INJECTION: forcing a failure. [ 1044.400416][T17801] name failslab, interval 1, probability 0, space 0, times 0 [ 1044.414094][T17801] CPU: 0 UID: 0 PID: 17801 Comm: syz.1.3062 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 1044.424501][T17801] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1044.434533][T17801] Call Trace: [ 1044.437792][T17801] [ 1044.440705][T17801] dump_stack_lvl+0x16c/0x1f0 [ 1044.445365][T17801] should_fail_ex+0x497/0x5b0 [ 1044.450023][T17801] ? fs_reclaim_acquire+0xae/0x150 [ 1044.455130][T17801] should_failslab+0xc2/0x120 [ 1044.459793][T17801] kmem_cache_alloc_noprof+0x6e/0x2f0 [ 1044.465149][T17801] ? security_inode_alloc+0x3b/0x2b0 [ 1044.470417][T17801] security_inode_alloc+0x3b/0x2b0 [ 1044.475513][T17801] inode_init_always_gfp+0xce4/0x1030 [ 1044.480877][T17801] alloc_inode+0x82/0x230 [ 1044.485187][T17801] sock_alloc+0x40/0x280 [ 1044.489405][T17801] do_accept+0xf8/0x530 [ 1044.493540][T17801] ? do_raw_spin_lock+0x12d/0x2c0 [ 1044.498543][T17801] ? __pfx_do_accept+0x10/0x10 [ 1044.503292][T17801] __sys_accept4+0xfe/0x1b0 [ 1044.507772][T17801] ? __pfx___sys_accept4+0x10/0x10 [ 1044.512863][T17801] ? __pfx_ksys_write+0x10/0x10 [ 1044.517692][T17801] __x64_sys_accept4+0x96/0x100 [ 1044.522521][T17801] ? lockdep_hardirqs_on+0x7c/0x110 [ 1044.527698][T17801] do_syscall_64+0xcd/0x250 [ 1044.532181][T17801] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1044.538070][T17801] RIP: 0033:0x7f348db7e819 [ 1044.542471][T17801] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 1044.562063][T17801] RSP: 002b:00007f348e9e1038 EFLAGS: 00000246 ORIG_RAX: 0000000000000120 [ 1044.570466][T17801] RAX: ffffffffffffffda RBX: 00007f348dd35fa0 RCX: 00007f348db7e819 [ 1044.578429][T17801] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000003 [ 1044.586378][T17801] RBP: 00007f348e9e1090 R08: 0000000000000000 R09: 0000000000000000 [ 1044.594327][T17801] R10: 0000000000080000 R11: 0000000000000246 R12: 0000000000000001 [ 1044.602275][T17801] R13: 0000000000000000 R14: 00007f348dd35fa0 R15: 00007fff0017bea8 [ 1044.610242][T17801] [ 1044.997704][T17809] netlink: 209192 bytes leftover after parsing attributes in process `syz.3.3063'. [ 1045.007172][T17809] netlink: get zone limit has 8 unknown bytes [ 1047.449896][T17830] xt_TPROXY: Can be used only with -p tcp or -p udp [ 1049.670149][T17848] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3076'. [ 1050.183096][ T965] usb 3-1: new high-speed USB device number 77 using dummy_hcd [ 1050.240852][ T29] audit: type=1400 audit(1732175882.179:57332): avc: denied { listen } for pid=17850 comm="syz.1.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1050.444779][ T965] usb 3-1: New USB device found, idVendor=1d50, idProduct=6089, bcdDevice=d0.1d [ 1050.548130][ T965] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1050.628087][ T29] audit: type=1400 audit(1732175882.179:57333): avc: denied { accept } for pid=17850 comm="syz.1.3077" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=tipc_socket permissive=1 [ 1050.674376][ T965] usb 3-1: config 0 descriptor?? [ 1050.913491][ T965] hackrf 3-1:0.0: usb_control_msg() failed -71 request 0e [ 1050.932532][ T965] hackrf 3-1:0.0: Could not detect board [ 1050.945535][ T965] hackrf 3-1:0.0: probe with driver hackrf failed with error -71 [ 1050.969807][ T965] usb 3-1: USB disconnect, device number 77 [ 1051.080693][ T1286] ieee802154 phy0 wpan0: encryption failed: -22 [ 1051.216301][ T5889] usb 2-1: new high-speed USB device number 68 using dummy_hcd [ 1051.284759][T14702] usb 1-1: new high-speed USB device number 90 using dummy_hcd [ 1051.383103][ T5889] usb 2-1: Using ep0 maxpacket: 8 [ 1051.391980][ T5889] usb 2-1: New USB device found, idVendor=0403, idProduct=f850, bcdDevice= 4.c9 [ 1051.402689][ T5889] usb 2-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1051.410927][ T5889] usb 2-1: Product: syz [ 1051.416476][ T5889] usb 2-1: Manufacturer: syz [ 1051.421204][ T5889] usb 2-1: SerialNumber: syz [ 1051.427823][ T5889] usb 2-1: config 0 descriptor?? [ 1051.435172][ T5889] ftdi_sio 2-1:0.0: FTDI USB Serial Device converter detected [ 1051.443590][ T5889] ftdi_sio ttyUSB0: unknown device type: 0x4c9 [ 1051.450820][T14702] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 1051.464283][T14702] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 1051.474097][T14702] usb 1-1: New USB device found, idVendor=2294, idProduct=425a, bcdDevice=8f.f6 [ 1051.483349][T14702] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1051.499232][T14702] usb 1-1: config 0 descriptor?? [ 1051.828287][ T5939] usb 3-1: new high-speed USB device number 78 using dummy_hcd [ 1051.942928][T17872] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1052.042713][ T5939] usb 3-1: Using ep0 maxpacket: 16 [ 1052.070898][ T5939] usb 3-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xF3, changing to 0x83 [ 1052.253052][ T5939] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 0, changing to 7 [ 1052.366460][ T5939] usb 3-1: New USB device found, idVendor=2040, idProduct=0264, bcdDevice=4e.d1 [ 1052.381962][ T5939] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 1052.401323][ T5939] usb 3-1: Product: syz [ 1052.410041][ T5939] usb 3-1: Manufacturer: syz [ 1052.419942][ T5939] usb 3-1: SerialNumber: syz [ 1052.430560][ T5939] usb 3-1: config 0 descriptor?? [ 1052.454717][ T5939] em28xx 3-1:0.0: New device syz syz @ 480 Mbps (2040:0264, interface 0, class 0) [ 1052.547596][ T5939] em28xx 3-1:0.0: Audio interface 0 found (Vendor Class) [ 1052.968910][ C1] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1053.024138][T17876] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 1053.056649][ T3455] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1053.064925][ T3455] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1053.100223][ T5939] em28xx 3-1:0.0: unknown em28xx chip ID (0) [ 1053.107488][ T5939] em28xx 3-1:0.0: Config register raw data: 0xfffffffb [ 1053.134599][ T54] BUG: sleeping function called from invalid context at net/core/sock.c:3619 [ 1053.143749][ T54] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 54, name: kworker/u9:0 [ 1053.153303][ T54] preempt_count: 1, expected: 0 [ 1053.158407][ T54] RCU nest depth: 0, expected: 0 [ 1053.163759][ T54] 5 locks held by kworker/u9:0/54: [ 1053.168949][ T54] #0: ffff88802d6e8948 ((wq_completion)hci2#2){+.+.}-{0:0}, at: process_one_work+0x129b/0x1ba0 [ 1053.179556][ T54] #1: ffffc90000bf7d80 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_one_work+0x921/0x1ba0 [ 1053.191097][ T54] #2: ffffffff90158728 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_request_evt+0x763/0xb40 [ 1053.201400][ T54] #3: ffff88807c63c820 (&conn->lock#2){+.+.}-{3:3}, at: sco_connect_cfm+0x2d1/0xc10 [ 1053.211038][ T54] #4: ffff88807cde6258 (sk_lock-AF_BLUETOOTH-BTPROTO_SCO){+.+.}-{0:0}, at: sco_connect_cfm+0x3ee/0xc10 [ 1053.222523][ T54] Preemption disabled at: [ 1053.222535][ T54] [<0000000000000000>] 0x0 [ 1053.231522][ T54] CPU: 0 UID: 0 PID: 54 Comm: kworker/u9:0 Not tainted 6.12.0-syzkaller-03657-g43fb83c17ba2 #0 [ 1053.241856][ T54] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 1053.251924][ T54] Workqueue: hci2 hci_rx_work [ 1053.256636][ T54] Call Trace: [ 1053.259929][ T54] [ 1053.262869][ T54] dump_stack_lvl+0x16c/0x1f0 [ 1053.267569][ T54] __might_resched+0x3c0/0x5e0 [ 1053.272361][ T54] ? __pfx_lock_release+0x10/0x10 [ 1053.277397][ T54] ? sco_connect_cfm+0x3ee/0xc10 [ 1053.282363][ T54] ? __pfx___might_resched+0x10/0x10 [ 1053.287652][ T54] ? lock_acquire+0x2f/0xb0 [ 1053.292173][ T54] ? sco_connect_cfm+0x3ee/0xc10 [ 1053.297139][ T54] lock_sock_nested+0x4b/0xf0 [ 1053.301826][ T54] ? sco_connect_cfm+0x3ee/0xc10 [ 1053.306800][ T54] sco_connect_cfm+0x3ee/0xc10 [ 1053.311602][ T54] ? __pfx_sco_connect_cfm+0x10/0x10 [ 1053.316906][ T54] ? __pfx_sco_connect_cfm+0x10/0x10 [ 1053.322200][ T54] hci_conn_request_evt+0x7cd/0xb40 [ 1053.327414][ T54] ? __pfx_hci_conn_request_evt+0x10/0x10 [ 1053.333144][ T54] ? wait_for_completion_state+0x11/0x40 [ 1053.338790][ T54] ? __asan_memcpy+0x3c/0x60 [ 1053.343424][ T54] ? skb_pull_data+0x166/0x210 [ 1053.348223][ T54] hci_event_packet+0x9eb/0x1180 [ 1053.353157][ T54] ? __pfx_hci_conn_request_evt+0x10/0x10 [ 1053.358882][ T54] ? __pfx_hci_event_packet+0x10/0x10 [ 1053.364252][ T54] ? mark_held_locks+0x9f/0xe0 [ 1053.369016][ T54] ? kcov_remote_start+0x3cf/0x6e0 [ 1053.374127][ T54] ? lockdep_hardirqs_on+0x7c/0x110 [ 1053.379333][ T54] hci_rx_work+0x2c6/0x1610 [ 1053.383840][ T54] ? lock_acquire+0x2f/0xb0 [ 1053.388338][ T54] ? process_one_work+0x921/0x1ba0 [ 1053.393452][ T54] process_one_work+0x9c5/0x1ba0 [ 1053.398396][ T54] ? __pfx_lock_acquire.part.0+0x10/0x10 [ 1053.404024][ T54] ? __pfx_process_one_work+0x10/0x10 [ 1053.409394][ T54] ? assign_work+0x1a0/0x250 [ 1053.413985][ T54] worker_thread+0x6c8/0xf00 [ 1053.418582][ T54] ? __pfx_worker_thread+0x10/0x10 [ 1053.423689][ T54] kthread+0x2c1/0x3a0 [ 1053.427761][ T54] ? _raw_spin_unlock_irq+0x23/0x50 [ 1053.432957][ T54] ? __pfx_kthread+0x10/0x10 [ 1053.437553][ T54] ret_from_fork+0x45/0x80 [ 1053.441961][ T54] ? __pfx_kthread+0x10/0x10 [ 1053.446546][ T54] ret_from_fork_asm+0x1a/0x30 [ 1053.451322][ T54] [ 1053.470413][ T5939] em28xx 3-1:0.0: AC97 chip type couldn't be determined [ 1053.496549][ T5939] em28xx 3-1:0.0: No AC97 audio processor [ 1053.505286][ T5939] usb 3-1: USB disconnect, device number 78 [ 1053.512026][ T5939] em28xx 3-1:0.0: Disconnecting em28xx [ 1053.520792][ T5939] em28xx 3-1:0.0: Freeing device [ 1053.590138][ T965] usb 6-1: new high-speed USB device number 57 using dummy_hcd [ 1053.769271][ T965] usb 6-1: New USB device found, idVendor=0cf3, idProduct=9374, bcdDevice=bc.3b [ 1053.781237][ T965] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 1053.793048][ T965] usb 6-1: config 0 descriptor?? [ 1053.868659][ T5939] usb 2-1: USB disconnect, device number 68 [ 1053.875197][ T5939] ftdi_sio 2-1:0.0: device disconnected [ 1054.009155][ T29] audit: type=1400 audit(1732175886.007:57334): avc: denied { map } for pid=17877 comm="syz.5.3085" path="socket:[51891]" dev="sockfs" ino=51891 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=unix_dgram_socket permissive=1 [ 1054.044102][ T965] ath6kl: Failed to submit usb control message: -71 [ 1054.050901][ T965] ath6kl: unable to send the bmi data to the device: -71 [ 1054.058462][ T965] ath6kl: Unable to send get target info: -71 [ 1054.068777][T13257] usb 1-1: USB disconnect, device number 90 [ 1054.079877][ T965] ath6kl: Failed to init ath6kl core: -71 [ 1054.097525][ T965] ath6kl_usb 6-1:0.0: probe with driver ath6kl_usb failed with error -71 [ 1054.110684][ T965] usb 6-1: USB disconnect, device number 57