last executing test programs: 12m41.949933089s ago: executing program 1 (id=72): mkdir(&(0x7f00000002c0)='./file0\x00', 0x0) mkdir(&(0x7f0000000040)='./file1\x00', 0x0) mkdir(&(0x7f0000000000)='./bus\x00', 0x0) mount$overlay(0x0, &(0x7f00000000c0)='./bus\x00', &(0x7f0000000080), 0x0, &(0x7f0000000380)={[{@upperdir={'upperdir', 0x3d, './file1'}}, {@lowerdir={'lowerdir', 0x3d, './file0'}}, {@workdir={'workdir', 0x3d, './bus'}}]}) chdir(&(0x7f0000000140)='./bus\x00') r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='pids.current\x00', 0x275a, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0, r1}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0x0}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) r2 = socket$netlink(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="540000000206010200000000000000000500000005000100060000000d000300686173683a6e6574000000000900020073797a31000000000c00078008000640000000400500050002000000050004"], 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=ANY=[@ANYBLOB='8\x00\x00\x00\n'], 0x38}, 0x1, 0x0, 0x0, 0x10048047}, 0x4000050) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x20) 12m41.690172987s ago: executing program 1 (id=74): r0 = syz_open_dev$vim2m(&(0x7f0000000000), 0x2000000000000005, 0x2) ioctl$vim2m_VIDIOC_ENUM_FMT(r0, 0xc0405602, &(0x7f0000000080)={0x22, 0x1, 0x0, "bb1f000200000080007f28accf050007000000000000000000000000000500", 0x34363248}) 12m41.582274784s ago: executing program 1 (id=75): mkdirat(0xffffffffffffff9c, &(0x7f0000000100)='./file0\x00', 0x10a) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_IO_FLUSHER(0x39, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r1 = getpid() r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) r3 = msgget(0x1, 0x14c) msgrcv(r3, &(0x7f0000000900)={0x0, ""/4096}, 0x1008, 0x1, 0x800) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x8000000}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}, 0x1, 0x0, 0x0, 0x814}, 0x0) sendmsg$NFT_MSG_GETOBJ(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) r7 = syz_open_dev$loop(&(0x7f0000000100), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) ioctl$LOOP_CONFIGURE(r7, 0x4c0a, 0x0) r8 = openat$dma_heap(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl(r8, 0xfffff000, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)=@flushsa={0x14, 0x1c, 0x300, 0x70bd29, 0x25dfdbfb, {0x33}}, 0x14}, 0x1, 0x0, 0x0, 0x44851}, 0x2404c091) 12m40.583955417s ago: executing program 1 (id=76): r0 = syz_usb_connect(0x0, 0x202, 0x0, 0x0) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = syz_open_procfs(0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0xffffffffffffffb3}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000002000)=""/102400, 0x19000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x24, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e23}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x402}, 0x0) sendmsg$IPSET_CMD_CREATE(r2, 0x0, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000040)=0x90000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000240)={@local, 0x1}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000080)={{@local}, @local, 0x0, 0x0, 0x2}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f00000000c0)={{@host}, @host, 0x0, 0x0, 0x1, 0x4}) ioctl$IOCTL_VMCI_QUEUEPAIR_ALLOC(r1, 0x7a8, &(0x7f0000000000)={{@my=0x1}, @my=0x1, 0xf000000, 0x0, 0x421}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x401, 0x1000, 0xffffffff, {}, [@IFLA_AF_SPEC={0x8, 0x1a, 0x0, 0x1, [@AF_BRIDGE={0x4}]}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vcan={{0x9}, {0x4}}}]}, 0x3c}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) prctl$PR_SET_SYSCALL_USER_DISPATCH_ON(0x3b, 0x1, 0x0, 0x0, &(0x7f0000006680)) mkdir(&(0x7f0000000940)='./file0\x00', 0x5b) name_to_handle_at(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', &(0x7f0000000080)=@ocfs2={0xc}, &(0x7f00000000c0), 0x1200) sendmsg$nl_route(r7, 0x0, 0x0) execve(&(0x7f0000000440)='./file0\x00', &(0x7f0000000500)={[&(0x7f0000000480)='vcan\x00', &(0x7f00000004c0)='\x00']}, &(0x7f0000000800)={[&(0x7f0000000580)='!{!*-^\':#.\x00', &(0x7f00000005c0)='vcan\x00', &(0x7f0000000600)='vcan\x00', &(0x7f0000000640)='vcan\x00', &(0x7f0000000680)='\x00', &(0x7f00000006c0)='.{-{^-\'}]\x00', &(0x7f00000007c0)='vcan\x00']}) r8 = openat$audio1(0xffffffffffffff9c, &(0x7f0000000880), 0x200000, 0x0) ioctl$SNDCTL_DSP_SPEED(r8, 0xc0045002, &(0x7f00000008c0)) syz_usb_control_io$printer(r0, &(0x7f00000000c0)={0x14, &(0x7f0000000180)={0x4e7c11f140d514fd, 0x8, 0xa7, {0xa7, 0x23, "024c26f14604fa2d2ce1b9728f43e54a46a93213ccfe0527097f405a71eeb58fc2c1f538ce5ab16ac15706a12d84211cf834d385840f3262614bdc8dee471286a4eef1a6a791baf924825ac0d0e53472ba6d3de2a6f3ab82aa8a30f20dd5ff4cfa848811c75b0a357d9354f7173e254b078303d62d4ec93706f9ec88c0dc682654284b2b633b85fa65c4a75b14730cf25a9c59b64ab85e054466dd74694bc8251e3e5b105d"}}, &(0x7f0000000040)={0x0, 0x3, 0x4, @lang_id={0x4, 0x3, 0x44a}}}, &(0x7f00000003c0)={0x34, &(0x7f0000000100)={0x0, 0xd, 0x25, "2c6e9b18a6edb9591a89a0de43245b43bbffc6d70101a7e1c0f6409e8673ac61934ed8168e"}, &(0x7f0000000240)={0x0, 0xa, 0x1, 0x5f}, &(0x7f0000000280)={0x0, 0x8, 0x1, 0x6}, &(0x7f00000002c0)={0x20, 0x0, 0x5f, {0x5d, "aad1bd951b9b5a2598773964fafd497e8719a49c068fd8c5886146fe84099d1bef067b29e1457c2c85b6fcb59fabfa9adcb7dbd5d891237e2ebce7701b8796726d8ea1c340747056f1a08e58d8d5a75fc561c39c1524e515a88d89809f"}}, &(0x7f0000000900)={0x20, 0x1, 0x1, 0x8}, &(0x7f0000000380)={0x20, 0x0, 0x1}}) 12m39.382693921s ago: executing program 1 (id=79): sendmsg$GTP_CMD_DELPDP(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4040090}, 0x2400c8c1) r0 = openat$dir(0xffffffffffffff9c, &(0x7f00000000c0)='.\x00', 0x0, 0x83) ioctl$FS_IOC_GET_ENCRYPTION_PWSALT(r0, 0x40086602, &(0x7f0000000000)) r1 = socket$phonet(0x23, 0x2, 0x1) sendmmsg$sock(r1, &(0x7f0000002fc0)=[{{&(0x7f0000000100)=@l2tp={0x2, 0x0, @remote, 0x1}, 0x80, &(0x7f00000003c0)=[{&(0x7f00000001c0)="fbaafd88a1bfe4f304c9ae4b4404419049c3e824f2f26f5abb97d0db535427e050ee66736e06e5cec4276e4901511c186868896b1939351cc3d6aabe107310c822485e3477f751c26634b05c2870a585496d13aa94efca8768982f48f3728b3c6fb2030672b956c96f1fed942f32c1776f4e396a3161441865c475dd2dbc176eae6b96eefd0d47e85e3b07b3068fa3d6491b8bff0cc7c7fecf984d71e28db6e67f66c470c33335f44e86b08021490d26cfb192aa8792a842db2b1715a0fec83d", 0xc0}, {&(0x7f0000000080)}, {&(0x7f0000000280)="ceec379e0be0cd13f4cdbd91d8da4b51111d613091814d7bd1c4a7a74969cf5ffd8bb62ba9b67091bc77076201589b03eea199d7683f90f9437a69d5648dde111c0385a80e1a243029b92e7865e8a93ab533b086f759bb3ec5f6ecbfeabe5509b70ea3afc2e0aca6fe612bed72384cf3a28718afd5885afd161f24bf30ae545f90dfad59349cdd822d35345b6c55cc8127c084618c975b9d3e5615546450e6b2d8386213d2b5b207cdaf2833ca09a38feb2475119394b260738d95af4aa9209dbf66d6e42f40f5644c76f50780271fc2be1c36dad389736d01a385", 0xdb}, {&(0x7f0000000380)="fc6c0b2df831754851dcdb", 0xb}], 0x4, &(0x7f0000000400)=[@txtime={{0x18}}, @timestamping={{0x14}}, @mark={{0x14, 0x1, 0x24, 0x4}}, @txtime={{0x18, 0x1, 0x3d, 0x87f8}}, @txtime={{0x18, 0x1, 0x3d, 0x9}}, @timestamping={{0x14, 0x1, 0x25, 0x7ff}}, @txtime={{0x18, 0x1, 0x3d, 0x6}}, @mark={{0x14, 0x1, 0x24, 0xf4c7}}, @txtime={{0x18, 0x1, 0x3d, 0x60000000000000}}], 0xd8}}, {{&(0x7f0000000500)=@generic={0x25, "d156b628d40612e87cc47a33c6057d7891b5ae16e5fd1368cfea1263dc80ce572c96841f779018249aed31365a8d8f98273ea72eb03d6086f567a351fd3d2bc8f004c5cfc3f6787dbf8bdf9e8a0677024258cfc9c5bbcc04527df3199cfd1bfea95216e450f26427214228df32e40e14b0752c8a32add19c9d2e871afd79"}, 0x80, &(0x7f0000001740)=[{&(0x7f0000000580)="d032ee260ad9e81e9d8fa63910885db04be35a94e5cf78dcf51f1b63e355ba823d80a33fb4062c6ebe533cf71e71842450e737fbf918f34a1099bdeefbc7f473c6277968badc184bc697535736abe97599f0ab23c148dce38a9342475eb971766b570b81b167d390bb25c6f2c24e1da4705297de04f7134af205350a158da60454eedfd723197df4bcf3be78b81dc6a43dd855", 0x93}, {&(0x7f0000000640)="a3932cc5708c0f21d391da2efb9e12310d1c894a6f72a92519ce232a585e2c1867abc20f35d8e1aa44a0d7bf328adc57b90f4b9a670d8ac57cbaf0787a6709393693429fe2a27af1e3f2a731054cc547cde7c97e29db2d1badd7bff26a169450da71a0451a8d49cae425b3828b681061931b4604bcce60fa64b04392139bcc083b130b10c7f22cb30f755f206bb492fbee9c9b26cd6fc3733567dc711d80c1e13b61c92ba9087946320885dd7f9399386f099f74e9a4a0d300568698dd2c70888c417e91a0f6e622cf5e862c845e8435d57193d43d62e41d20475a9a9701e6fddec8983b4ce6b5806b547e43db0a4c069a995d4c11", 0xf5}, {&(0x7f0000000740)="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", 0x1000}], 0x3, &(0x7f0000001780)=[@timestamping={{0x14}}, @timestamping={{0x14, 0x1, 0x25, 0xf9}}], 0x30}}, {{&(0x7f00000017c0)=@rc={0x1f, @any, 0x4}, 0x80, &(0x7f0000002d80)=[{&(0x7f0000001840)="e506b66f9a2f3b6a860b512f3ae787fbda33da15cf35f8d8a835df487945269a9aab0ca991964acfbd8006c1da9eaeed99c67d257156daa13dea930831490927704173f36368c61e2ab80525217571264065a38a8bc51fc55cfa6426fa12ec26c074a26d9d1c2b9e9efacc62c5880bf69b28b7bfd38430ae18fe886de9d7cf325e655adb9769905b29e42bba3cb44f6b03", 0x91}, {&(0x7f0000001900)="ea1bfd209f54aef1f6b6d9807c1be433bce73a5293983a0701cd3f9e35cbb88b3e32a5d1169ff6671fb5f979fd1f089eb1b8a2087d9e1e3f3245b1eddf8e56d6e6dc2f5a59ec24bfc57e0a52dd038c6ce56b5ca0e9396873136de1b733df98e90cbe1066152474b7ce6bf5dfb448acc4395e2e8f65f93bb0db8c7b270e6b24afc3c72ab2a530509f8aa50c3a6c8003d989426c8a312728418e95f79ad89a74ddea89215c10b3e968bb17b083b53e21e9311957af3db2d7ce3271dabd74df7442e5ad18accf773a2d476e609ada1a2743a8bd1573b30ed4818d31a971adf37c9f", 0xe0}, {&(0x7f0000001a00)="f917107e587bc8da1b4baf26e9a5dfcd65755efbc5f7432c68e6a7198af4887fbda5e6742c37e5ec9e3c8f6dc4dfc05f80b200b55f61727185c761752ac65211c735c08dd47531694d88edfa6603165ef7d63627d2d37e0500b6c1a959b4052106cb8688f2b866b9bb6bff37f12f350480fea5588a0a95003f9932ee4073983615d18b4078499e2d32da7a958f36b4d8dd3f77e906926bbbb43a126d187a1159bc1e02ff28a46900b1138e58425afa9c2998558b749ac57365f26833e9c1f7ae475766f7e5", 0xc5}, {&(0x7f0000001b00)="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", 0x1000}, {&(0x7f0000002b00)="fdc5ceb107bdff42fa7297fd868741b2289d3d0ce48c6564afe5592c359757439ccac2419a6f31629cd0301ee581768afd5eb5fcfaad877a99bdbd76498731cfb22ef18c6c72f501c9842f4311f8eda9efba9900c600a5e227a158a81085c24c5e8da635c39bb9eefd9a1d86fe11c9288ea81733e1c16cb4c6b0dadbb577a05264b34ff90e68886d3a741496ae6856f329", 0x91}, {&(0x7f0000002bc0)="8e3ca4f8ede7d6c1008a24f875d420a09ef8a88c7a4bc79686895268560ee0244a0b9bb0b3c537d4eae6a22ad72cb4da6e27f0a8be86ffd5918153d06d95c192b999a61b82b35b4c09644ff271c34dae5e641fb5f04dde0eed2b3929650bfcbfcc650c78e1b5cb7e3fb0710fc897357136493c0c422b219a410f19f29141498af01dc224d11fbe11d31337563faff9fd8635cbb91817733e3e86797ed3ab3f73ca1604aa5aa53e346592ef6f6136df65e5", 0xb1}, {&(0x7f0000002c80)="b9ecfc5f7bdb087fb14df68b0b9788b1b97be05a15e5181bce1aafcbf7843f2a3b953a24b3ece919106e1ff5bfe26e0ea6362e59bbfa691f5e156b7137f94fa491e965994f89d2ecf05a2bd16ea0960705f7f4d7c92cb7babd915fc60e55d29cdd9249e8f84691ded0b930472a740c0ed58807b3", 0x74}, {&(0x7f0000002d00)="32b2eaee6fbfe140ff71c949c066d80f71222cf3e70cd3f1b15cb786abb236dec22c3f85d58cf16444c23868c5ce117a7570f98cc02b6fe1fa4db753b3b342021fcb3e8df09645f8", 0x48}], 0x8, &(0x7f0000002e00)=[@timestamping={{0x14, 0x1, 0x25, 0x8}}, @timestamping={{0x14, 0x1, 0x25, 0x5}}, @timestamping={{0x14, 0x1, 0x25, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0xe23}}, @mark={{0x14, 0x1, 0x24, 0xa13}}], 0x78}}, {{&(0x7f0000002e80)=@nl=@unspec, 0x80, &(0x7f0000002f80)=[{&(0x7f0000002f00)}, {&(0x7f0000002f40)}], 0x2}}], 0x4, 0x20004840) r2 = socket$unix(0x1, 0x2, 0x0) bind$unix(r2, &(0x7f0000000000)=@file={0x1, './file0\x00'}, 0x6e) 12m39.329699541s ago: executing program 1 (id=80): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x44080) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB="71759074612c75737271756f74615f626c6f636b5f6861726485696d69743d2c000000000000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r5, 0x8004af7a, &(0x7f0000000140)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000000)="3b000000010006", 0x7) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000380)={0x7ff}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24080, 0x1c4fb}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x34}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) 12m24.06962631s ago: executing program 32 (id=80): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000040)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8044}, 0x44080) mount$tmpfs(0x0, &(0x7f0000000000)='./file0\x00', 0x0, 0x80, &(0x7f00000003c0)=ANY=[@ANYBLOB="71759074612c75737271756f74615f626c6f636b5f6861726485696d69743d2c000000000000"]) read$FUSE(0xffffffffffffffff, &(0x7f0000003480)={0x2020, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x2020) r5 = openat$vnet(0xffffffffffffff9c, &(0x7f00000000c0), 0x2, 0x0) ioctl$VHOST_VDPA_GET_AS_NUM(r5, 0x8004af7a, &(0x7f0000000140)) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, 0x0, 0x0) write(r6, &(0x7f0000000000)="3b000000010006", 0x7) r7 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00'}) ptrace$PTRACE_SECCOMP_GET_METADATA(0x420d, r4, 0x10, &(0x7f0000000380)={0x7ff}) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000004000)=ANY=[], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r9 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000300), r2) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000400)=@newlink={0x34, 0x10, 0xc362e63b3f31ba5f, 0x8000000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x24080, 0x1c4fb}, [@IFLA_IFNAME={0x14, 0x3, 'ipvlan0\x00'}]}, 0x34}}, 0x0) ioctl$IOMMU_TEST_OP_ACCESS_PAGES$syz(0xffffffffffffffff, 0x3ba0, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c582", 0x5) 14.791716636s ago: executing program 5 (id=2543): socket$inet_smc(0x2b, 0x1, 0x0) ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583", @ANYRES64, @ANYRESOCT, @ANYBLOB="da30a051a293f2b2ee898bd9e36d1920e276d20b1d8859514c2264d5d1", @ANYRESDEC=0x0, @ANYRESHEX], 0x0) 13.009945894s ago: executing program 5 (id=2547): prlimit64(0x0, 0xe, 0x0, 0x0) sched_setaffinity(0x0, 0x0, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x1, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r0 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r0, &(0x7f0000019680)=""/102392, 0x18ff8) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) mmap$KVM_VCPU(&(0x7f0000ffb000/0x2000)=nil, 0x930, 0x1000002, 0x4018831, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x6, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfff0, 0x4000}, {0x7, 0x1, 0xb, 0x6, 0x8, 0x10}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r1}, {}, {0x15, 0x0, 0x0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 12.42677442s ago: executing program 3 (id=2549): r0 = fspick(0xffffffffffffffff, &(0x7f0000000180)='./file0/file0\x00', 0x1) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x33, &(0x7f0000000640)={0x1, &(0x7f0000000680)=[{0x6, 0x0, 0x0, 0x2}]}, 0x10) close(r1) fsconfig$FSCONFIG_SET_FD(r0, 0x5, &(0x7f00000001c0)='lowerdir', 0x0, r1) prctl$PR_GET_TSC(0x43, &(0x7f0000000040)) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r2, 0x2, &(0x7f00000000c0)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) ioprio_set$pid(0x2, 0x0, 0x0) r5 = openat$rdma_cm(0xffffffffffffff9c, &(0x7f0000002540), 0x2, 0x0) write$RDMA_USER_CM_CMD_CREATE_ID(r5, &(0x7f0000000140)={0x0, 0x18, 0xfa00, {0x0, &(0x7f0000000040), 0x106}}, 0x20) open_tree(0xffffffffffffff9c, &(0x7f0000000640)='\x00', 0x89901) openat$nullb(0xffffffffffffff9c, &(0x7f0000000000), 0x282, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xffff}, {0x4, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40010}, 0x840) r6 = socket$netlink(0x10, 0x3, 0x9) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000000040)='./file0\x00', 0x1c0) mkdir(&(0x7f0000000100)='./file1\x00', 0x13b) 12.373794496s ago: executing program 5 (id=2550): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r5 = syz_open_procfs(0x0, &(0x7f00000001c0)='fd/3\x00') syz_io_uring_setup(0x4a3d, &(0x7f00000000c0)={0x0, 0x79af, 0x3180, 0x8000, 0x40024e}, &(0x7f0000000340)=0x0, &(0x7f0000000040)=0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(r6, 0x4, &(0x7f0000000000)=0xffb, 0x0, 0x4) syz_io_uring_submit(r6, r7, &(0x7f00000001c0)=@IORING_OP_READ=@pass_buffer={0x16, 0x52, 0x4007, @fd=r5, 0x6, 0x0, 0x0, 0x2, 0x1}) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x11, 0xf, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000085000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x54, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x8000}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x101}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x4004}, 0xd4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x18) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x4000, 0x0, 0x0) socket$nl_sock_diag(0x10, 0x3, 0x4) r10 = socket$inet_udplite(0x2, 0x2, 0x88) socket$inet6(0xa, 0x2, 0x8) setsockopt$IPT_SO_SET_REPLACE(r10, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x380, 0x0, 0x19, 0x0, 0x0, 0x0, 0x2e8, 0x1f0, 0x1f0, 0x2e8, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @dev, 0x0, 0x0, 'wlan1\x00', 'wg1\x00'}, 0x0, 0x1f8, 0x218, 0x0, {0x0, 0xffffffffa0028000}, [@common=@unspec=@quota={{0x38}}, @common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x7f00, 0x8, 0x0, 0x0, 0x0, 0x687c, 0x1}}}]}, @unspec=@TRACE={0x20}}, {{@ip={@empty, @empty, 0x0, 0x0, 'veth0_vlan\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd0}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x3e0) io_uring_enter(0xffffffffffffffff, 0x0, 0xcb, 0xf, &(0x7f0000000000), 0x18) 10.305060655s ago: executing program 5 (id=2552): r0 = syz_open_dev$evdev(0x0, 0x20000, 0x101000) ioctl$EVIOCGLED(r0, 0x40284504, &(0x7f0000000000)=""/56) r1 = syz_open_dev$video(0x0, 0x8, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r2}, 0x18) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) setrlimit(0x6, &(0x7f0000000180)={0x1000, 0x10000}) r3 = getpid() sched_setscheduler(r3, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) syz_open_dev$char_usb(0xc, 0xb4, 0x1) r6 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000300), 0x90500, 0x0) ioctl$FBIOBLANK(r6, 0x4611, 0x4) syz_emit_vhci(&(0x7f0000000040)=ANY=[@ANYBLOB], 0x15) ioctl$VIDIOC_TRY_FMT(r1, 0xc0d05640, &(0x7f0000000080)={0xa, @pix={0x9, 0x6, 0x31363553, 0x8, 0x7, 0xfffffff7, 0x7, 0x80000000, 0x0, 0x8, 0x0, 0x6}}) syz_open_procfs(0xffffffffffffffff, &(0x7f0000000080)='projid_map\x00') r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x1, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000580)) ioctl$PPPIOCSACTIVE(r7, 0x40107446, &(0x7f00000001c0)={0x1, &(0x7f0000000000)=[{0x6, 0x0, 0x0, 0xff}]}) close(r7) 10.033978298s ago: executing program 3 (id=2554): r0 = socket$inet(0x2, 0x5, 0x0) getsockopt$inet_int(r0, 0x0, 0x12, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) recvfrom$inet(0xffffffffffffffff, 0x0, 0x0, 0x80, &(0x7f0000000380)={0x2, 0x4e21, @rand_addr=0x64010101}, 0x10) fsmount(0xffffffffffffffff, 0x1, 0x2) sendmsg$SEG6_CMD_SETHMAC(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x20008b}, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000580)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000001a40)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) sendmsg$kcm(r2, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffe5e}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x5048) 8.86396602s ago: executing program 0 (id=2556): r0 = ioctl$KVM_CREATE_VM(0xffffffffffffffff, 0xae01, 0x0) syz_kvm_setup_syzos_vm$x86(r0, &(0x7f0000c00000/0x400000)=nil) ioctl$EVIOCGKEYCODE_V2(0xffffffffffffffff, 0x80284504, &(0x7f0000000280)=""/198) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000740)=@framed, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000200)='sched_switch\x00', r1}, 0x10) prlimit64(0x0, 0xe, &(0x7f00000007c0)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sequencer(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) r2 = syz_open_dev$sndmidi(&(0x7f00000004c0), 0x2, 0x141102) writev(r2, &(0x7f0000000840)=[{&(0x7f00000002c0)="94", 0xf000}, {0x0}], 0x2) mkdir(0x0, 0x0) syz_usb_connect$printer(0x2, 0x0, 0x0, 0x0) fsconfig$FSCONFIG_SET_STRING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001d40)={0x0}, 0x18) getpid() r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100003806"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 8.770846288s ago: executing program 5 (id=2557): r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) r1 = openat(0xffffffffffffff9c, &(0x7f0000000180)='./file1\x00', 0x103000, 0x8d) open$dir(&(0x7f0000000000)='./file1\x00', 0x400080, 0x1c9) r2 = socket(0x10, 0x80002, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x5, 0x8b}, 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x20, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) io_uring_setup(0x497c, &(0x7f00000001c0)) openat$dir(0xffffffffffffff9c, 0x0, 0x0, 0x0) fanotify_init(0x4, 0x400) syz_usb_connect(0x0, 0x36, &(0x7f0000000280)=ANY=[@ANYBLOB="120100008010bd40820514009dbb0000000109022400011b00000009040000022a3e740009058bff7f00001001"], 0x0) openat$sequencer2(0xffffffffffffff9c, &(0x7f0000000240), 0xc2882, 0x0) r3 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r3, &(0x7f0000032680)=""/102392, 0x18ff8) timer_settime(0x0, 0x0, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYRES8=r3], 0x134}, 0x1, 0x0, 0x0, 0x359b171663d45917}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001440)=ANY=[@ANYBLOB="1c0000005e0021a5553f8c6b23cbff070000e5373526a01edb"], 0x1c}}, 0x0) r5 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000400), 0x80140, 0x0) ioctl$TIOCGISO7816(r5, 0x80285442, 0x0) recvmmsg$unix(r2, &(0x7f0000002380)=[{{0x0, 0x0, &(0x7f0000001340)}}], 0x1, 0x34000, 0x0) syz_usb_control_io$uac1(0xffffffffffffffff, 0x0, &(0x7f00000006c0)={0x44, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) socket(0x10, 0x3, 0x0) close(r1) close(0xffffffffffffffff) openat(0xffffffffffffff9c, &(0x7f0000000240)='./file0\x00', 0x42, 0x0) execveat$binfmt(0xffffffffffffff9c, 0x0, &(0x7f0000000280), &(0x7f00000002c0), 0x0) 6.993892163s ago: executing program 4 (id=2558): ioctl$UFFDIO_WRITEPROTECT(0xffffffffffffffff, 0xc018aa06, &(0x7f0000000140)={{&(0x7f0000400000/0xc00000)=nil, 0xc00000}, 0x1}) close_range(0xffffffffffffffff, 0xffffffffffffffff, 0x0) syz_usb_connect(0x5, 0x2d, &(0x7f0000000380)=ANY=[@ANYBLOB="12010000ec31f8104c1302007eec0102030109021b0001000000000904000001098b7500090583", @ANYRES64, @ANYRESOCT, @ANYBLOB="da30a051a293f2b2ee898bd9e36d1920e276d20b1d8859514c2264d5d1", @ANYRESDEC=0x0, @ANYRESHEX], 0x0) 6.874045471s ago: executing program 2 (id=2559): socket$nl_route(0x10, 0x3, 0x0) r0 = openat(0xffffffffffffff9c, &(0x7f00000000c0)='./file1\x00', 0x281c2, 0x0) fcntl$setlease(r0, 0x400, 0x1) fremovexattr(r0, &(0x7f0000000040)=@known='system.posix_acl_default\x00') getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@local, 0x0}, &(0x7f0000000280)=0x14) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, &(0x7f00000002c0)={0x1, 0x0, 0xd, r1, 0x6}, 0xc) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x7, 0xc, &(0x7f0000000300)=ANY=[], 0x0, 0x3, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) openat$uinput(0xffffffffffffff9c, &(0x7f0000000140), 0x2, 0x0) r2 = openat$sysfs(0xffffffffffffff9c, &(0x7f0000002200)='/sys/fs/cgroup', 0x0, 0x0) fchmodat(r2, &(0x7f0000001000)='.\x00', 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0xa, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r3 = getpid() sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) sched_setscheduler(r3, 0x1, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f0000000400)=@abs={0x0, 0x0, 0x4e23}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r4, &(0x7f00000000c0), 0x10106, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xa, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) inotify_add_watch(0xffffffffffffffff, 0x0, 0x42000773) r6 = getpid() sched_setscheduler(r6, 0x2, &(0x7f00000001c0)=0x7) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000034000000340000000c00000004000000010000840203000000000000030000000000000000000000000000010500000020000000000000000000000b02000000006100302e"], 0x0, 0x58}, 0x28) sendmsg$AUDIT_USER(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000180)={&(0x7f00000004c0)=ANY=[@ANYBLOB], 0xd4}, 0x1, 0x0, 0x0, 0x4}, 0x0) r7 = socket(0x10, 0x3, 0x0) write(r7, &(0x7f0000000080)="1400000052004f030e789e7ee2ce2fa4ff612d27", 0x14) 6.364513085s ago: executing program 0 (id=2560): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) read$msr(0xffffffffffffffff, &(0x7f0000032680)=""/102400, 0x19000) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r5, &(0x7f0000000140)={0x11, 0x0, r6, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r5, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000834) r7 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r7) r8 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r8, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r8, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x4}, 0x10) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r9, &(0x7f0000000000), 0xffffff6a) sendfile(r8, r9, 0x0, 0xffffffff000) getsockname$packet(r5, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 5.918098427s ago: executing program 2 (id=2561): prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x88}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000240)=0x7) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000000c0)='sched_switch\x00', r1}, 0x18) getpid() ioctl$IOC_WATCH_QUEUE_SET_SIZE(0xffffffffffffffff, 0x5760, 0x12) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) openat$sequencer2(0xffffffffffffff9c, 0x0, 0x0, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000000)=0x6) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="0203f3021600000000000000000000000200090008000000e9000000000200000300060000000000020000000000000000000000000000000200010000000000000003fdff000020030005000000000002000000ac1414aa00000000000000000a00080008"], 0xb0}, 0x1, 0x7}, 0x0) 5.160266917s ago: executing program 3 (id=2562): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r0, 0x0, 0x2, &(0x7f0000000100)=0xbe, 0x4) sendto$inet(r0, 0x0, 0x0, 0x24000001, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) syz_open_dev$usbfs(0x0, 0x77, 0x101301) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x100004, 0xffff, 0xb, 0x1, 0x1}, 0x50) setxattr$trusted_overlay_upper(&(0x7f0000000480)='./file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00', &(0x7f0000000040), 0x0, 0x0, 0x3) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000800}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000080)=0x7) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000200)=0x4) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeef, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x400000000000041, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = syz_usb_connect$hid(0x6, 0x3f, &(0x7f0000000180)={{0x12, 0x1, 0x310, 0x0, 0x0, 0x0, 0x0, 0x5ac, 0x22a, 0x40, 0x1, 0x2, 0x3, 0x1, [{{0x9, 0x2, 0x2d, 0x1, 0x1, 0x0, 0x0, 0x3f, [{{0x9, 0x4, 0x0, 0x9, 0x1, 0x3, 0x1, 0x1, 0x5, {0x9, 0x21, 0x8, 0xfa, 0x1, {0x22, 0xba7}}, {{{0x9, 0x5, 0x81, 0x3, 0x40, 0x6, 0x9}}, [{{0x9, 0x5, 0x2, 0x3, 0x400, 0xff, 0xd9, 0x4}}]}}}]}}]}}, &(0x7f0000001380)={0xa, &(0x7f0000000f80)={0xa, 0x6, 0x201, 0x0, 0x1, 0xd, 0x40, 0x8}, 0xc, &(0x7f0000000fc0)={0x5, 0xf, 0xc, 0x1, [@ext_cap={0x7, 0x10, 0x2, 0x8, 0xe, 0x6, 0x7dca}]}, 0x7, [{0x96, &(0x7f0000001000)=@string={0x96, 0x3, "780dac5287375335063f5909dd3936d2829ae4fbd1d01b08bb80120a03cda562804868b081f7d2d2f9ddc37e71c4d98dd64242e461f9805330cf401ae4d0c088e9ccefc51bbf3ee5b375f00e70ae7fe0f9c620fd46e208268bd46133a99a951394cfc8ce3b421b2a341c74ba897699233e1b0f291ab134e19857db319820cb96e588bc7570aec3aaa518330eb910945ca77d340a"}}, {0x5b, &(0x7f00000010c0)=@string={0x5b, 0x3, "344d9eee31ffe2db46e2dafb455840c49968597ef2e5b5a6b6bd787c297e7d7b845a1c709b646c2700641847c7c48e271655f1f0af907fb570f8a204db17ab55aaf7570e58f6691d65d74e6eefc9446d8686c43b144647a994"}}, {0x4, &(0x7f0000001180)=@lang_id={0x4, 0x3, 0x140c}}, {0x80, &(0x7f00000011c0)=@string={0x80, 0x3, "56b2d0d610f40d98f3a78bfbb297046cc9e6ec1d174752f96ca4d05512ac65e0780374ee61cf4714822b4c9c71eebabc906a98275c6e655f484c360d5a0daa43e84a1077b61ef8babde2fb1d1cc48e1f6565b67a7bb74f51d15f64039aad550dbe819b29df26a4c816f6236e300aa3eac6f66b82220469e41e9e63635b0d"}}, {0x81, &(0x7f0000001240)=@string={0x81, 0x3, "0712de912c7dd312b77bab510b3bb3e1baf8072882f0491590c448a73312d91d4d9a3d69ac8b65b664bfb90ec74134ac2565483aab37cb35fb8c027c446c5d5bd1b1f709c121ec852684aaa32c8b9fa6476a6c1e7364e048802e8a6d8cec3a25cef94b485a227496213861ab9e668abf8a83f52e988998fc44da73eec2a8fc"}}, {0x4, &(0x7f0000001300)=@lang_id={0x4, 0x3, 0x1001}}, {0x4, &(0x7f0000001340)=@lang_id={0x4, 0x3, 0x3001}}]}) syz_usb_control_io$hid(r5, &(0x7f0000001600)={0x24, &(0x7f0000001400)={0x40, 0x24, 0x8c, {0x8c, 0x10, "3431e9679ab60725d3c865046f7175b793f5cd91fafa47c15aad0a93f4f025294731fca0f163187a8d3da57a2c1cf69643d9990904094e5d6a93e9c92d917afe158baf1dac47bea1068cb1857af9fa162e7c1edcf9c3b654134219839f6cbd926f26b313e0a89f64bb5b4516b7be2efa4095ea53760bcabc83a95f8c8d224bd753ce3f464f1c49eb3c76"}}, &(0x7f00000014c0)={0x0, 0x3, 0xa0, @string={0xa0, 0x3, "a08e890e0e1f758e5ed7d2060a579b1a666fcc40bd5e2ba3e1cd94c7a8679967b403e15db3241f60d80d5fb2129b16a53a1b9ccf907bbef3bf1616cb73393ee94bef44da5a2aee1267d2cf1e5e88dc68e1f58ff9de0091654ec877ab860d879c7032e7e8de89b5340d3c50076979bf7d733cf3c74d37278ccde93c1026edb02418074d6d2cd5901558b99fdc0df7bc168db61b90df97855ed4bccfa41d84"}}, &(0x7f0000001580)={0x0, 0x22, 0x8, {[@global=@item_012={0x2, 0x1, 0x5, "7f35"}, @local=@item_4={0x3, 0x2, 0x7, "87905529"}]}}, &(0x7f00000015c0)={0x0, 0x21, 0x9, {0x9, 0x21, 0x3, 0x8, 0x1, {0x22, 0x216}}}}, &(0x7f0000001900)={0x2c, &(0x7f0000001640)={0x40, 0x12, 0xf7, "c545cf3bddac4c2bb61dab08050ec91ba4914cc5183ca4847e3464eec2e8b53d664287aa3f0f667234a5fcca98013a8d4780447eaf1ff69c4890a94954b4039fe8fc2ec6cc250a5a933728e14ea74ab1b3650bcaf575e2e1e7baba37fdf1048b33c5c917c1f6455650b04a73c61c420660e004fd87917f021ef8a8c42c7c145d34d5c3479676a937c4a60466daa0f90042e1819a8a19b49e4444b03bac3dcf5e3d8c8ffe6a219fc8926e94a194ab414e1d58a61c3b91a4f38792facfdc5eb3dc13722e2f1ec22b1ca64f691a7b8d6d4568a0625e138c0c3e263e256f70ab8353c89ae1a032f417818a0e36fde63277d1a5587117f77842"}, &(0x7f0000001740)={0x0, 0xa, 0x1, 0x2}, &(0x7f0000001780)={0x0, 0x8, 0x1, 0x2}, &(0x7f0000001880)={0x20, 0x1, 0x10, "9f9c4aa0ee1c98aa8034a6bab935f464"}, &(0x7f00000018c0)={0x20, 0x3, 0x1, 0x4}}) bind$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(0xffffffffffffffff, 0x4018620d, &(0x7f00000000c0)={0x73622a85, 0x1000, 0x2}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x15, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffe8a, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27}, 0x48) 4.924776224s ago: executing program 2 (id=2563): prctl$PR_SET_SECCOMP(0x16, 0x2, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x200000000006, 0x0, 0x0, 0x7ffc1ffb}]}) setresuid(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32, @ANYBLOB="0000000000000000b704000008000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000006c0)={&(0x7f0000000700)='kmem_cache_free\x00', r0}, 0x10) r1 = openat$vmci(0xffffffffffffff9c, &(0x7f0000000740), 0x2, 0x0) ioctl$IOCTL_VMCI_VERSION2(r1, 0x7a7, &(0x7f0000000080)=0x80000) ioctl$IOCTL_VMCI_INIT_CONTEXT(r1, 0x7a0, &(0x7f0000000000)={@my=0x0}) ioctl$IOCTL_VMCI_QUEUEPAIR_DETACH(r1, 0x7aa, &(0x7f0000000040)={{@local, 0x7}, 0x2, 0x9}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) pipe(&(0x7f0000000040)) io_setup(0x3ff, &(0x7f0000000500)=0x0) io_getevents(r2, 0x4, 0x4, &(0x7f00000019c0)=[{}, {}, {}, {}], 0x0) io_submit(r2, 0x1, &(0x7f0000000300)=[0x0]) io_destroy(r2) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_ifreq(r3, 0x8910, &(0x7f0000000000)={'ip6gretap0\x00', @ifru_addrs=@can}) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = landlock_create_ruleset(&(0x7f0000000180)={0x4642, 0x3, 0x2}, 0x18, 0x0) landlock_restrict_self(r4, 0x5) openat$dir(0xffffffffffffff9c, &(0x7f0000000080)='.\x00', 0x101000, 0x108) mkdir(&(0x7f0000000300)='./bus\x00', 0x9) 4.749379413s ago: executing program 0 (id=2564): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) shutdown(r0, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004015}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000400)=0x6) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r1, &(0x7f0000019680)=""/102392, 0x18ff8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(0xffffffffffffffff, 0x84, 0x15, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x400c0d4, &(0x7f0000000140)={0xa, 0x4e23, 0x0, @loopback, 0xffffffff}, 0x1c) openat$dsp(0xffffffffffffff9c, &(0x7f00000000c0), 0x40880, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x500400, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) socket(0x400000000010, 0x3, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd3f, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, r7, {0xf000, 0xffff}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_CLASSID={0x8, 0x1, {0x4}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000800) bind$inet6(r0, &(0x7f0000000240)={0xa, 0x4e20, 0xf, @ipv4={'\x00', '\xff\xff', @empty}, 0x5}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e20, 0xfffffff7, @empty, 0x2}, 0x1c) 4.436340198s ago: executing program 4 (id=2565): r0 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FBIOPUT_VSCREENINFO(r0, 0x4601, &(0x7f0000000040)={0x80, 0xa0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x10, 0x8, 0x60020000}, {0x8, 0x8}, {0xfffffff9, 0xfffffffc, 0x1}, {0x0, 0x20000000}, 0x260, 0x10, 0x0, 0x101, 0x1, 0x0, 0x0, 0x0, 0xfffffffe, 0x6, 0xfffffffd, 0x0, 0x0, 0x0, 0x2, 0x9}) 4.013200148s ago: executing program 4 (id=2566): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0xffffffffffffffda, r6, {0x7, 0x2b, 0xb, 0x10000, 0x0, 0x0, 0x5, 0xe, 0x0, 0x0, 0x80, 0xfffffffd}}, 0x50) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0x36, 0x0, 0x17, 0xfffffffc, 0xa9, 0x6, 0x2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) accept(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) 3.648462475s ago: executing program 2 (id=2567): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = fspick(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='&\x00', &(0x7f0000000540)='%\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000006357000000000000000000007112250000000000950000007fd4994e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x861, 0x401, 0x8, 0x5800, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r2, r5}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="060f0400011104"], 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a00000000000000080005", @ANYRES32=r8, @ANYBLOB="3893c02651e327b4fb8b4cdea284dc19ed18f7cbe2662957b1f984e0d11f63f0a3ae03ea8c6f11b5b5d36aba46af9032bb373a69494615f9b9558ea8cc1ad5e951eb94587401b99e3e69476007a26ce5734870551dc49308130164446263b8c5362e6945357672b6adba20f3d42d8944d591a43357a50b06550a624636737a29b6a95a5c93d0b1474fa5bfe67c0e609eaf5186d58ec4351bb0c422cfafa798a1346f6b07beec2d4fc63d99c26f"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x3) ioctl$EVIOCSABS20(r9, 0x401845e0, &(0x7f0000000580)={0x2, 0xab, 0x4, 0x1, 0x400, 0x823db05}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r11, 0x114, 0x1, &(0x7f0000000400)={0x2, 0x4e24, @private=0xa010101}, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r10, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 2.709846402s ago: executing program 4 (id=2568): r0 = syz_open_dev$tty20(0xc, 0x4, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10001}, 0x94) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x87}, 0x0) ioctl$TCXONC(r0, 0x540a, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r1 = fspick(0xffffffffffffffff, &(0x7f0000000480)='./file0\x00', 0x0) fsconfig$FSCONFIG_SET_STRING(r1, 0x1, &(0x7f00000004c0)='&\x00', &(0x7f0000000540)='%\x00', 0x0) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) r2 = syz_open_dev$MSR(&(0x7f00000001c0), 0x8000002000000, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000006357000000000000000000007112250000000000950000007fd4994e"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x861, 0x401, 0x8, 0x5800, 0xffffffffffffffff, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000300)={r2, r5}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_vhci(&(0x7f0000000500)=ANY=[@ANYBLOB="060f0400011104"], 0x7) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="200000006800e97800000000ffdbdf250a0000000000000008", @ANYRES32=r8, @ANYBLOB="3893c02651e327b4fb8b4cdea284dc19ed18f7cbe2662957b1f984e0d11f63f0a3ae03ea8c6f11b5b5d36aba46af9032bb373a69494615f9b9558ea8cc1ad5e951eb94587401b99e3e69476007a26ce5734870551dc49308130164446263b8c5362e6945357672b6adba20f3d42d8944d591a43357a50b06550a624636737a29b6a95a5c93d0b1474fa5bfe67c0e609eaf5186d58ec4351bb0c422cfafa798a1346f6b07beec2d4fc63d99c26f"], 0x20}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000004380)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@ipv6_newrule={0x24, 0x18, 0x409, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_GOTO={0x8, 0x1e, 0x1}]}, 0x24}}, 0x0) r9 = openat$ipvs(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/vs/lblcr_expiration\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x3) ioctl$EVIOCSABS20(r9, 0x401845e0, &(0x7f0000000580)={0x2, 0xab, 0x4, 0x1, 0x400, 0x823db05}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x20, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r8, 0x192}}, 0x20}}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) r11 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r11, 0x114, 0x1, &(0x7f0000000400)={0x2, 0x4e24, @private=0xa010101}, 0x10) sendmsg$NL80211_CMD_RELOAD_REGDB(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)={0x14, r10, 0x101, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000) 2.553188273s ago: executing program 0 (id=2569): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) socket$inet_mptcp(0x2, 0x1, 0x106) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r2 = getpid() sched_setaffinity(0x0, 0x0, 0x0) sched_setscheduler(r2, 0x2, &(0x7f0000000040)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r3, &(0x7f000057eff8)=@abs={0x0, 0x0, 0xfffffffc}, 0x6e) sendmmsg$unix(r4, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r3, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000005c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x70) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000580)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) prctl$PR_SET_MM(0x23, 0x8, &(0x7f0000001000/0x4000)=nil) prctl$PR_SET_MM(0x23, 0x9, &(0x7f0000004000/0x3000)=nil) r6 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x20000015) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000180)={r6}) sendmsg$inet(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)='R', 0x1}], 0x1}, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r6, 0x89e1, &(0x7f0000000100)) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f0000007480)={0x18, r1, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_DAEMON={0x4}]}, 0x18}}, 0x48040) 2.445447308s ago: executing program 2 (id=2570): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=@ipv6_newrule={0x44, 0x20, 0x1, 0x0, 0x0, {0xa, 0x14, 0x40, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_SRC={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}]}, 0x44}}, 0x40000) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2}]}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) 2.012294836s ago: executing program 3 (id=2571): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x3, 0x0, 0x0) syz_io_uring_setup(0x2e86, 0x0, 0x0, 0x0) syz_memcpy_off$IO_URING_METADATA_GENERIC(0x0, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) openat$audio1(0xffffff9c, &(0x7f0000000040), 0x0, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) set_mempolicy(0x4005, 0x0, 0x4) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x4) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) openat$sysctl(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/vm/drop_caches\x00', 0x1, 0x0) r2 = syz_open_dev$MSR(&(0x7f0000000280), 0x0, 0x0) read$msr(r2, &(0x7f0000019680)=""/102392, 0x18ff8) r3 = io_uring_setup(0xf6b, &(0x7f0000000300)={0x0, 0xd74, 0x100, 0x0, 0x3d0}) io_uring_register$IORING_REGISTER_IOWQ_MAX_WORKERS(r3, 0x13, &(0x7f0000000080)=[0xfc8d], 0x2) r4 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f0000000000)='/proc/asound/card0/oss_mixer\x00', 0x2002, 0x0) write$proc_mixer(r4, &(0x7f0000000180)=ANY=[], 0xb8) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000240)=@generic={&(0x7f0000000200)='./file0\x00', 0x0, 0x20}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{}, &(0x7f0000000100), &(0x7f0000000380)=r5}, 0x20) r6 = openat$proc_mixer(0xffffffffffffff9c, &(0x7f00000000c0)='/proc/asound/card0/oss_mixer\x00', 0x0, 0x0) dup3(r6, r4, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r7, &(0x7f00000bd000), 0x318, 0x0) io_uring_enter(r3, 0x1102, 0xb2fa, 0x8, 0x0, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) pwrite64(0xffffffffffffffff, 0x0, 0x0, 0xfffffffeffffffff) mbind(&(0x7f0000001000/0x800000)=nil, 0x800000, 0x1, 0x0, 0x0, 0x2) get_mempolicy(0x0, 0x0, 0x0, &(0x7f0000001000/0x4000)=nil, 0x3) sendmsg$nl_route_sched(r8, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x16, 0xff, 0xffffffffffffffff, 0x7, 0x6}, 0x3, r1}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x2000a804) 1.414783972s ago: executing program 2 (id=2572): r0 = syz_usb_connect$hid(0x2, 0x36, &(0x7f0000000080)={{0x12, 0x1, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b96, 0x12, 0x0, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x2, 0x24, 0x1, 0x0, 0x0, 0x0, 0x1, [{{0x9, 0x4, 0x0, 0x0, 0x1, 0x3, 0x0, 0x0, 0x0, {0x9, 0x21, 0x0, 0x0, 0x1, {0x22, 0x5}}}}]}}]}}, 0x0) syz_usb_control_io(r0, 0x0, 0x0) syz_usb_control_io(r0, &(0x7f0000000600)={0x2c, &(0x7f0000000200)={0x0, 0xc, 0x5, {0x5, 0xe, "cb8bf1"}}, 0x0, 0x0, 0x0, 0x0}, 0x0) r1 = socket(0x28, 0x2, 0x3) r2 = openat$ttyS3(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) fcntl$setstatus(r2, 0x4, 0x2400) ioctl$TIOCSTI(r2, 0x5412, &(0x7f0000000080)=0x4) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, 0x0, 0x0) connect$unix(r1, &(0x7f0000000000)=@abs={0x0, 0x0, 0x4e24}, 0x6e) r3 = openat$drirender128(0xffffffffffffff9c, &(0x7f00000000c0), 0x80, 0x0) ioctl$DRM_IOCTL_MODE_GETRESOURCES(r3, 0xc04064a0, &(0x7f0000000240)={&(0x7f0000000100)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0], &(0x7f00000001c0)=[0x0, 0x0, 0x0], 0x4, 0x4, 0x1, 0x3}) 1.410344238s ago: executing program 4 (id=2573): connect$unix(0xffffffffffffffff, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) mount(&(0x7f0000000280)=@filename='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f0000000080)='ubifs\x00', 0x410040, 0x0) mknod(&(0x7f0000000180)='./file0\x00', 0x1ffa, 0x0) acct(&(0x7f0000000140)='./file0\x00') prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) mkdirat(0xffffffffffffff9c, &(0x7f0000002040)='./file0\x00', 0x0) r0 = openat$fuse(0xffffffffffffff9c, &(0x7f0000000040), 0x2, 0x0) mount$fuse(0x0, &(0x7f0000002080)='./file0\x00', &(0x7f00000020c0), 0x0, &(0x7f0000002100)=ANY=[@ANYBLOB='fd=', @ANYRESHEX=r0, @ANYBLOB=',rootmode=00000000000000000040000,user_id=', @ANYRESDEC=0x0, @ANYBLOB=',group_id=', @ANYRESDEC=0x0]) syz_fuse_handle_req(r0, &(0x7f0000002180)="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", 0x2000, &(0x7f0000000f00)={&(0x7f0000000080)={0x50, 0x0, 0x200000000000, {0x7, 0x29, 0x7, 0xa110000, 0xc9f, 0xfff, 0x800, 0x8, 0x0, 0x0, 0x10, 0x400}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) syz_fuse_handle_req(r0, &(0x7f0000006400)="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", 0x2000, &(0x7f0000000440)={&(0x7f0000000200)={0x50, 0xffffffffffffffda, 0x0, {0x7, 0x29, 0x7, 0x1001900, 0x5cd, 0x8, 0x3ff, 0x2, 0x0, 0x0, 0x10, 0x5}}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}) setxattr$trusted_overlay_origin(&(0x7f0000000000)='./file0\x00', &(0x7f0000000040), 0x0, 0x0, 0x0) removexattr(&(0x7f0000000080)='./file0\x00', &(0x7f0000000000)=@known='system.posix_acl_default\x00') socket(0x1d, 0x803, 0x1) socket$tipc(0x1e, 0x2, 0x0) sched_setscheduler(0x0, 0x1, &(0x7f0000000100)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f0000000200)=0x400000bce) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000002000)=""/102400, 0x19000) select(0x40, &(0x7f0000000000)={0x2000000000000, 0x67c, 0x6, 0x1ff, 0x8, 0xa92d, 0xfffffffffffffff2, 0x2}, &(0x7f0000000240)={0xfffffffffffffffc, 0x7, 0x40, 0x2, 0x1, 0x1ff, 0x1000}, &(0x7f00000002c0)={0x6, 0x5, 0x1, 0x2, 0xaa2a, 0x1, 0x100, 0x400}, &(0x7f0000000300)={0x77359400}) r2 = seccomp$SECCOMP_SET_MODE_FILTER_LISTENER(0x1, 0x0, &(0x7f0000000080)={0x1, &(0x7f0000000100)=[{0x6, 0x0, 0x0, 0x7fff0000}]}) close_range(r2, 0xffffffffffffffff, 0x0) 1.23345003s ago: executing program 5 (id=2574): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_io_uring_setup(0x110, &(0x7f00000000c0)={0x0, 0x3232, 0x100, 0x0, 0x3de}, &(0x7f0000000040)=0x0, &(0x7f0000000180)=0x0) io_uring_register$IORING_REGISTER_FILES(r2, 0x2, &(0x7f0000000300)=[0xffffffffffffffff], 0x1) syz_memcpy_off$IO_URING_METADATA_GENERIC(r3, 0x4, &(0x7f0000000080)=0xfffffffc, 0x0, 0x4) syz_io_uring_submit(r3, r4, &(0x7f00000002c0)=@IORING_OP_READV=@pass_iovec={0x1, 0x1, 0x6000, @fd_index, 0x400000080001001, 0x0, 0x0, 0x22}) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x6, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x2) sched_setaffinity(0x0, 0x8, &(0x7f00000002c0)=0x2) r5 = syz_open_dev$MSR(&(0x7f0000000100), 0x0, 0x0) read$msr(r5, &(0x7f0000032680)=""/102400, 0x19000) io_uring_enter(r2, 0x47f6, 0x0, 0x0, 0x0, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r6, 0x107, 0xd, &(0x7f0000000380)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'veth0_macvtap\x00', 0x0}) bind$packet(r6, &(0x7f0000000140)={0x11, 0x0, r7, 0x1, 0x6, 0x6, @remote}, 0x14) sendmmsg$sock(r6, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0}}], 0x1, 0x24000834) r8 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r8) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$sock_int(r9, 0x1, 0x3e, &(0x7f00000000c0)=0x7, 0x4) bind$llc(r9, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x54, 0x0, 0x4}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r9, r10, 0x0, 0xffffffff000) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x9) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r11, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) 1.070265276s ago: executing program 0 (id=2575): syz_open_dev$cec(&(0x7f0000000000), 0xffffffffffffffff, 0x0) openat$dsp(0xffffffffffffff9c, &(0x7f0000000000), 0x42, 0x0) r0 = syz_open_procfs(0x0, &(0x7f0000000000)='fd/3\x00') mount$9p_fd(0x0, &(0x7f0000000100)='.\x00', &(0x7f0000000040), 0x0, &(0x7f0000000300)=ANY=[@ANYBLOB='trans=fd,rfdno=', @ANYRES16=r0, @ANYBLOB=',wfdno=', @ANYRESHEX=r0]) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000380)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000180)={0x4c, 0x0, &(0x7f0000000100)=[@transaction_sg={0x40046302, {0x1, 0x0, 0x0, 0x0, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40}], 0x0, 0x0, 0x0}) 742.589427ms ago: executing program 3 (id=2576): r0 = openat$kvm(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r1 = ioctl$KVM_CREATE_VM(r0, 0xae01, 0x0) r2 = ioctl$KVM_CREATE_VCPU(r1, 0xae41, 0x0) ioctl$KVM_SET_MSRS(r2, 0xc008ae88, &(0x7f00000000c0)=ANY=[@ANYBLOB="01000000000000009900004000000000009ceed33326b70000000033378b04"]) openat$kvm(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$KVM_SET_MSRS(0xffffffffffffffff, 0xc008ae88, &(0x7f0000000000)=ANY=[@ANYBLOB="01000000000000000f478ef8ed"]) r3 = openat$kvm(0xffffff9c, &(0x7f00000000c0), 0x800, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x0, 0x2172, 0xffffffffffffffff, 0x0) mremap(&(0x7f0000005000/0x4000)=nil, 0x4000, 0x1000, 0x0, &(0x7f0000003000/0x1000)=nil) mremap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x3000, 0x0, &(0x7f0000002000/0x3000)=nil) r4 = ioctl$KVM_CREATE_VM(r3, 0xae01, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@newlink={0x84, 0x10, 0xffffff1f, 0x0, 0x1, {}, [@IFLA_LINKINFO={0x64, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @remote}, @IFLA_GRE_FWMARK={0x8, 0x14, 0x7ff}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xe8cd2}, @IFLA_GRE_REMOTE={0x8, 0x7, @empty}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e21}, @IFLA_GRE_ENCAP_DPORT={0x6, 0x11, 0x4e20}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0x35420}, @IFLA_GRE_ENCAP_SPORT={0x6, 0x10, 0x4e24}, @IFLA_GRE_ERSPAN_INDEX={0x8, 0x15, 0xeb978}, @IFLA_GRE_REMOTE={0x8, 0x7, @broadcast}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$KVM_CAP_SPLIT_IRQCHIP(0xffffffffffffffff, 0x4068aea3, &(0x7f00000000c0)={0x79, 0x0, 0x1}) r6 = open(&(0x7f0000000140)='./file0\x00', 0x0, 0x0) mknodat$loop(r6, &(0x7f0000001600)='./file1\x00', 0x200, 0x0) move_mount(r6, 0x0, r6, 0x0, 0x3e4) r7 = ioctl$KVM_CREATE_VCPU(r4, 0xae41, 0x0) ioctl$KVM_SET_USER_MEMORY_REGION(r4, 0x4020ae46, &(0x7f0000000080)={0x2, 0x3, 0x0, 0x1000, &(0x7f0000001000/0x1000)=nil}) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x501000, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000180)={'pim6reg0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000700)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r11, {0x0, 0x7}, {}, {0x7, 0xfff2}}, [@filter_kind_options=@f_u32={{0x8}, {0xc, 0x2, [@TCA_U32_FLAGS={0x8, 0xb, 0x2}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40080}, 0x800) ioctl$KVM_SET_REGS(r7, 0x4090ae82, &(0x7f00000001c0)={[0xfffffffffffffffb, 0x6, 0x0, 0x40000, 0x10003, 0x0, 0x400200cc4, 0x5, 0x7d, 0x0, 0x0, 0x7ff, 0x7, 0x1, 0xb9, 0x8d], 0x10000, 0x2011c0}) ioctl$KVM_RUN(r7, 0xae80, 0x0) socket$netlink(0x10, 0x3, 0xc) 550.054128ms ago: executing program 0 (id=2577): socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x40}, 0x0) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x1, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000180)=0x1) prctl$PR_SCHED_CORE(0x3e, 0x1, 0x0, 0x2, 0x0) sched_setaffinity(0x0, 0x8, &(0x7f0000000000)=0x2) r1 = syz_open_dev$MSR(&(0x7f00000001c0), 0x0, 0x0) read$msr(r1, &(0x7f0000004300)=""/102400, 0x19000) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x5, 0x13, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x3}, {}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @map_fd={0x18, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='syzkaller\x00', 0x6, 0x0, 0x0, 0x40f00, 0xc, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x0, 0x8, 0x1ff, 0x80000001}, 0x10, 0x0, 0xffffffffffffffff, 0x0, &(0x7f0000000380)=[0x1, 0xffffffffffffffff], 0x0, 0x10, 0xfffffff7}, 0x94) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="000000200d2e5bf308000300", @ANYRES32=0x0, @ANYBLOB="4800128009000100626f6e640000000038000280040008800800070006"], 0x70}, 0x1, 0x0, 0x0, 0x4}, 0x0) 391.830388ms ago: executing program 4 (id=2578): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='sched_switch\x00', r0}, 0x10) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r1 = getpid() sched_setscheduler(r1, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f05ebbeef, 0x8031, 0xffffffffffffffff, 0x1000) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r2, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r3, &(0x7f0000000000), 0x651, 0x0) recvmmsg(r2, &(0x7f00000000c0), 0x10106, 0x2, 0x0) mlock(&(0x7f0000002000/0x2000)=nil, 0x2000) r4 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r4, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x0) r5 = socket$vsock_stream(0x28, 0x1, 0x0) read$FUSE(0xffffffffffffffff, &(0x7f0000000680)={0x2020, 0x0, 0x0}, 0x2020) write$FUSE_INIT(0xffffffffffffffff, &(0x7f0000000180)={0x50, 0xffffffffffffffda, r6, {0x7, 0x2b, 0xb, 0x10000, 0x0, 0x0, 0x5, 0xe, 0x0, 0x0, 0x80, 0xfffffffd}}, 0x50) connect$vsock_stream(r5, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="07000000040000000800000001"], 0x48) ioctl$RTC_SET_TIME(0xffffffffffffffff, 0x4024700a, &(0x7f0000000040)={0x0, 0x36, 0x0, 0x17, 0xfffffffc, 0xa9, 0x6, 0x2}) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000680)=@mangle={'mangle\x00', 0x64, 0x6, 0x5d8, 0x0, 0x0, 0x1d0, 0x0, 0x1d0, 0x530, 0x530, 0x530, 0x530, 0x530, 0x6, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @ipv4={'\x00', '\xff\xff', @multicast2}, [], [], 'vcan0\x00', 'veth1_virt_wifi\x00'}, 0x0, 0xa8, 0xe8, 0x0, {0x7a00000000000000}}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x9}}}, {{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'syzkaller1\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@private0}}}, {{@ipv6={@rand_addr=' \x01\x00', @mcast2, [], [], 'veth1_to_batadv\x00', 'vlan1\x00'}, 0x0, 0xd0, 0x118, 0x0, {}, [@common=@ipv6header={{0x28}}]}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@empty}}}, {{@ipv6={@private0, @mcast2, [], [], 'veth1_to_team\x00', 'veth0_macvtap\x00'}, 0x0, 0xf0, 0x130, 0x0, {}, [@common=@hbh={{0x48}}]}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4=@local}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x638) accept(r4, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=ANY=[@ANYBLOB="120000000400000004000000a4"], 0x48) openat$kvm(0xffffffffffffff9c, &(0x7f0000000100), 0x20040, 0x0) 0s ago: executing program 3 (id=2579): syz_open_procfs(0x0, &(0x7f0000000080)='net/igmp\x00') kernel console output (not intermixed with test programs): no interface number 0 [ 638.763993][ T10] usb 4-1: string descriptor 0 read error: -22 [ 638.788764][T10014] usb 1-1: config 0 interface 184 has no altsetting 0 [ 638.803948][T10014] usb 1-1: New USB device found, idVendor=0424, idProduct=7500, bcdDevice=69.ee [ 638.951866][T12833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1920'. [ 638.961143][T12833] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1920'. [ 639.022628][ T5890] Process accounting resumed [ 639.103672][T10014] usb 1-1: New USB device strings: Mfr=227, Product=1, SerialNumber=3 [ 639.118583][T10014] usb 1-1: Product: syz [ 639.126042][T10014] usb 1-1: Manufacturer: syz [ 639.132056][T10014] usb 1-1: SerialNumber: syz [ 639.326525][T10014] usb 1-1: config 0 descriptor?? [ 639.341071][T10014] smsc75xx v1.0.0 [ 639.687431][T12840] xt_CT: No such helper "snmp" [ 639.743464][T10014] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read reg index 0x00000014: -61 [ 639.851260][ T10] uclogic 0003:256C:006D.0019: failed retrieving string descriptor #200: -71 [ 639.935030][T10014] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): Failed to read PMT_CTL: -61 [ 639.976060][ T10] uclogic 0003:256C:006D.0019: failed retrieving pen parameters: -71 [ 640.092298][T10014] smsc75xx 1-1:0.184 (unnamed net_device) (uninitialized): device not ready in smsc75xx_bind [ 640.132984][ T10] uclogic 0003:256C:006D.0019: failed probing pen v2 parameters: -71 [ 640.157970][ T10] uclogic 0003:256C:006D.0019: failed probing parameters: -71 [ 640.165866][T10014] smsc75xx 1-1:0.184: probe with driver smsc75xx failed with error -61 [ 640.186727][ T10] uclogic 0003:256C:006D.0019: probe with driver uclogic failed with error -71 [ 640.427812][ T10] usb 4-1: USB disconnect, device number 37 [ 640.560476][T12858] binder_alloc: 12854: binder_alloc_buf size 65520 failed, no address space [ 640.590544][T12858] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 4096 (num: 1 largest: 4096) [ 640.679418][T12861] RDS: rds_bind could not find a transport for ::ffff:172.30.1.1, load rds_tcp or rds_rdma? [ 642.840134][T12879] xt_TPROXY: Can be used only with -p tcp or -p udp [ 643.575208][ T5828] usb 1-1: USB disconnect, device number 54 [ 643.642041][ T30] audit: type=1400 audit(1753286407.178:628): avc: denied { write } for pid=12884 comm="syz.3.1934" path="socket:[36912]" dev="sockfs" ino=36912 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 643.687341][T12886] ALSA: mixer_oss: invalid OSS volume '' [ 643.774627][ T5890] usb 6-1: new low-speed USB device number 26 using dummy_hcd [ 644.075478][ T5890] usb 6-1: config 0 has an invalid interface number: 1 but max is 0 [ 644.089899][ T5890] usb 6-1: config 0 has no interface number 0 [ 644.108253][ T5890] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 644.198161][T12903] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1939'. [ 644.675013][ T5890] usb 6-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 644.707046][ T30] audit: type=1400 audit(1753286407.668:629): avc: denied { map } for pid=12895 comm="syz.3.1938" path="socket:[36937]" dev="sockfs" ino=36937 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_generic_socket permissive=1 [ 644.753622][ T5890] usb 6-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 644.754789][T12906] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1940'. [ 644.782026][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 644.807148][ T5890] usb 6-1: config 0 descriptor?? [ 644.813660][T12881] raw-gadget.0 gadget.5: fail, usb_ep_enable returned -22 [ 644.824668][ T5890] iowarrior 6-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 645.519236][ T5828] usb 6-1: USB disconnect, device number 26 [ 645.924789][T12924] xt_TPROXY: Can be used only with -p tcp or -p udp [ 646.855252][T12931] netlink: 240 bytes leftover after parsing attributes in process `syz.4.1946'. [ 646.864592][T12931] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1946'. [ 647.038881][T12937] FAULT_INJECTION: forcing a failure. [ 647.038881][T12937] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.082675][T12937] CPU: 0 UID: 0 PID: 12937 Comm: syz.5.1948 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 647.082703][T12937] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.082713][T12937] Call Trace: [ 647.082719][T12937] [ 647.082726][T12937] dump_stack_lvl+0x16c/0x1f0 [ 647.082758][T12937] should_fail_ex+0x512/0x640 [ 647.082789][T12937] _copy_from_user+0x2e/0xd0 [ 647.082807][T12937] drm_ioctl+0x4fb/0xc30 [ 647.082829][T12937] ? __pfx_drm_getcap+0x10/0x10 [ 647.082846][T12937] ? __pfx_drm_ioctl+0x10/0x10 [ 647.082872][T12937] ? selinux_file_ioctl+0x180/0x270 [ 647.082888][T12937] ? selinux_file_ioctl+0xb4/0x270 [ 647.082905][T12937] ? __pfx_drm_ioctl+0x10/0x10 [ 647.082923][T12937] __x64_sys_ioctl+0x18e/0x210 [ 647.082949][T12937] do_syscall_64+0xcd/0x4c0 [ 647.082967][T12937] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.082984][T12937] RIP: 0033:0x7f6e25f8e9a9 [ 647.082998][T12937] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 647.083015][T12937] RSP: 002b:00007f6e23df6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 647.083032][T12937] RAX: ffffffffffffffda RBX: 00007f6e261b5fa0 RCX: 00007f6e25f8e9a9 [ 647.083042][T12937] RDX: 0000200000000100 RSI: 00000000c010640c RDI: 0000000000000003 [ 647.083053][T12937] RBP: 00007f6e23df6090 R08: 0000000000000000 R09: 0000000000000000 [ 647.083064][T12937] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 647.083074][T12937] R13: 0000000000000000 R14: 00007f6e261b5fa0 R15: 00007ffc1e368028 [ 647.083097][T12937] [ 647.501671][T12947] FAULT_INJECTION: forcing a failure. [ 647.501671][T12947] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 647.522093][T12947] CPU: 0 UID: 0 PID: 12947 Comm: syz.5.1952 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 647.522121][T12947] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 647.522134][T12947] Call Trace: [ 647.522140][T12947] [ 647.522146][T12947] dump_stack_lvl+0x16c/0x1f0 [ 647.522178][T12947] should_fail_ex+0x512/0x640 [ 647.522208][T12947] _copy_to_user+0x32/0xd0 [ 647.522228][T12947] simple_read_from_buffer+0xcb/0x170 [ 647.522256][T12947] proc_fail_nth_read+0x197/0x270 [ 647.522282][T12947] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.522307][T12947] ? rw_verify_area+0xcf/0x680 [ 647.522329][T12947] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 647.522353][T12947] vfs_read+0x1e1/0xc60 [ 647.522379][T12947] ? __pfx___mutex_lock+0x10/0x10 [ 647.522396][T12947] ? __pfx_vfs_read+0x10/0x10 [ 647.522427][T12947] ? __fget_files+0x20e/0x3c0 [ 647.522450][T12947] ksys_read+0x12a/0x250 [ 647.522473][T12947] ? __pfx_ksys_read+0x10/0x10 [ 647.522505][T12947] do_syscall_64+0xcd/0x4c0 [ 647.522530][T12947] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 647.522548][T12947] RIP: 0033:0x7f6e25f8d3bc [ 647.522562][T12947] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 647.522578][T12947] RSP: 002b:00007f6e23df6030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 647.522596][T12947] RAX: ffffffffffffffda RBX: 00007f6e261b5fa0 RCX: 00007f6e25f8d3bc [ 647.522608][T12947] RDX: 000000000000000f RSI: 00007f6e23df60a0 RDI: 0000000000000003 [ 647.522618][T12947] RBP: 00007f6e23df6090 R08: 0000000000000000 R09: 0000000000000000 [ 647.522629][T12947] R10: 0000000000000066 R11: 0000000000000246 R12: 0000000000000001 [ 647.522638][T12947] R13: 0000000000000000 R14: 00007f6e261b5fa0 R15: 00007ffc1e368028 [ 647.522663][T12947] [ 647.898773][ T30] audit: type=1400 audit(1753286411.438:630): avc: denied { kexec_image_load } for pid=12932 comm="syz.2.1947" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 648.892178][ T30] audit: type=1400 audit(1753286412.268:631): avc: denied { create } for pid=12960 comm="syz.3.1955" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=isdn_socket permissive=1 [ 649.058175][T12968] netlink: 'syz.5.1956': attribute type 10 has an invalid length. [ 649.244683][T12964] openvswitch: netlink: Key type 65 is out of range max 32 [ 649.539909][ T30] audit: type=1804 audit(1753286412.568:632): pid=12968 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1956" name="/newroot/391/file0" dev="tmpfs" ino=2032 res=1 errno=0 [ 649.656531][T12960] delete_channel: no stack [ 650.211999][T12982] xt_TPROXY: Can be used only with -p tcp or -p udp [ 651.039255][T12988] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 651.051085][T12988] CPU: 1 UID: 0 PID: 12988 Comm: syz.0.1963 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 651.051102][T12988] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 651.051109][T12988] Call Trace: [ 651.051113][T12988] [ 651.051118][T12988] dump_stack_lvl+0x16c/0x1f0 [ 651.051141][T12988] sysfs_warn_dup+0x7f/0xa0 [ 651.051160][T12988] sysfs_do_create_link_sd+0x124/0x140 [ 651.051172][T12988] sysfs_create_link+0x61/0xc0 [ 651.051184][T12988] device_add+0x62c/0x1a70 [ 651.051199][T12988] ? __pfx_device_add+0x10/0x10 [ 651.051211][T12988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 651.051226][T12988] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 651.051243][T12988] wiphy_register+0x1c9c/0x2850 [ 651.051257][T12988] ? netdev_run_todo+0x864/0x1320 [ 651.051270][T12988] ? __dev_printk+0x270/0x270 [ 651.051288][T12988] ? __pfx_wiphy_register+0x10/0x10 [ 651.051310][T12988] ieee80211_register_hw+0x24ac/0x4140 [ 651.051329][T12988] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 651.051344][T12988] ? find_held_lock+0x2b/0x80 [ 651.051359][T12988] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 651.051371][T12988] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 651.051385][T12988] ? __hrtimer_setup+0x176/0x280 [ 651.051399][T12988] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 651.051424][T12988] ? trace_kmalloc+0x2b/0xd0 [ 651.051435][T12988] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 651.051453][T12988] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 651.051469][T12988] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 651.051487][T12988] ? __asan_memcpy+0x3c/0x60 [ 651.051504][T12988] hwsim_new_radio_nl+0xb51/0x12c0 [ 651.051522][T12988] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 651.051544][T12988] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 651.051560][T12988] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 651.051578][T12988] genl_family_rcv_msg_doit+0x206/0x2f0 [ 651.051594][T12988] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 651.051613][T12988] ? bpf_lsm_capable+0x9/0x10 [ 651.051627][T12988] ? security_capable+0x7e/0x260 [ 651.051642][T12988] ? ns_capable+0xd7/0x110 [ 651.051656][T12988] genl_rcv_msg+0x55c/0x800 [ 651.051672][T12988] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.051687][T12988] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 651.051712][T12988] ? __lock_acquire+0x622/0x1c90 [ 651.051725][T12988] netlink_rcv_skb+0x155/0x420 [ 651.051737][T12988] ? __pfx_genl_rcv_msg+0x10/0x10 [ 651.051753][T12988] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 651.051773][T12988] ? netlink_deliver_tap+0x1ae/0xd30 [ 651.051785][T12988] ? is_vmalloc_addr+0x86/0xa0 [ 651.051804][T12988] genl_rcv+0x28/0x40 [ 651.051817][T12988] netlink_unicast+0x58d/0x850 [ 651.051832][T12988] ? __pfx_netlink_unicast+0x10/0x10 [ 651.051849][T12988] netlink_sendmsg+0x8d1/0xdd0 [ 651.051865][T12988] ? __pfx_netlink_sendmsg+0x10/0x10 [ 651.051885][T12988] ____sys_sendmsg+0xa95/0xc70 [ 651.051900][T12988] ? copy_msghdr_from_user+0x10a/0x160 [ 651.051918][T12988] ? __pfx_____sys_sendmsg+0x10/0x10 [ 651.051934][T12988] ? __pfx_futex_wake_mark+0x10/0x10 [ 651.051948][T12988] ___sys_sendmsg+0x134/0x1d0 [ 651.051966][T12988] ? __pfx____sys_sendmsg+0x10/0x10 [ 651.051981][T12988] ? __lock_acquire+0x622/0x1c90 [ 651.052009][T12988] __sys_sendmsg+0x16d/0x220 [ 651.052019][T12988] ? __pfx___sys_sendmsg+0x10/0x10 [ 651.052029][T12988] ? __x64_sys_futex+0x1e0/0x4c0 [ 651.052054][T12988] do_syscall_64+0xcd/0x4c0 [ 651.052066][T12988] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 651.052078][T12988] RIP: 0033:0x7fa00558e9a9 [ 651.052089][T12988] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 651.052100][T12988] RSP: 002b:00007fa0063d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 651.052112][T12988] RAX: ffffffffffffffda RBX: 00007fa0057b5fa0 RCX: 00007fa00558e9a9 [ 651.052119][T12988] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 651.052130][T12988] RBP: 00007fa005610d69 R08: 0000000000000000 R09: 0000000000000000 [ 651.052139][T12988] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 651.052149][T12988] R13: 0000000000000000 R14: 00007fa0057b5fa0 R15: 00007ffee12112c8 [ 651.052173][T12988] [ 651.458552][ C1] vkms_vblank_simulate: vblank timer overrun [ 651.475253][T12990] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1961'. [ 653.608788][T12991] netlink: 'syz.3.1962': attribute type 10 has an invalid length. [ 653.626642][ T30] audit: type=1804 audit(1753286417.018:633): pid=12991 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.1962" name="/newroot/369/file0" dev="tmpfs" ino=1939 res=1 errno=0 [ 654.185532][T13014] netlink: 'syz.5.1969': attribute type 10 has an invalid length. [ 654.223316][ T30] audit: type=1804 audit(1753286417.708:634): pid=13014 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.1969" name="/newroot/394/file0" dev="tmpfs" ino=2048 res=1 errno=0 [ 655.102250][ T5933] usb 4-1: new high-speed USB device number 38 using dummy_hcd [ 655.656423][T13034] xt_TPROXY: Can be used only with -p tcp or -p udp [ 656.142942][ T5933] usb 4-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 656.412689][ T5933] usb 4-1: config 27 interface 0 altsetting 0 bulk endpoint 0xB has invalid maxpacket 47 [ 656.424386][ T5933] usb 4-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 656.434117][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 656.446225][T13026] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 656.456592][ T5933] usb 4-1: Quirk or no altset; falling back to MIDI 1.0 [ 657.494535][T13049] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1981'. [ 657.766051][T10014] usb 4-1: USB disconnect, device number 38 [ 661.137006][T13065] FAULT_INJECTION: forcing a failure. [ 661.137006][T13065] name failslab, interval 1, probability 0, space 0, times 0 [ 661.279111][T13065] CPU: 0 UID: 0 PID: 13065 Comm: syz.4.1987 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 661.279138][T13065] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 661.279148][T13065] Call Trace: [ 661.279154][T13065] [ 661.279160][T13065] dump_stack_lvl+0x16c/0x1f0 [ 661.279193][T13065] should_fail_ex+0x512/0x640 [ 661.279218][T13065] ? __kmalloc_cache_noprof+0x57/0x3e0 [ 661.279241][T13065] should_failslab+0xc2/0x120 [ 661.279258][T13065] __kmalloc_cache_noprof+0x6a/0x3e0 [ 661.279281][T13065] ? copy_mount_options+0x55/0x190 [ 661.279300][T13065] ? _copy_from_user+0x59/0xd0 [ 661.279318][T13065] copy_mount_options+0x55/0x190 [ 661.279339][T13065] __x64_sys_mount+0x1ac/0x310 [ 661.279358][T13065] ? __pfx___x64_sys_mount+0x10/0x10 [ 661.279384][T13065] do_syscall_64+0xcd/0x4c0 [ 661.279403][T13065] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 661.279420][T13065] RIP: 0033:0x7fea1a98e9a9 [ 661.279435][T13065] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 661.279451][T13065] RSP: 002b:00007fea1b73f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 661.279468][T13065] RAX: ffffffffffffffda RBX: 00007fea1abb5fa0 RCX: 00007fea1a98e9a9 [ 661.279480][T13065] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000180 [ 661.279491][T13065] RBP: 00007fea1b73f090 R08: 00002000000001c0 R09: 0000000000000000 [ 661.279501][T13065] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 661.279511][T13065] R13: 0000000000000001 R14: 00007fea1abb5fa0 R15: 00007ffd7d356438 [ 661.279532][T13065] [ 661.942435][ T5933] usb 4-1: new high-speed USB device number 39 using dummy_hcd [ 662.162336][ T5933] usb 4-1: Using ep0 maxpacket: 8 [ 662.165326][T10014] usb 3-1: new high-speed USB device number 46 using dummy_hcd [ 662.168841][ T5933] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x5 has invalid wMaxPacketSize 0 [ 662.185858][ T5933] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x5 has invalid maxpacket 0 [ 662.196399][ T5933] usb 4-1: config 16 interface 0 altsetting 0 endpoint 0x8B has invalid maxpacket 12320, setting to 1024 [ 662.207803][ T5933] usb 4-1: config 16 interface 0 altsetting 0 bulk endpoint 0x8B has invalid maxpacket 1024 [ 662.217998][ T5933] usb 4-1: config 16 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 662.231066][ T5933] usb 4-1: New USB device found, idVendor=ee8d, idProduct=db1a, bcdDevice=61.23 [ 662.240479][ T5933] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.252206][ T5890] usb 6-1: new high-speed USB device number 27 using dummy_hcd [ 662.312460][ T118] usb 5-1: new high-speed USB device number 44 using dummy_hcd [ 662.352386][T10014] usb 3-1: Using ep0 maxpacket: 16 [ 662.360578][T10014] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 662.370082][T10014] usb 3-1: config 0 has no interface number 0 [ 662.376611][T10014] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 662.390926][T10014] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 662.400726][T10014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 662.404911][ T5890] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.409041][T10014] usb 3-1: Product: syz [ 662.425073][T10014] usb 3-1: Manufacturer: syz [ 662.427935][ T5890] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.429695][T10014] usb 3-1: SerialNumber: syz [ 662.445278][ T5890] usb 6-1: config 0 interface 0 has no altsetting 0 [ 662.447383][T10014] usb 3-1: config 0 descriptor?? [ 662.452000][ T5890] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 662.468994][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.485357][ T118] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 662.496612][ T5933] usb 4-1: GET_CAPABILITIES returned 0 [ 662.502094][ T5933] usbtmc 4-1:16.0: can't read capabilities [ 662.512444][ T118] usb 5-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 662.529263][ T118] usb 5-1: config 0 interface 0 has no altsetting 0 [ 662.539136][ T5890] usb 6-1: config 0 descriptor?? [ 662.567317][ T118] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 662.577569][ T118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 662.600590][ T118] usb 5-1: config 0 descriptor?? [ 662.726489][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.739605][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.748694][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.765160][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.774235][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.783349][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.792442][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.801533][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.810595][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.830865][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.839964][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.849020][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.858112][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.867187][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.876243][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.885290][ C0] usbtmc 4-1:16.0: usbtmc_read_bulk_cb - nonzero read bulk status received: -71 [ 662.956356][T13068] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 662.967212][T13068] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 662.979789][ T10] usb 4-1: USB disconnect, device number 39 [ 663.184995][T13074] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.199549][T10014] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 663.205005][T13074] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 663.276130][T13077] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 663.390615][T10014] usb 3-1: USB disconnect, device number 46 [ 663.939339][ T5890] usb 6-1: string descriptor 0 read error: -22 [ 663.966079][T13077] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 664.115074][ T5890] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001A/input/input65 [ 664.764545][ T118] usb 5-1: string descriptor 0 read error: -22 [ 664.797408][ T5890] input: HID 256c:006d as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001A/input/input66 [ 664.888194][ T118] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001B/input/input69 [ 665.050835][ T5890] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001A/input/input67 [ 665.270374][ T118] input: HID 256c:006d as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001B/input/input70 [ 665.325235][ T5890] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/0003:256C:006D.001A/input/input68 [ 665.524283][ T118] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001B/input/input71 [ 665.689650][ T5890] uclogic 0003:256C:006D.001A: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.5-1/input0 [ 665.780449][T13100] ntfs3: Unknown parameter 'discard4 MAC' [ 665.838305][ T118] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/0003:256C:006D.001B/input/input72 [ 666.370871][ T30] audit: type=1400 audit(1753286429.908:635): avc: denied { module_load } for pid=13106 comm="syz.0.1998" path=2F6D656D66643A2D42D54E49C56A9A707070F00884A26D202864656C6574656429 dev="tmpfs" ino=298 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=system permissive=1 [ 666.399141][ T118] uclogic 0003:256C:006D.001B: input,hidraw1: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.4-1/input0 [ 666.598317][ T55] usb 6-1: reset high-speed USB device number 27 using dummy_hcd [ 666.615778][ T118] usb 5-1: USB disconnect, device number 44 [ 667.045921][ T55] usb 6-1: device firmware changed [ 667.079202][ T5890] usb 6-1: USB disconnect, device number 27 [ 667.108274][T13116] fido_id[13116]: Failed to open report descriptor at '/sys/devices/platform/dummy_hcd.4/usb5/5-1/report_descriptor': No such file or directory [ 667.396146][T13120] xt_TPROXY: Can be used only with -p tcp or -p udp [ 667.842286][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2003'. [ 668.385486][ T10] usb 1-1: new high-speed USB device number 55 using dummy_hcd [ 668.443357][ T5890] usb 6-1: new high-speed USB device number 28 using dummy_hcd [ 668.815263][ T10] usb 1-1: Using ep0 maxpacket: 16 [ 668.821914][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 668.822220][ T118] usb 4-1: new high-speed USB device number 40 using dummy_hcd [ 668.842533][ T10] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 668.875734][ T10] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 668.905303][ T10] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 668.914341][ T10] usb 1-1: Product: syz [ 668.918668][ T10] usb 1-1: Manufacturer: syz [ 668.926958][ T10] usb 1-1: SerialNumber: syz [ 668.938254][ T10] usb 1-1: config 0 descriptor?? [ 668.952728][T13124] raw-gadget.1 gadget.0: fail, usb_ep_enable returned -22 [ 668.966939][ T10] hub 1-1:0.0: bad descriptor, ignoring hub [ 668.985874][ T10] hub 1-1:0.0: probe with driver hub failed with error -5 [ 669.007630][ T10] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input73 [ 669.113715][ T118] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 669.131162][ T118] usb 4-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 669.202401][T13145] netlink: 128 bytes leftover after parsing attributes in process `syz.4.2005'. [ 669.229837][ T118] usb 4-1: config 0 interface 0 has no altsetting 0 [ 669.251053][ T118] usb 4-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 669.269855][ T24] usb 1-1: USB disconnect, device number 55 [ 669.275917][ C1] usbtouchscreen 1-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 669.493294][ T118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 669.918531][ T118] usb 4-1: config 0 descriptor?? [ 669.989419][T13149] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2011'. [ 670.252247][T10014] usb 3-1: new high-speed USB device number 47 using dummy_hcd [ 671.050062][T13132] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 671.306787][T13132] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 671.307827][T10014] usb 3-1: New USB device found, idVendor=0af0, idProduct=7a05, bcdDevice= 0.00 [ 671.326315][T10014] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 671.335140][T10014] usb 3-1: Product: syz [ 671.339366][T10014] usb 3-1: Manufacturer: syz [ 671.349343][T10014] usb 3-1: SerialNumber: syz [ 671.667527][T10014] usb 3-1: config 0 descriptor?? [ 671.882414][T10014] hso 3-1:0.0: Failed to find BULK IN ep [ 671.890773][T10014] usb-storage 3-1:0.0: USB Mass Storage device detected [ 671.898621][ T118] usb 4-1: string descriptor 0 read error: -22 [ 672.007242][T13166] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2014'. [ 672.752641][ T118] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001C/input/input74 [ 672.861324][ T118] input: HID 256c:006d as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001C/input/input75 [ 673.027444][ T118] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001C/input/input76 [ 673.151618][T13149] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 673.165876][ T118] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/0003:256C:006D.001C/input/input77 [ 673.203633][T13149] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 673.241789][ T118] uclogic 0003:256C:006D.001C: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.3-1/input0 [ 674.032519][T10014] usb 4-1: reset high-speed USB device number 40 using dummy_hcd [ 674.289186][ T5828] usb 3-1: USB disconnect, device number 47 [ 674.577968][T13188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 675.235168][ T10] usb 4-1: USB disconnect, device number 40 [ 675.507965][T13203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=59152 sclass=netlink_route_socket pid=13203 comm=syz.3.2024 [ 675.523003][T13203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2560 sclass=netlink_route_socket pid=13203 comm=syz.3.2024 [ 675.541053][T13203] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=2569 sclass=netlink_route_socket pid=13203 comm=syz.3.2024 [ 675.622237][ T24] usb 6-1: new high-speed USB device number 29 using dummy_hcd [ 675.997702][ T24] usb 6-1: config 0 interface 0 altsetting 0 has an endpoint descriptor with address 0xA1, changing to 0x81 [ 676.010565][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 676.021764][ T24] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 676.356012][ T24] usb 6-1: New USB device found, idVendor=054c, idProduct=024b, bcdDevice= 0.00 [ 676.574276][ T24] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 676.703697][ T24] usb 6-1: config 0 descriptor?? [ 677.350084][T13222] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.2030'. [ 677.480500][ T30] audit: type=1804 audit(1753286441.018:636): pid=13225 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2031" name="/newroot/408/file0" dev="tmpfs" ino=2155 res=1 errno=0 [ 677.488526][T13225] netlink: 'syz.0.2031': attribute type 10 has an invalid length. [ 677.603258][ T24] sony 0003:054C:024B.001D: unexpected long global item [ 677.611921][ T24] sony 0003:054C:024B.001D: parse failed [ 677.621053][ T24] sony 0003:054C:024B.001D: probe with driver sony failed with error -22 [ 677.672611][ T118] usb 4-1: new high-speed USB device number 41 using dummy_hcd [ 677.824482][ T118] usb 4-1: device descriptor read/64, error -71 [ 677.839773][ T24] usb 6-1: USB disconnect, device number 29 [ 678.452308][ T118] usb 4-1: new high-speed USB device number 42 using dummy_hcd [ 678.627290][ T118] usb 4-1: device descriptor read/64, error -71 [ 678.745725][ T118] usb usb4-port1: attempt power cycle [ 679.372315][ T118] usb 4-1: new high-speed USB device number 43 using dummy_hcd [ 679.393032][ T118] usb 4-1: device descriptor read/8, error -71 [ 679.667870][ T118] usb 4-1: new high-speed USB device number 44 using dummy_hcd [ 679.696060][ T118] usb 4-1: device descriptor read/8, error -71 [ 679.868946][ T118] usb usb4-port1: unable to enumerate USB device [ 680.553572][ T118] usb 4-1: new high-speed USB device number 45 using dummy_hcd [ 680.794223][T13268] xt_TPROXY: Can be used only with -p tcp or -p udp [ 680.815092][T10014] usb 6-1: new high-speed USB device number 30 using dummy_hcd [ 680.992396][T10014] usb 6-1: Using ep0 maxpacket: 16 [ 681.037373][T10014] usb 6-1: unable to get BOS descriptor or descriptor too short [ 681.152468][T10014] usb 6-1: config 1 contains an unexpected descriptor of type 0x1, skipping [ 681.190188][T10014] usb 6-1: config 1 has an invalid descriptor of length 8, skipping remainder of the config [ 681.203762][T10014] usb 6-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 681.215364][T10014] usb 6-1: New USB device found, idVendor=1d6b, idProduct=0101, bcdDevice= 0.40 [ 681.224889][T10014] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 681.239900][T10014] usb 6-1: Product: syz [ 681.252331][ T118] usb 4-1: Using ep0 maxpacket: 8 [ 681.267551][ T118] usb 4-1: config 0 has an invalid interface number: 233 but max is 0 [ 681.286137][ T118] usb 4-1: config 0 has no interface number 0 [ 681.301438][ T118] usb 4-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=98.7f [ 681.327656][ T118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 681.381357][T10014] usb 6-1: Manufacturer: syz [ 681.386272][T10014] usb 6-1: SerialNumber: syz [ 681.388145][ T118] usb 4-1: config 0 descriptor?? [ 681.434144][T13271] xt_TPROXY: Can be used only with -p tcp or -p udp [ 681.659649][T10014] usb 6-1: 0:2 : does not exist [ 681.679867][ T118] usb 4-1: string descriptor 0 read error: -71 [ 681.702641][ T118] gspca_main: spca501-2.14.0 probing 0497:c001 [ 681.707218][T10014] usb 6-1: USB disconnect, device number 30 [ 681.719346][ T118] gspca_spca501: reg write: error -71 [ 681.726414][ T118] spca501 4-1:0.233: Reg write failed for 0x02,0x07,0x05 [ 681.733622][ T118] spca501 4-1:0.233: probe with driver spca501 failed with error -22 [ 681.831369][ T118] usb 4-1: USB disconnect, device number 45 [ 682.427427][ T30] audit: type=1400 audit(1753286445.968:637): avc: denied { mount } for pid=13288 comm="syz.2.2052" name="/" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 682.459065][T13291] ALSA: mixer_oss: invalid OSS volume '' [ 682.488596][ T30] audit: type=1400 audit(1753286446.028:638): avc: denied { mounton } for pid=13288 comm="syz.2.2052" path="/403/file0" dev="tracefs" ino=1 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=dir permissive=1 [ 682.502337][ T55] usb 1-1: new high-speed USB device number 56 using dummy_hcd [ 682.658289][ T30] audit: type=1804 audit(1753286446.198:639): pid=13297 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2053" name="/newroot/382/file0" dev="tmpfs" ino=2008 res=1 errno=0 [ 682.722204][ T55] usb 1-1: Using ep0 maxpacket: 16 [ 682.736582][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 682.750125][T13297] netlink: 'syz.3.2053': attribute type 10 has an invalid length. [ 682.767534][ T55] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 682.782456][ T55] usb 1-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 682.795273][ T55] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 682.804117][ T55] usb 1-1: Product: syz [ 682.808434][ T55] usb 1-1: Manufacturer: syz [ 682.814784][ T55] usb 1-1: SerialNumber: syz [ 682.823332][ T55] usb 1-1: config 0 descriptor?? [ 682.829220][T13282] raw-gadget.0 gadget.0: fail, usb_ep_enable returned -22 [ 682.840442][ T55] hub 1-1:0.0: bad descriptor, ignoring hub [ 682.847372][ T55] hub 1-1:0.0: probe with driver hub failed with error -5 [ 682.857264][ T55] input: syz syz as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/input/input79 [ 683.062587][ T55] usb 1-1: USB disconnect, device number 56 [ 683.440718][ T30] audit: type=1400 audit(1753286446.978:640): avc: denied { unmount } for pid=5835 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:tracefs_t tclass=filesystem permissive=1 [ 683.908225][T13307] xt_CT: No such helper "snmp" [ 684.052323][T10014] usb 4-1: new low-speed USB device number 46 using dummy_hcd [ 684.803735][T10014] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 684.811799][T10014] usb 4-1: config 0 has no interface number 0 [ 684.818132][T10014] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 684.843242][T13324] xt_TPROXY: Can be used only with -p tcp or -p udp [ 684.852478][T10014] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 684.878289][T10014] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 684.907368][T10014] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 684.928349][T10014] usb 4-1: config 0 descriptor?? [ 684.938308][T13304] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 684.959140][T10014] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 685.181985][T13330] bridge6: entered promiscuous mode [ 685.187464][T13330] bridge6: entered allmulticast mode [ 685.354920][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 685.512391][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 687.250109][T13344] xt_CT: No such helper "netbios-ns" [ 687.905940][T13354] ALSA: mixer_oss: invalid OSS volume '' [ 688.439360][ T5883] usb 4-1: USB disconnect, device number 46 [ 689.968946][T13379] xt_TPROXY: Can be used only with -p tcp or -p udp [ 690.536818][T13385] ALSA: mixer_oss: invalid OSS volume '' [ 690.978768][T13399] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2080'. [ 692.544627][T13408] Bluetooth: (null): Too short H5 packet [ 692.658019][ T1037] Bluetooth: (null): Invalid header checksum [ 692.695905][ T1037] Bluetooth: (null): Invalid header checksum [ 692.763251][ T12] Bluetooth: (null): Invalid header checksum [ 692.899577][ T1037] Bluetooth: (null): Invalid header checksum [ 692.985725][ T7258] Bluetooth: (null): Invalid header checksum [ 692.992447][ T30] audit: type=1400 audit(1753286456.398:641): avc: denied { setopt } for pid=13410 comm="syz.4.2084" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 693.093814][ T1037] Bluetooth: (null): Invalid header checksum [ 693.203637][ T6380] Bluetooth: (null): Invalid header checksum [ 693.313627][ T6380] Bluetooth: (null): Invalid header checksum [ 693.422967][ T6380] Bluetooth: (null): Invalid header checksum [ 695.003629][T13433] ALSA: mixer_oss: invalid OSS volume '' [ 695.704530][ T55] usb 1-1: new high-speed USB device number 57 using dummy_hcd [ 696.531399][ T55] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 696.535297][T13447] xt_TPROXY: Can be used only with -p tcp or -p udp [ 696.552966][ T55] usb 1-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 696.594337][ T55] usb 1-1: config 0 interface 0 has no altsetting 0 [ 696.643162][ T55] usb 1-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 696.737369][ T55] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 696.852733][ T118] usb 4-1: new high-speed USB device number 47 using dummy_hcd [ 696.960321][ T55] usb 1-1: config 0 descriptor?? [ 697.035406][ T118] usb 4-1: Using ep0 maxpacket: 16 [ 697.368391][ T118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 697.435099][ T118] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 697.465408][ T118] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 697.476710][ T118] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 697.494930][ T118] usb 4-1: Product: syz [ 697.622232][ T118] usb 4-1: Manufacturer: syz [ 697.626976][ T118] usb 4-1: SerialNumber: syz [ 697.643137][ T118] usb 4-1: config 0 descriptor?? [ 697.823658][T13439] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 697.832886][T13439] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 698.540715][T13446] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 698.554668][ T118] hub 4-1:0.0: bad descriptor, ignoring hub [ 698.563599][ T118] hub 4-1:0.0: probe with driver hub failed with error -5 [ 698.581220][ T118] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input80 [ 699.021047][ T55] usb 1-1: string descriptor 0 read error: -22 [ 699.040898][ T55] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001E/input/input81 [ 699.137886][ T55] input: HID 256c:006d as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001E/input/input82 [ 699.283731][ T55] input: HID 256c:006d Touch Strip as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001E/input/input83 [ 699.388611][ T118] usb 4-1: USB disconnect, device number 47 [ 699.441242][ T55] input: HID 256c:006d Dial as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/0003:256C:006D.001E/input/input84 [ 699.574823][ T55] uclogic 0003:256C:006D.001E: input,hidraw0: USB HID v0.00 Keypad [HID 256c:006d] on usb-dummy_hcd.0-1/input0 [ 700.617995][ T55] usb 1-1: USB disconnect, device number 57 [ 700.703026][ T118] usb 5-1: new low-speed USB device number 45 using dummy_hcd [ 700.900905][T13482] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 700.912812][T13482] CPU: 1 UID: 0 PID: 13482 Comm: syz.2.2103 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 700.912829][T13482] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 700.912837][T13482] Call Trace: [ 700.912841][T13482] [ 700.912845][T13482] dump_stack_lvl+0x16c/0x1f0 [ 700.912869][T13482] sysfs_warn_dup+0x7f/0xa0 [ 700.912887][T13482] sysfs_do_create_link_sd+0x124/0x140 [ 700.912899][T13482] sysfs_create_link+0x61/0xc0 [ 700.912910][T13482] device_add+0x62c/0x1a70 [ 700.912926][T13482] ? __pfx_device_add+0x10/0x10 [ 700.912939][T13482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 700.912954][T13482] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 700.912970][T13482] wiphy_register+0x1c9c/0x2850 [ 700.912985][T13482] ? netdev_run_todo+0x864/0x1320 [ 700.912997][T13482] ? __dev_printk+0x270/0x270 [ 700.913016][T13482] ? __pfx_wiphy_register+0x10/0x10 [ 700.913037][T13482] ieee80211_register_hw+0x24ac/0x4140 [ 700.913055][T13482] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 700.913070][T13482] ? find_held_lock+0x2b/0x80 [ 700.913085][T13482] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 700.913098][T13482] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 700.913113][T13482] ? __hrtimer_setup+0x176/0x280 [ 700.913128][T13482] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 700.913154][T13482] ? trace_kmalloc+0x2b/0xd0 [ 700.913165][T13482] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 700.913183][T13482] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 700.913201][T13482] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 700.913218][T13482] ? __asan_memcpy+0x3c/0x60 [ 700.913236][T13482] hwsim_new_radio_nl+0xb51/0x12c0 [ 700.913254][T13482] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 700.913276][T13482] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 700.913292][T13482] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 700.913310][T13482] genl_family_rcv_msg_doit+0x206/0x2f0 [ 700.913326][T13482] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 700.913345][T13482] ? bpf_lsm_capable+0x9/0x10 [ 700.913359][T13482] ? security_capable+0x7e/0x260 [ 700.913375][T13482] ? ns_capable+0xd7/0x110 [ 700.913390][T13482] genl_rcv_msg+0x55c/0x800 [ 700.913406][T13482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 700.913420][T13482] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 700.913447][T13482] ? __lock_acquire+0x622/0x1c90 [ 700.913459][T13482] netlink_rcv_skb+0x155/0x420 [ 700.913473][T13482] ? __pfx_genl_rcv_msg+0x10/0x10 [ 700.913489][T13482] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 700.913518][T13482] ? netlink_deliver_tap+0x1ae/0xd30 [ 700.913535][T13482] ? is_vmalloc_addr+0x86/0xa0 [ 700.913563][T13482] genl_rcv+0x28/0x40 [ 700.913577][T13482] netlink_unicast+0x58d/0x850 [ 700.913592][T13482] ? __pfx_netlink_unicast+0x10/0x10 [ 700.913608][T13482] netlink_sendmsg+0x8d1/0xdd0 [ 700.913624][T13482] ? __pfx_netlink_sendmsg+0x10/0x10 [ 700.913642][T13482] ____sys_sendmsg+0xa95/0xc70 [ 700.913656][T13482] ? copy_msghdr_from_user+0x10a/0x160 [ 700.913673][T13482] ? __pfx_____sys_sendmsg+0x10/0x10 [ 700.913690][T13482] ? __pfx_futex_wake_mark+0x10/0x10 [ 700.913703][T13482] ___sys_sendmsg+0x134/0x1d0 [ 700.913722][T13482] ? __pfx____sys_sendmsg+0x10/0x10 [ 700.913737][T13482] ? __lock_acquire+0x622/0x1c90 [ 700.913765][T13482] __sys_sendmsg+0x16d/0x220 [ 700.913776][T13482] ? __pfx___sys_sendmsg+0x10/0x10 [ 700.913785][T13482] ? __x64_sys_futex+0x1e0/0x4c0 [ 700.913810][T13482] do_syscall_64+0xcd/0x4c0 [ 700.913822][T13482] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 700.913834][T13482] RIP: 0033:0x7f26c538e9a9 [ 700.913844][T13482] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 700.913855][T13482] RSP: 002b:00007f26c626e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 700.913867][T13482] RAX: ffffffffffffffda RBX: 00007f26c55b5fa0 RCX: 00007f26c538e9a9 [ 700.913874][T13482] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 700.913880][T13482] RBP: 00007f26c5410d69 R08: 0000000000000000 R09: 0000000000000000 [ 700.913886][T13482] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 700.913893][T13482] R13: 0000000000000000 R14: 00007f26c55b5fa0 R15: 00007ffd794c81d8 [ 700.913909][T13482] [ 701.359130][ T118] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 701.369265][ T118] usb 5-1: config 0 has no interface number 0 [ 701.375571][ T118] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 701.386565][ T118] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 701.397313][ T118] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 701.406390][ T118] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 701.419088][ T118] usb 5-1: config 0 descriptor?? [ 701.425987][T13473] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 701.448901][ T118] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 701.608483][T13489] netlink: 56 bytes leftover after parsing attributes in process `syz.2.2104'. [ 704.887038][ C1] iowarrior 5-1:0.1: iowarrior_callback - usb_submit_urb failed with result -1 [ 704.904911][ T5828] usb 5-1: USB disconnect, device number 45 [ 704.949791][T13508] netlink: 'syz.3.2109': attribute type 10 has an invalid length. [ 704.960216][ T30] audit: type=1804 audit(1753286468.488:642): pid=13508 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2109" name="/newroot/394/file0" dev="tmpfs" ino=2071 res=1 errno=0 [ 705.139917][T13515] netlink: 84 bytes leftover after parsing attributes in process `syz.5.2107'. [ 705.164303][T13514] ALSA: mixer_oss: invalid OSS volume '' [ 705.832836][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 707.538112][ T30] audit: type=1400 audit(1753286471.068:643): avc: denied { setopt } for pid=13532 comm="syz.5.2118" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=ieee802154_socket permissive=1 [ 707.960316][T10014] usb 1-1: new high-speed USB device number 58 using dummy_hcd [ 708.142246][T10014] usb 1-1: Using ep0 maxpacket: 16 [ 708.150000][T10014] usb 1-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 708.190861][T10014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 7 [ 708.643680][T13549] xt_TPROXY: Can be used only with -p tcp or -p udp [ 709.198709][T10014] usb 1-1: config 0 interface 0 altsetting 0 endpoint 0x2 has invalid wMaxPacketSize 0 [ 709.208536][T10014] usb 1-1: config 0 interface 0 altsetting 0 bulk endpoint 0x2 has invalid maxpacket 0 [ 709.218291][T10014] usb 1-1: config 0 interface 0 altsetting 0 has 2 endpoint descriptors, different from the interface descriptor's value: 3 [ 709.233558][T10014] usb 1-1: New USB device found, idVendor=2040, idProduct=b138, bcdDevice= 1.42 [ 709.242831][T10014] usb 1-1: New USB device strings: Mfr=4, Product=0, SerialNumber=0 [ 709.250881][T10014] usb 1-1: Manufacturer: syz [ 709.480353][T10014] usb 1-1: config 0 descriptor?? [ 709.766619][T13571] xt_TPROXY: Can be used only with -p tcp or -p udp [ 711.042250][T10014] rc_core: IR keymap rc-hauppauge not found [ 711.174181][T10014] Registered IR keymap rc-empty [ 711.563751][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.585062][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.605226][ T30] audit: type=1804 audit(1753286475.128:644): pid=13582 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2129" name="/newroot/422/file0" dev="tmpfs" ino=2193 res=1 errno=0 [ 711.612187][T13582] netlink: 'syz.5.2129': attribute type 10 has an invalid length. [ 711.627709][ C1] vkms_vblank_simulate: vblank timer overrun [ 711.658050][T10014] rc rc0: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0 [ 711.691660][T10014] input: Conexant Hybrid TV (cx231xx) MCE IR no TX as /devices/platform/dummy_hcd.0/usb1/1-1/1-1:0.0/rc/rc0/input85 [ 711.732829][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 711.902585][ T5883] usb 3-1: new high-speed USB device number 48 using dummy_hcd [ 712.072252][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 712.111718][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 712.134783][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 712.172595][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 712.212481][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 712.253506][ T5883] usb 3-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 712.264020][ T5883] usb 3-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 712.275000][ T5883] usb 3-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 712.285626][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 712.293150][ T5883] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=3 [ 712.301210][ T5883] usb 3-1: SerialNumber: syz [ 712.418017][T13603] binder: 13599:13603 unknown command 0 [ 712.447136][T13603] binder: 13599:13603 ioctl c0306201 2000000003c0 returned -22 [ 712.527566][T13606] binder_alloc: 13599: binder_alloc_buf size 34952 failed, no address space [ 712.702442][T13589] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 712.734733][T13589] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 712.780329][T13606] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 713.076457][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.332236][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.357238][T10014] mceusb 1-1:0.0: Error: mce write submit urb error = -90 [ 713.406481][ T5883] usb 3-1: 0:2 : does not exist [ 713.422902][T10014] mceusb 1-1:0.0: Registered with mce emulator interface version 1 [ 713.430944][T10014] mceusb 1-1:0.0: 2 tx ports (0x0 cabled) and 2 rx sensors (0x0 active) [ 713.451612][T10014] usb 1-1: USB disconnect, device number 58 [ 713.508525][ T5883] usb 3-1: USB disconnect, device number 48 [ 713.527266][ T30] audit: type=1400 audit(1753286477.048:645): avc: denied { mounton } for pid=13608 comm="syz.0.2140" path="/430/file0" dev="proc" ino=4026533205 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:proc_net_t tclass=dir permissive=1 [ 713.587119][T13612] capability: warning: `syz.0.2140' uses deprecated v2 capabilities in a way that may be insecure [ 713.605234][T13094] udevd[13094]: error opening ATTR{/sys/devices/platform/dummy_hcd.2/usb3/3-1/3-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 713.636506][ T30] audit: type=1400 audit(1753286477.068:646): avc: denied { map } for pid=13608 comm="syz.0.2140" path="pipe:[39822]" dev="pipefs" ino=39822 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=fifo_file permissive=1 [ 713.659333][ C1] vkms_vblank_simulate: vblank timer overrun [ 716.726108][T13665] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 718.206737][T13673] xt_CT: No such helper "snmp" [ 719.648940][T13692] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 721.956827][T13711] xt_CT: No such helper "netbios-ns" [ 722.400600][T13720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2170'. [ 722.645248][T13719] xt_TPROXY: Can be used only with -p tcp or -p udp [ 723.241244][ T30] audit: type=1400 audit(1753286486.778:647): avc: denied { mount } for pid=13733 comm="syz.3.2174" name="/" dev="pstore" ino=3154 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 723.270151][T13734] netlink: 'syz.3.2174': attribute type 13 has an invalid length. [ 723.626715][ T30] audit: type=1400 audit(1753286487.168:648): avc: denied { unmount } for pid=5832 comm="syz-executor" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:pstore_t tclass=filesystem permissive=1 [ 724.360259][ T30] audit: type=1804 audit(1753286487.898:649): pid=13746 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.3.2177" name="/newroot/409/file0" dev="tmpfs" ino=2150 res=1 errno=0 [ 724.385223][T13746] netlink: 'syz.3.2177': attribute type 10 has an invalid length. [ 728.414586][T13789] xt_TPROXY: Can be used only with -p tcp or -p udp [ 731.871017][T13816] netlink: 'syz.5.2195': attribute type 10 has an invalid length. [ 731.883201][ T30] audit: type=1804 audit(1753286495.408:650): pid=13816 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.5.2195" name="/newroot/438/file0" dev="tmpfs" ino=2277 res=1 errno=0 [ 731.996095][ T30] audit: type=1400 audit(1753286495.528:651): avc: denied { mounton } for pid=13817 comm="syz.4.2196" path="/454/file0" dev="tmpfs" ino=2383 scontext=root:sysadm_r:sysadm_t tcontext=root:object_r:user_tmpfs_t tclass=fifo_file permissive=1 [ 732.834417][T13834] xt_TPROXY: Can be used only with -p tcp or -p udp [ 733.338197][T13842] xt_TPROXY: Can be used only with -p tcp or -p udp [ 734.102551][ T5828] usb 5-1: new high-speed USB device number 46 using dummy_hcd [ 734.615839][ T5828] usb 5-1: Using ep0 maxpacket: 16 [ 735.652753][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 736.620151][ T5828] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 736.652115][ T5828] usb 5-1: string descriptor 0 read error: -71 [ 736.668686][ T5828] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 736.679420][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 736.689038][ T5828] usb 5-1: config 0 descriptor?? [ 736.701409][ T5828] usb 5-1: can't set config #0, error -71 [ 736.709777][ T5828] usb 5-1: USB disconnect, device number 46 [ 738.455810][T13881] FAULT_INJECTION: forcing a failure. [ 738.455810][T13881] name failslab, interval 1, probability 0, space 0, times 0 [ 738.479166][T13881] CPU: 0 UID: 0 PID: 13881 Comm: syz.4.2213 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 738.479194][T13881] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 738.479205][T13881] Call Trace: [ 738.479211][T13881] [ 738.479218][T13881] dump_stack_lvl+0x16c/0x1f0 [ 738.479259][T13881] should_fail_ex+0x512/0x640 [ 738.479287][T13881] ? kmem_cache_alloc_noprof+0x5a/0x3b0 [ 738.479316][T13881] should_failslab+0xc2/0x120 [ 738.479335][T13881] kmem_cache_alloc_noprof+0x6d/0x3b0 [ 738.479361][T13881] ? getname_flags.part.0+0x4c/0x550 [ 738.479388][T13881] getname_flags.part.0+0x4c/0x550 [ 738.479412][T13881] getname_flags+0x93/0xf0 [ 738.479438][T13881] user_path_at+0x24/0x60 [ 738.479465][T13881] __x64_sys_mount+0x1fc/0x310 [ 738.479485][T13881] ? __pfx___x64_sys_mount+0x10/0x10 [ 738.479503][T13881] ? xfd_validate_state+0x61/0x180 [ 738.479536][T13881] do_syscall_64+0xcd/0x4c0 [ 738.479554][T13881] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 738.479572][T13881] RIP: 0033:0x7fea1a98e9a9 [ 738.479586][T13881] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 738.479603][T13881] RSP: 002b:00007fea1b73f038 EFLAGS: 00000246 ORIG_RAX: 00000000000000a5 [ 738.479620][T13881] RAX: ffffffffffffffda RBX: 00007fea1abb5fa0 RCX: 00007fea1a98e9a9 [ 738.479631][T13881] RDX: 0000200000000040 RSI: 0000200000000240 RDI: 0000200000000180 [ 738.479642][T13881] RBP: 00007fea1b73f090 R08: 00002000000001c0 R09: 0000000000000000 [ 738.479652][T13881] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 738.479662][T13881] R13: 0000000000000001 R14: 00007fea1abb5fa0 R15: 00007ffd7d356438 [ 738.479685][T13881] [ 740.660770][T13896] xt_TPROXY: Can be used only with -p tcp or -p udp [ 740.853200][T13901] xt_TPROXY: Can be used only with -p tcp or -p udp [ 741.492716][ T30] audit: type=1800 audit(1753286505.038:652): pid=13914 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm="syz.3.2221" name="bus" dev="overlay" ino=2221 res=0 errno=0 [ 741.532519][ T5883] usb 6-1: new high-speed USB device number 31 using dummy_hcd [ 741.540788][T13915] netlink: 76 bytes leftover after parsing attributes in process `syz.4.2215'. [ 741.725713][ T5883] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 741.760142][ T5883] usb 6-1: config 0 interface 0 altsetting 128 endpoint 0x81 has invalid wMaxPacketSize 0 [ 741.790889][ T5883] usb 6-1: config 0 interface 0 has no altsetting 0 [ 741.798224][ T5883] usb 6-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 741.810996][ T5883] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 741.834988][ T5883] usb 6-1: config 0 descriptor?? [ 741.972465][ T5890] usb 3-1: new high-speed USB device number 49 using dummy_hcd [ 742.136947][ T30] audit: type=1400 audit(1753286505.678:653): avc: denied { bind } for pid=13929 comm="syz.3.2228" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=pppox_socket permissive=1 [ 742.304504][ T5890] usb 3-1: Using ep0 maxpacket: 16 [ 742.315936][ T5890] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 742.324641][ T5890] usb 3-1: config 0 has no interface number 0 [ 742.330902][ T5890] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 742.344785][ T5890] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 742.358504][ T5890] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 742.372228][ T5890] usb 3-1: Product: syz [ 742.376447][ T5890] usb 3-1: Manufacturer: syz [ 742.401382][ T5890] usb 3-1: SerialNumber: syz [ 742.425272][ T5890] usb 3-1: config 0 descriptor?? [ 742.686008][T13921] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.072503][T13942] xt_TPROXY: Can be used only with -p tcp or -p udp [ 743.464236][T13921] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.684964][T13910] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 743.706935][T13946] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2231'. [ 743.802591][T13910] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 743.829918][T13946] netlink: 56 bytes leftover after parsing attributes in process `syz.4.2231'. [ 744.461739][ T5890] usbtouchscreen 3-1:0.214: Failed to read FW rev: -32 [ 744.479517][ T5890] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -32 [ 744.492201][ T5890] usb 3-1: USB disconnect, device number 49 [ 745.557171][ T5883] usb 6-1: string descriptor 0 read error: -71 [ 745.578201][ T5883] uclogic 0003:256C:006D.001F: failed retrieving string descriptor #200: -71 [ 745.600619][ T5883] uclogic 0003:256C:006D.001F: failed retrieving pen parameters: -71 [ 745.626561][ T5883] uclogic 0003:256C:006D.001F: failed probing pen v2 parameters: -71 [ 745.823882][ T5883] uclogic 0003:256C:006D.001F: failed probing parameters: -71 [ 745.831563][ T5883] uclogic 0003:256C:006D.001F: probe with driver uclogic failed with error -71 [ 745.861308][ T5883] usb 6-1: USB disconnect, device number 31 [ 745.949926][T13984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2238'. [ 745.959292][T13984] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2238'. [ 746.034870][ T5933] Process accounting resumed [ 746.352533][ T118] usb 4-1: new low-speed USB device number 48 using dummy_hcd [ 747.272567][T14000] xt_TPROXY: Can be used only with -p tcp or -p udp [ 747.433158][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 747.638208][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 747.650562][ T30] audit: type=1804 audit(1753286511.198:654): pid=13997 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.0.2244" name="/newroot/452/file0" dev="tmpfs" ino=2383 res=1 errno=0 [ 747.678070][T13997] netlink: 'syz.0.2244': attribute type 10 has an invalid length. [ 747.693422][ T118] usb 4-1: config 0 has an invalid interface number: 1 but max is 0 [ 747.701456][ T118] usb 4-1: config 0 has no interface number 0 [ 747.711756][ T118] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 747.723548][ T118] usb 4-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 747.735761][ T118] usb 4-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 747.744942][ T118] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 747.757837][ T118] usb 4-1: config 0 descriptor?? [ 747.764327][T13983] raw-gadget.0 gadget.3: fail, usb_ep_enable returned -22 [ 747.775790][ T118] iowarrior 4-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 747.862157][ T5883] usb 6-1: new high-speed USB device number 32 using dummy_hcd [ 748.203360][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 748.207277][T13983] FAULT_INJECTION: forcing a failure. [ 748.207277][T13983] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 748.216798][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 748.317369][ T5883] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 748.330733][ T5883] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 748.340080][ T5883] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 748.348147][ T5883] usb 6-1: Product: syz [ 748.352450][ T5883] usb 6-1: Manufacturer: syz [ 748.357143][ T5883] usb 6-1: SerialNumber: syz [ 748.372496][ T5883] usb 6-1: config 0 descriptor?? [ 748.378333][T13979] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 748.387966][ T5883] hub 6-1:0.0: bad descriptor, ignoring hub [ 748.585196][ T5883] hub 6-1:0.0: probe with driver hub failed with error -5 [ 748.951770][T13983] CPU: 0 UID: 0 PID: 13983 Comm: syz.3.2240 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 748.951800][T13983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 748.951810][T13983] Call Trace: [ 748.951816][T13983] [ 748.951823][T13983] dump_stack_lvl+0x16c/0x1f0 [ 748.951855][T13983] should_fail_ex+0x512/0x640 [ 748.951883][T13983] _copy_from_user+0x2e/0xd0 [ 748.951900][T13983] __sys_bpf+0x21d/0x4ea0 [ 748.951926][T13983] ? __pfx___sys_bpf+0x10/0x10 [ 748.951949][T13983] ? ksys_write+0x190/0x250 [ 748.951978][T13983] ? __mutex_unlock_slowpath+0x161/0x6a0 [ 748.952008][T13983] ? fput+0x70/0xf0 [ 748.952024][T13983] ? ksys_write+0x1ac/0x250 [ 748.952047][T13983] ? __pfx_ksys_write+0x10/0x10 [ 748.952073][T13983] __x64_sys_bpf+0x78/0xc0 [ 748.952095][T13983] ? lockdep_hardirqs_on+0x7c/0x110 [ 748.952118][T13983] do_syscall_64+0xcd/0x4c0 [ 748.952142][T13983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 748.952158][T13983] RIP: 0033:0x7f6b54b8e9a9 [ 748.952172][T13983] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 748.952188][T13983] RSP: 002b:00007f6b55a38038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 748.952203][T13983] RAX: ffffffffffffffda RBX: 00007f6b54db5fa0 RCX: 00007f6b54b8e9a9 [ 748.952214][T13983] RDX: 0000000000000018 RSI: 00002000000000c0 RDI: 0000000000000006 [ 748.952224][T13983] RBP: 00007f6b55a38090 R08: 0000000000000000 R09: 0000000000000000 [ 748.952233][T13983] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 748.952242][T13983] R13: 0000000000000000 R14: 00007f6b54db5fa0 R15: 00007fffd8831138 [ 748.952263][T13983] [ 749.141705][ T5883] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input89 [ 749.221728][T10014] usb 6-1: USB disconnect, device number 32 [ 749.221794][ C1] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 750.214869][ T5890] usb 4-1: USB disconnect, device number 48 [ 750.452335][ T5883] usb 1-1: new high-speed USB device number 59 using dummy_hcd [ 750.902313][ T5883] usb 1-1: Using ep0 maxpacket: 8 [ 751.490825][ T5883] usb 1-1: New USB device found, idVendor=0c45, idProduct=613e, bcdDevice=c4.6d [ 751.527885][ T5883] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 751.564671][ T5883] usb 1-1: Product: syz [ 751.586643][ T5883] usb 1-1: Manufacturer: syz [ 751.684849][ T5883] usb 1-1: SerialNumber: syz [ 751.832977][ T5883] usb 1-1: config 0 descriptor?? [ 751.973519][ T5883] gspca_main: sonixj-2.14.0 probing 0c45:613e [ 752.179840][T14055] xt_TPROXY: Can be used only with -p tcp or -p udp [ 752.535616][T14052] ALSA: mixer_oss: invalid OSS volume '' [ 753.859575][ T5883] gspca_sonixj: reg_w1 err -110 [ 753.873104][ T5883] sonixj 1-1:0.0: probe with driver sonixj failed with error -110 [ 754.093419][ T5883] usb 1-1: USB disconnect, device number 59 [ 756.644586][ T30] audit: type=1400 audit(1753286520.138:655): avc: denied { getattr } for pid=14086 comm="syz.4.2267" path="socket:[40932]" dev="sockfs" ino=40932 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=mctp_socket permissive=1 [ 756.689780][T14087] Invalid ELF header magic: != ELF [ 756.704039][ T30] audit: type=1400 audit(1753286520.228:656): avc: denied { module_load } for pid=14086 comm="syz.4.2267" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=system permissive=1 [ 757.158439][ T5828] usb 4-1: new high-speed USB device number 49 using dummy_hcd [ 757.772114][ T5828] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 757.784714][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 2 [ 757.828398][ T5828] usb 4-1: config 1 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 7 [ 757.856268][ T5828] usb 4-1: config 1 interface 0 has no altsetting 1 [ 757.868028][ T5828] usb 4-1: New USB device found, idVendor=0525, idProduct=a4a1, bcdDevice= 0.40 [ 757.877627][ T5828] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 757.886295][ T5828] usb 4-1: Product: syz [ 757.892210][ T5828] usb 4-1: Manufacturer: syz [ 757.980482][ T5828] usb 4-1: SerialNumber: syz [ 758.499634][ T5828] cdc_ncm 4-1:1.0: CDC Union missing and no IAD found [ 758.506595][ T5828] cdc_ncm 4-1:1.0: bind() failure [ 759.805388][T14121] ntfs3(loop3): try to read out of volume at offset 0x0 [ 759.826895][T14124] Failed to initialize the IGMP autojoin socket (err -2) [ 759.839740][ T30] audit: type=1400 audit(1753286523.358:657): avc: denied { create } for pid=14123 comm="syz.0.2278" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=user_namespace permissive=1 [ 759.868467][ T30] audit: type=1400 audit(1753286523.368:658): avc: denied { sys_admin } for pid=14123 comm="syz.0.2278" capability=21 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=cap_userns permissive=1 [ 759.921936][T14122] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2277'. [ 760.213498][T14131] binder: BINDER_SET_CONTEXT_MGR already set [ 760.225676][T14131] binder: 14130:14131 ioctl 4018620d 200000000040 returned -16 [ 760.456387][T14137] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2281'. [ 760.772965][ T30] audit: type=1400 audit(1753286524.308:659): avc: denied { execmem } for pid=14142 comm="syz.2.2283" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=process permissive=1 [ 760.792210][ C0] vkms_vblank_simulate: vblank timer overrun [ 760.907641][ T5933] usb 4-1: USB disconnect, device number 49 [ 761.222318][ T5883] usb 5-1: new full-speed USB device number 47 using dummy_hcd [ 761.292328][ T5933] usb 4-1: new low-speed USB device number 50 using dummy_hcd [ 761.404941][ T5883] usb 5-1: config 0 interface 0 altsetting 3 endpoint 0x81 has invalid maxpacket 1024, setting to 64 [ 761.425833][ T5883] usb 5-1: config 0 interface 0 has no altsetting 0 [ 761.435045][ T5883] usb 5-1: New USB device found, idVendor=5543, idProduct=0042, bcdDevice= 0.00 [ 761.445043][ T5883] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 761.455797][ T5883] usb 5-1: config 0 descriptor?? [ 761.461331][T14149] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 761.473519][ T5933] usb 4-1: Invalid ep0 maxpacket: 16 [ 761.650304][ T5933] usb 4-1: new low-speed USB device number 51 using dummy_hcd [ 761.772262][ T5828] usb 6-1: new high-speed USB device number 33 using dummy_hcd [ 761.902309][ T5933] usb 4-1: Invalid ep0 maxpacket: 16 [ 761.910352][ T5933] usb usb4-port1: attempt power cycle [ 762.272494][ T5933] usb 4-1: new low-speed USB device number 52 using dummy_hcd [ 762.337007][ T5828] usb 6-1: Using ep0 maxpacket: 16 [ 762.344325][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 762.356607][T14167] ntfs3(loop4): try to read out of volume at offset 0x0 [ 762.362963][ T5933] usb 4-1: Invalid ep0 maxpacket: 16 [ 762.368757][ T5828] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 762.383354][ T5828] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 762.415375][ T5828] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 762.428910][ T5828] usb 6-1: Product: syz [ 762.436315][ T5828] usb 6-1: Manufacturer: syz [ 762.440997][ T5828] usb 6-1: SerialNumber: syz [ 762.447505][T14166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2291'. [ 762.456774][T14166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2291'. [ 762.472005][ T5828] usb 6-1: config 0 descriptor?? [ 762.486319][T14158] raw-gadget.2 gadget.5: fail, usb_ep_enable returned -22 [ 762.492207][ T5933] usb 4-1: new low-speed USB device number 53 using dummy_hcd [ 762.504784][ T5828] hub 6-1:0.0: bad descriptor, ignoring hub [ 762.508596][ T118] Process accounting resumed [ 762.517254][ T5828] hub 6-1:0.0: probe with driver hub failed with error -5 [ 762.541485][ T5828] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input90 [ 762.692832][ T5933] usb 4-1: Invalid ep0 maxpacket: 16 [ 762.699331][ T5933] usb usb4-port1: unable to enumerate USB device [ 762.753350][T14166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2291'. [ 762.763130][T14166] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2291'. [ 762.926529][ T5828] usb 6-1: USB disconnect, device number 33 [ 762.932714][ C0] usbtouchscreen 6-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 764.537432][ T5883] usbhid 5-1:0.0: can't add hid device: -71 [ 764.547883][ T5883] usbhid 5-1:0.0: probe with driver usbhid failed with error -71 [ 764.558304][ T5883] usb 5-1: USB disconnect, device number 47 [ 765.247575][T14195] ALSA: mixer_oss: invalid OSS volume '' [ 765.295114][ T13] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 766.646649][ T5933] usb 5-1: new low-speed USB device number 48 using dummy_hcd [ 767.685512][ T5933] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 767.717473][ T5933] usb 5-1: config 0 has no interface number 0 [ 768.268558][ T5933] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 768.283083][ T5933] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 768.296063][ T5933] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 768.305305][ T5933] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 768.313746][ T30] audit: type=1800 audit(1753286531.848:660): pid=14235 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=collect_data cause=failed(directio) comm=77DEA305FF07 name="file0" dev="tmpfs" ino=2462 res=0 errno=0 [ 768.338217][ T5933] usb 5-1: config 0 descriptor?? [ 768.347654][T14207] raw-gadget.0 gadget.4: fail, usb_ep_enable returned -22 [ 768.359853][ T5933] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 768.451920][T14238] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 768.557858][T14239] netlink: 56 bytes leftover after parsing attributes in process `syz.5.2310'. [ 769.111105][ T5933] usb 5-1: USB disconnect, device number 48 [ 769.280213][T14238] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2308'. [ 769.290058][T14238] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 769.350693][T14247] netlink: 'syz.4.2312': attribute type 33 has an invalid length. [ 769.360644][T14247] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2312'. [ 769.380832][T14247] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2312'. [ 769.752347][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 770.042349][ T10] usb 6-1: new high-speed USB device number 34 using dummy_hcd [ 770.995804][ T10] usb 6-1: New USB device found, idVendor=0bed, idProduct=1100, bcdDevice=ec.c3 [ 771.005641][ T10] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 771.066682][ T10] usb 6-1: config 0 descriptor?? [ 771.076045][ T10] cp210x 6-1:0.0: cp210x converter detected [ 771.098815][T14280] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2321'. [ 772.232313][T14266] 2q>wv: renamed from lo (while UP) [ 772.303319][T14302] ipvlan2: entered promiscuous mode [ 772.311282][T14302] ipvlan2: entered allmulticast mode [ 772.326429][T14302] batadv0: entered allmulticast mode [ 772.337417][T14302] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 772.382234][ T5828] usb 4-1: new high-speed USB device number 54 using dummy_hcd [ 772.653760][ T5828] usb 4-1: config 1 has an invalid descriptor of length 0, skipping remainder of the config [ 772.664182][ T5828] usb 4-1: config 1 has 1 interface, different from the descriptor's value: 3 [ 772.683641][ T5828] usb 4-1: New USB device found, idVendor=08b7, idProduct=0000, bcdDevice= 0.00 [ 773.154979][ T5828] usb 4-1: New USB device strings: Mfr=0, Product=0, SerialNumber=67 [ 773.163665][ T10] cp210x 6-1:0.0: failed to get vendor val 0x370b size 1: -71 [ 773.187946][ T10] cp210x 6-1:0.0: querying part number failed [ 773.194980][ T5828] usb 4-1: SerialNumber: syz [ 773.235312][ T10] usb 6-1: cp210x converter now attached to ttyUSB0 [ 773.279711][ T10] usb 6-1: USB disconnect, device number 34 [ 773.311842][ T10] cp210x ttyUSB0: cp210x converter now disconnected from ttyUSB0 [ 773.342921][ T10] cp210x 6-1:0.0: device disconnected [ 773.429205][T14299] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2324'. [ 773.438802][T14299] netlink: 72 bytes leftover after parsing attributes in process `syz.3.2324'. [ 773.570718][ T5828] usb 4-1: 0:2 : does not exist [ 773.580954][ T5828] usb 4-1: unit 5 not found! [ 773.617990][ T5828] usb 4-1: USB disconnect, device number 54 [ 773.778806][T11026] udevd[11026]: error opening ATTR{/sys/devices/platform/dummy_hcd.3/usb4/4-1/4-1:1.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 774.612192][ T5828] usb 1-1: new high-speed USB device number 60 using dummy_hcd [ 774.825961][ T5828] usb 1-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 774.881609][ T5828] usb 1-1: config 27 interface 0 altsetting 0 has an invalid descriptor for endpoint zero, skipping [ 774.902325][ T5828] usb 1-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 774.918569][ T5828] usb 1-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 774.941840][ T5828] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 774.996855][ T5828] usb 1-1: Quirk or no altset; falling back to MIDI 1.0 [ 775.134163][ T5828] snd-usb-audio 1-1:27.0: probe with driver snd-usb-audio failed with error -2 [ 775.152528][T11026] udevd[11026]: error opening ATTR{/sys/devices/platform/dummy_hcd.0/usb1/1-1/1-1:27.0/sound/card3/controlC3/../uevent} for writing: No such device [ 775.285200][T14351] netlink: 'syz.5.2336': attribute type 4 has an invalid length. [ 775.293047][T14351] netlink: 17 bytes leftover after parsing attributes in process `syz.5.2336'. [ 775.694716][ T10] usb 5-1: new high-speed USB device number 49 using dummy_hcd [ 775.722567][T14332] netlink: 'syz.0.2333': attribute type 1 has an invalid length. [ 775.745973][T14332] hsr0: entered promiscuous mode [ 775.755395][T14332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2333'. [ 775.927323][T14332] hsr_slave_0: left promiscuous mode [ 775.934830][ T10] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 775.947072][ T10] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 775.960424][ T10] usb 5-1: config 0 interface 0 has no altsetting 0 [ 775.973006][T14332] hsr_slave_1: left promiscuous mode [ 775.978944][ T10] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 775.988241][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 776.002015][ T10] usb 5-1: config 0 descriptor?? [ 776.007626][ T5883] usb 1-1: USB disconnect, device number 60 [ 776.795657][ T10] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 777.742199][ T5883] usb 3-1: new high-speed USB device number 50 using dummy_hcd [ 778.022264][ T5883] usb 3-1: Using ep0 maxpacket: 32 [ 778.040623][ T5883] usb 3-1: New USB device found, idVendor=22b8, idProduct=6027, bcdDevice=c2.80 [ 778.060629][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 778.074572][ T5883] usb 3-1: Product: syz [ 778.093176][ T5883] usb 3-1: Manufacturer: syz [ 778.141931][ T5828] usb 5-1: USB disconnect, device number 49 [ 778.538451][ T5883] usb 3-1: SerialNumber: syz [ 778.553640][ T5883] usb 3-1: config 0 descriptor?? [ 778.580737][ T5883] cdc_ether 3-1:0.0: More than one union descriptor, skipping ... [ 778.589335][ T5883] usb 3-1: bad CDC descriptors [ 778.604405][ T5883] usb 3-1: unsupported MDLM descriptors [ 778.792872][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 779.052554][T14372] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.061272][T14372] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.127106][T14389] UDC core: USB Raw Gadget: couldn't find an available UDC or it's busy [ 779.160884][T14389] misc raw-gadget: fail, usb_gadget_register_driver returned -16 [ 779.176750][ T10] usb 3-1: USB disconnect, device number 50 [ 779.241941][ T30] audit: type=1400 audit(1753286542.778:661): avc: denied { create } for pid=14396 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 779.362166][ T5883] usb 6-1: new high-speed USB device number 35 using dummy_hcd [ 779.418148][ T30] audit: type=1400 audit(1753286542.808:662): avc: denied { connect } for pid=14396 comm="syz.3.2350" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netrom_socket permissive=1 [ 779.672298][ T10] usb 4-1: new full-speed USB device number 55 using dummy_hcd [ 779.812216][ T10] usb 4-1: device descriptor read/64, error -71 [ 780.512267][ T10] usb 4-1: new full-speed USB device number 56 using dummy_hcd [ 780.786069][ T10] usb 4-1: device descriptor read/64, error -71 [ 781.065862][ T10] usb usb4-port1: attempt power cycle [ 781.412251][ T10] usb 4-1: new full-speed USB device number 57 using dummy_hcd [ 781.442948][ T10] usb 4-1: device descriptor read/8, error -71 [ 781.532237][ T5964] usb 5-1: new high-speed USB device number 50 using dummy_hcd [ 781.692353][ T10] usb 4-1: new full-speed USB device number 58 using dummy_hcd [ 781.704372][ T5964] usb 5-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 781.709518][ T5883] usb 6-1: Using ep0 maxpacket: 16 [ 781.742721][ T10] usb 4-1: device descriptor read/8, error -71 [ 781.759846][ T5964] usb 5-1: config 0 interface 0 altsetting 128 has 0 endpoint descriptors, different from the interface descriptor's value: 1 [ 781.821912][ T5964] usb 5-1: config 0 interface 0 has no altsetting 0 [ 781.863728][ T5964] usb 5-1: New USB device found, idVendor=256c, idProduct=006d, bcdDevice= 0.00 [ 781.892906][ T10] usb usb4-port1: unable to enumerate USB device [ 781.925408][ T5964] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 781.999555][ T5964] usb 5-1: config 0 descriptor?? [ 782.079404][ T5964] usbhid 5-1:0.0: couldn't find an input interrupt endpoint [ 782.338703][ T5883] usb 6-1: device descriptor read/all, error -71 [ 782.679895][T14420] bridge1: entered promiscuous mode [ 782.685238][T14420] bridge1: entered allmulticast mode [ 783.426701][ T30] audit: type=1400 audit(1753286546.969:663): avc: denied { write } for pid=14429 comm="syz.5.2359" name="nvram" dev="devtmpfs" ino=623 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:nvram_device_t tclass=chr_file permissive=1 [ 783.466420][T14430] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2359'. [ 783.647599][ T30] audit: type=1326 audit(1753286547.189:664): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14434 comm="syz.0.2361" exe="/root/syz-executor" sig=31 arch=c000003e syscall=202 compat=0 ip=0x7fa00558e9a9 code=0x0 [ 784.441534][ T5964] usb 5-1: USB disconnect, device number 50 [ 784.533785][ T10] usb 3-1: new high-speed USB device number 51 using dummy_hcd [ 784.712254][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 784.729361][ T10] usb 3-1: config 0 has an invalid interface number: 52 but max is 0 [ 784.739881][ T10] usb 3-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 784.759502][ T10] usb 3-1: config 0 has no interface number 0 [ 784.766577][ T10] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0xE has an invalid bInterval 0, changing to 7 [ 784.781088][ T10] usb 3-1: config 0 interface 52 altsetting 1 endpoint 0xE has invalid wMaxPacketSize 0 [ 784.798379][ T10] usb 3-1: config 0 interface 52 altsetting 1 has 1 endpoint descriptor, different from the interface descriptor's value: 14 [ 784.805873][T14451] JFS: discard option not supported on device [ 784.811982][ T10] usb 3-1: config 0 interface 52 has no altsetting 0 [ 784.861283][T14451] Mount JFS Failure: -22 [ 784.903863][T14452] xt_TPROXY: Can be used only with -p tcp or -p udp [ 784.955064][T14451] jfs_mount failed w/return code = -22 [ 785.275333][ T10] usb 3-1: New USB device found, idVendor=06cb, idProduct=0007, bcdDevice= 8.00 [ 785.284486][ T10] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 785.295844][ T10] usb 3-1: config 0 descriptor?? [ 785.616718][T14457] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2368'. [ 785.752006][ T10] usb 3-1: USB disconnect, device number 51 [ 787.924678][ T30] audit: type=1400 audit(1753286551.469:665): avc: denied { create } for pid=14483 comm="syz.5.2376" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=rose_socket permissive=1 [ 788.324479][T14492] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2378'. [ 788.532470][ T118] usb 1-1: new high-speed USB device number 61 using dummy_hcd [ 788.974868][ T118] usb 1-1: Using ep0 maxpacket: 32 [ 789.003668][ T118] usb 1-1: config 0 interface 0 has no altsetting 0 [ 789.010290][ T118] usb 1-1: New USB device found, idVendor=1b1c, idProduct=1c0d, bcdDevice= 0.00 [ 789.497797][ T118] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 789.792371][ T118] usb 1-1: config 0 descriptor?? [ 790.159019][T14518] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2381'. [ 790.235150][ T5883] usb 3-1: new full-speed USB device number 52 using dummy_hcd [ 790.393375][ T5883] usb 3-1: config 0 has an invalid interface number: 200 but max is 0 [ 790.406470][ T5883] usb 3-1: config 0 has no interface number 0 [ 790.417744][ T118] corsair-psu 0003:1B1C:1C0D.0020: hidraw0: USB HID v0.05 Device [HID 1b1c:1c0d] on usb-dummy_hcd.0-1/input0 [ 790.738956][ T5883] usb 3-1: config 0 interface 200 altsetting 2 endpoint 0x4 has invalid wMaxPacketSize 0 [ 790.885683][ T5883] usb 3-1: config 0 interface 200 has no altsetting 0 [ 790.902336][ T5883] usb 3-1: New USB device found, idVendor=0b57, idProduct=852a, bcdDevice=6d.39 [ 790.911487][ T5883] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 791.106321][ T30] audit: type=1400 audit(1753286554.479:666): avc: denied { create } for pid=14487 comm="syz.0.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 791.135605][ T5883] usb 3-1: Product: syz [ 791.139857][ T5883] usb 3-1: Manufacturer: syz [ 791.149020][ T30] audit: type=1400 audit(1753286554.479:667): avc: denied { write } for pid=14487 comm="syz.0.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 791.170103][ T30] audit: type=1400 audit(1753286554.479:668): avc: denied { nlmsg_write } for pid=14487 comm="syz.0.2377" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_xfrm_socket permissive=1 [ 791.190747][ T5883] usb 3-1: SerialNumber: syz [ 791.217385][ T5883] usb 3-1: config 0 descriptor?? [ 791.362116][ T118] corsair-psu 0003:1B1C:1C0D.0020: unable to initialize device (-110) [ 791.376099][ T118] corsair-psu 0003:1B1C:1C0D.0020: probe with driver corsair-psu failed with error -110 [ 792.121104][T14540] netlink: 'syz.4.2391': attribute type 33 has an invalid length. [ 792.134964][T14540] netlink: 152 bytes leftover after parsing attributes in process `syz.4.2391'. [ 792.220226][ T5883] input: Hanwang Art Master III 1308 as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.200/input/input91 [ 792.278718][ T5883] usb 3-1: USB disconnect, device number 52 [ 792.777036][T14549] tipc: Enabling of bearer rejected, failed to enable media [ 795.088208][ T5883] usb 1-1: USB disconnect, device number 61 [ 795.293533][T14572] netlink: 'syz.4.2398': attribute type 10 has an invalid length. [ 795.372992][ T30] audit: type=1804 audit(1753286558.749:669): pid=14572 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.4.2398" name="/newroot/498/file0" dev="tmpfs" ino=2606 res=1 errno=0 [ 795.555801][T14577] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ULvyآDUDw}zR3p(@O>P' [ 795.567757][T14577] CPU: 1 UID: 0 PID: 14577 Comm: syz.0.2402 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 795.567772][T14577] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 795.567780][T14577] Call Trace: [ 795.567785][T14577] [ 795.567790][T14577] dump_stack_lvl+0x16c/0x1f0 [ 795.567813][T14577] sysfs_warn_dup+0x7f/0xa0 [ 795.567832][T14577] sysfs_do_create_link_sd+0x124/0x140 [ 795.567845][T14577] sysfs_create_link+0x61/0xc0 [ 795.567855][T14577] device_add+0x62c/0x1a70 [ 795.567872][T14577] ? __pfx_device_add+0x10/0x10 [ 795.567885][T14577] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 795.567899][T14577] ? ieee80211_set_bitrate_flags+0x243/0x6b0 [ 795.567916][T14577] wiphy_register+0x1c9c/0x2850 [ 795.567930][T14577] ? netdev_run_todo+0x864/0x1320 [ 795.567943][T14577] ? __dev_printk+0x270/0x270 [ 795.567962][T14577] ? __pfx_wiphy_register+0x10/0x10 [ 795.567982][T14577] ieee80211_register_hw+0x24ac/0x4140 [ 795.568000][T14577] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 795.568016][T14577] ? find_held_lock+0x2b/0x80 [ 795.568030][T14577] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 795.568042][T14577] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 795.568056][T14577] ? __hrtimer_setup+0x176/0x280 [ 795.568070][T14577] mac80211_hwsim_new_radio+0x3034/0x54d0 [ 795.568094][T14577] ? trace_kmalloc+0x2b/0xd0 [ 795.568105][T14577] ? __kmalloc_node_track_caller_noprof+0x23e/0x510 [ 795.568124][T14577] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 795.568140][T14577] ? hwsim_new_radio_nl+0xa0e/0x12c0 [ 795.568158][T14577] ? __asan_memcpy+0x3c/0x60 [ 795.568175][T14577] hwsim_new_radio_nl+0xb51/0x12c0 [ 795.568193][T14577] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 795.568215][T14577] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1aa/0x290 [ 795.568233][T14577] ? genl_family_rcv_msg_attrs_parse.constprop.0+0x1b4/0x290 [ 795.568251][T14577] genl_family_rcv_msg_doit+0x206/0x2f0 [ 795.568267][T14577] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 795.568286][T14577] ? bpf_lsm_capable+0x9/0x10 [ 795.568299][T14577] ? security_capable+0x7e/0x260 [ 795.568316][T14577] ? ns_capable+0xd7/0x110 [ 795.568329][T14577] genl_rcv_msg+0x55c/0x800 [ 795.568345][T14577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 795.568360][T14577] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 795.568379][T14577] ? __lock_acquire+0x622/0x1c90 [ 795.568391][T14577] netlink_rcv_skb+0x155/0x420 [ 795.568403][T14577] ? __pfx_genl_rcv_msg+0x10/0x10 [ 795.568417][T14577] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 795.568435][T14577] ? netlink_deliver_tap+0x1ae/0xd30 [ 795.568446][T14577] ? is_vmalloc_addr+0x86/0xa0 [ 795.568464][T14577] genl_rcv+0x28/0x40 [ 795.568476][T14577] netlink_unicast+0x58d/0x850 [ 795.568491][T14577] ? __pfx_netlink_unicast+0x10/0x10 [ 795.568507][T14577] netlink_sendmsg+0x8d1/0xdd0 [ 795.568522][T14577] ? __pfx_netlink_sendmsg+0x10/0x10 [ 795.568540][T14577] ____sys_sendmsg+0xa95/0xc70 [ 795.568563][T14577] ? copy_msghdr_from_user+0x10a/0x160 [ 795.568581][T14577] ? __pfx_____sys_sendmsg+0x10/0x10 [ 795.568599][T14577] ? __pfx_futex_wake_mark+0x10/0x10 [ 795.568614][T14577] ___sys_sendmsg+0x134/0x1d0 [ 795.568634][T14577] ? __pfx____sys_sendmsg+0x10/0x10 [ 795.568650][T14577] ? __lock_acquire+0x622/0x1c90 [ 795.568680][T14577] __sys_sendmsg+0x16d/0x220 [ 795.568690][T14577] ? __pfx___sys_sendmsg+0x10/0x10 [ 795.568701][T14577] ? __x64_sys_futex+0x1e0/0x4c0 [ 795.568728][T14577] do_syscall_64+0xcd/0x4c0 [ 795.568740][T14577] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 795.568753][T14577] RIP: 0033:0x7fa00558e9a9 [ 795.568763][T14577] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 795.568774][T14577] RSP: 002b:00007fa0063d9038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 795.568784][T14577] RAX: ffffffffffffffda RBX: 00007fa0057b5fa0 RCX: 00007fa00558e9a9 [ 795.568791][T14577] RDX: 0000000020004840 RSI: 0000200000000040 RDI: 0000000000000004 [ 795.568798][T14577] RBP: 00007fa005610d69 R08: 0000000000000000 R09: 0000000000000000 [ 795.568804][T14577] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 795.568810][T14577] R13: 0000000000000000 R14: 00007fa0057b5fa0 R15: 00007ffee12112c8 [ 795.568824][T14577] [ 795.978339][ C1] vkms_vblank_simulate: vblank timer overrun [ 796.451694][T14585] netlink: 76 bytes leftover after parsing attributes in process `syz.5.2399'. [ 796.712409][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 796.812892][T14592] xt_TPROXY: Can be used only with -p tcp or -p udp [ 797.601495][T14603] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2410'. [ 797.632542][T14603] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2410'. [ 797.654508][T14602] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2409'. [ 797.682150][T14602] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2409'. [ 797.798692][ T1037] Bluetooth: hci1: Frame reassembly failed (-84) [ 797.980972][T14610] fuse: root generation should be zero [ 798.012314][ T5883] usb 1-1: new full-speed USB device number 62 using dummy_hcd [ 798.018995][T14619] netlink: 'syz.2.2415': attribute type 10 has an invalid length. [ 798.122457][ T30] audit: type=1804 audit(1753286561.559:670): pid=14619 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2415" name="/newroot/477/file0" dev="tmpfs" ino=2505 res=1 errno=0 [ 798.144971][ C1] vkms_vblank_simulate: vblank timer overrun [ 798.263905][ T5883] usb 1-1: config 0 has 0 interfaces, different from the descriptor's value: 1 [ 798.335513][ T5883] usb 1-1: New USB device found, idVendor=056e, idProduct=4010, bcdDevice=20.1c [ 798.345123][ T5883] usb 1-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 798.365139][ T5883] usb 1-1: config 0 descriptor?? [ 798.577165][ T30] audit: type=1400 audit(1753286562.119:671): avc: denied { write } for pid=14604 comm="syz.0.2411" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=nfc_socket permissive=1 [ 798.614028][ T118] usb 1-1: USB disconnect, device number 62 [ 798.739464][T14627] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2417'. [ 799.832652][ T5845] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 799.877717][T14638] geneve2: entered allmulticast mode [ 800.203277][T14642] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2420'. [ 800.382321][T14654] binder: 14653:14654 unknown command 0 [ 800.387901][T14654] binder: 14653:14654 ioctl c0306201 2000000003c0 returned -22 [ 800.396522][T14654] binder_alloc: 14653: binder_alloc_buf size 33554568 failed, no address space [ 800.408340][T14654] binder_alloc: allocated: 0 (num: 0 largest: 0), free: 12288 (num: 1 largest: 12288) [ 800.422166][ T5828] usb 5-1: new high-speed USB device number 51 using dummy_hcd [ 800.441972][ T30] audit: type=1400 audit(1753286563.979:672): avc: denied { remount } for pid=14655 comm="syz.5.2424" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=filesystem permissive=1 [ 800.462071][ C1] vkms_vblank_simulate: vblank timer overrun [ 800.576520][ T5828] usb 5-1: config 1 interface 0 altsetting 0 endpoint 0x1 has invalid wMaxPacketSize 0 [ 800.586659][ T5828] usb 5-1: config 1 interface 0 altsetting 0 bulk endpoint 0x1 has invalid maxpacket 0 [ 800.596800][ T5828] usb 5-1: config 1 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 800.612965][ T5828] usb 5-1: New USB device found, idVendor=0525, idProduct=a4a8, bcdDevice= 0.41 [ 800.622895][ T5828] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=11 [ 800.631365][ T5828] usb 5-1: Product: syz [ 800.636382][ T5828] usb 5-1: Manufacturer: syz [ 800.640989][ T5828] usb 5-1: SerialNumber: syz [ 800.752978][ T118] usb 3-1: new high-speed USB device number 53 using dummy_hcd [ 800.912278][ T118] usb 3-1: Using ep0 maxpacket: 16 [ 800.913873][ T5828] usblp 5-1:1.0: usblp0: USB Unidirectional printer dev 51 if 0 alt 0 proto 1 vid 0x0525 pid 0xA4A8 [ 800.976706][ T118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 801.024064][ T118] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 801.138993][ T118] usb 3-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 801.143040][T14673] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2430'. [ 801.157713][T14648] netlink: 87 bytes leftover after parsing attributes in process `syz.4.2422'. [ 801.207249][ T118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 801.238127][ T118] usb 3-1: Product: syz [ 801.258508][ T118] usb 3-1: Manufacturer: syz [ 801.272005][ T5890] usb 5-1: USB disconnect, device number 51 [ 801.361042][ T118] usb 3-1: SerialNumber: syz [ 801.454573][ T118] usb 3-1: config 0 descriptor?? [ 801.460373][ T5890] usblp0: removed [ 801.464275][T14658] raw-gadget.1 gadget.2: fail, usb_ep_enable returned -22 [ 801.484594][ T118] hub 3-1:0.0: bad descriptor, ignoring hub [ 801.504282][ T118] hub 3-1:0.0: probe with driver hub failed with error -5 [ 801.548230][ T118] input: syz syz as /devices/platform/dummy_hcd.2/usb3/3-1/3-1:0.0/input/input92 [ 805.237433][T14688] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2433'. [ 805.616899][T14694] netlink: 88 bytes leftover after parsing attributes in process `syz.0.2435'. [ 806.469899][T14708] netlink: 'syz.2.2441': attribute type 33 has an invalid length. [ 806.506777][T14711] tipc: Enabling of bearer rejected, failed to enable media [ 806.530652][T14708] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2441'. [ 807.555819][T14727] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2446'. [ 808.286635][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 808.293022][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 808.736732][T14741] overlayfs: fs on './file0' does not support file handles, falling back to index=off,nfs_export=off. [ 808.990478][T13094] usb 3-1: reset high-speed USB device number 53 using dummy_hcd [ 809.038759][ T30] audit: type=1400 audit(1753286572.579:673): avc: denied { ioctl } for pid=14743 comm="syz.4.2451" path="socket:[44074]" dev="sockfs" ino=44074 ioctlcmd=0xf517 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=alg_socket permissive=1 [ 809.063901][T13094] usb 3-1: device reset changed ep0 maxpacket size! [ 809.095574][ T118] usb 3-1: USB disconnect, device number 53 [ 809.272243][ T118] usb 3-1: new high-speed USB device number 54 using dummy_hcd [ 809.904890][T14751] sit1: entered allmulticast mode [ 811.437459][T14764] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2453'. [ 811.872446][ T118] usb 3-1: device not accepting address 54, error -71 [ 813.572196][ T118] usb 3-1: new high-speed USB device number 55 using dummy_hcd [ 814.142141][ T118] usb 3-1: Using ep0 maxpacket: 8 [ 814.150069][ T118] usb 3-1: config 4 has an invalid interface number: 38 but max is 0 [ 814.162254][ T118] usb 3-1: config 4 has no interface number 0 [ 814.168648][ T118] usb 3-1: config 4 interface 38 altsetting 1 bulk endpoint 0x3 has invalid maxpacket 1023 [ 814.209894][T14790] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2463'. [ 814.232366][ T118] usb 3-1: config 4 interface 38 altsetting 1 has an invalid descriptor for endpoint zero, skipping [ 814.248970][ T118] usb 3-1: config 4 interface 38 has no altsetting 0 [ 814.298021][ T118] usb 3-1: New USB device found, idVendor=04b4, idProduct=1002, bcdDevice=55.58 [ 814.312598][ T118] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 814.330879][ T118] usb 3-1: Product: syz [ 814.335391][ T118] usb 3-1: Manufacturer: syz [ 814.339989][ T118] usb 3-1: SerialNumber: syz [ 814.372219][ T5890] usb 5-1: new high-speed USB device number 52 using dummy_hcd [ 814.386836][T14771] raw-gadget.0 gadget.2: fail, usb_ep_enable returned -22 [ 814.572113][ T5890] usb 5-1: Using ep0 maxpacket: 8 [ 814.578863][ T5890] usb 5-1: config 0 has an invalid interface number: 233 but max is 0 [ 814.694276][ T5890] usb 5-1: config 0 has no interface number 0 [ 814.753106][ T5890] usb 5-1: New USB device found, idVendor=0497, idProduct=c001, bcdDevice=98.7f [ 814.804470][T14803] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2466'. [ 814.986057][ T118] usb 3-1: USB disconnect, device number 55 [ 815.242255][ T5890] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 815.285995][ T5890] usb 5-1: config 0 descriptor?? [ 816.310108][ T30] audit: type=1400 audit(1753286579.389:674): avc: denied { write } for pid=14806 comm="syz.5.2467" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:unlabeled_t tclass=socket permissive=1 [ 816.531906][T14813] netlink: 'syz.2.2469': attribute type 1 has an invalid length. [ 816.536545][T14812] Failed to initialize the IGMP autojoin socket (err -2) [ 816.632266][ T5890] usb 5-1: string descriptor 0 read error: -71 [ 816.642247][ T5890] gspca_main: spca501-2.14.0 probing 0497:c001 [ 816.659480][ T5890] gspca_spca501: reg write: error -71 [ 816.671884][ T5890] spca501 5-1:0.233: Reg write failed for 0x02,0x07,0x05 [ 816.702600][ T5890] spca501 5-1:0.233: probe with driver spca501 failed with error -22 [ 816.721743][ T30] audit: type=1400 audit(1753286580.259:675): avc: denied { setcheckreqprot } for pid=14826 comm="syz.3.2473" scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:security_t tclass=security permissive=1 [ 816.729083][ T5890] usb 5-1: USB disconnect, device number 52 [ 817.612399][ T24] usb 4-1: new full-speed USB device number 59 using dummy_hcd [ 818.553577][ T24] usb 4-1: device descriptor read/64, error -71 [ 818.634391][T14850] binder: BINDER_SET_CONTEXT_MGR already set [ 818.640416][T14850] binder: 14849:14850 ioctl 4018620d 200000000040 returned -16 [ 818.812699][ T24] usb 4-1: new full-speed USB device number 60 using dummy_hcd [ 818.817101][T14854] netlink: 'syz.2.2480': attribute type 10 has an invalid length. [ 818.821489][ T30] audit: type=1804 audit(1753286582.359:676): pid=14854 uid=0 auid=4294967295 ses=4294967295 subj=root:sysadm_r:sysadm_t op=invalid_pcr cause=open_writers comm="syz.2.2480" name="/newroot/490/file0" dev="tmpfs" ino=2571 res=1 errno=0 [ 819.262288][ T24] usb 4-1: device descriptor read/64, error -71 [ 819.297271][T14858] netlink: 'syz.5.2481': attribute type 10 has an invalid length. [ 819.373508][ T24] usb usb4-port1: attempt power cycle [ 820.061357][T14867] netlink: 40 bytes leftover after parsing attributes in process `syz.5.2483'. [ 820.071365][T14867] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 820.122572][T14865] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 820.145155][ T30] audit: type=1400 audit(1753286583.689:677): avc: denied { accept } for pid=14864 comm="syz.3.2484" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=can_socket permissive=1 [ 820.283106][ T30] audit: type=1400 audit(1753286583.829:678): avc: denied { ioctl } for pid=14873 comm="syz.2.2486" path="socket:[44028]" dev="sockfs" ino=44028 ioctlcmd=0x89e1 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 820.457149][T14880] FAULT_INJECTION: forcing a failure. [ 820.457149][T14880] name failslab, interval 1, probability 0, space 0, times 0 [ 820.470528][T14880] CPU: 0 UID: 0 PID: 14880 Comm: syz.3.2488 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 820.470554][T14880] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 820.470565][T14880] Call Trace: [ 820.470571][T14880] [ 820.470578][T14880] dump_stack_lvl+0x16c/0x1f0 [ 820.470611][T14880] should_fail_ex+0x512/0x640 [ 820.470636][T14880] ? kmem_cache_alloc_node_noprof+0x5e/0x3b0 [ 820.470667][T14880] should_failslab+0xc2/0x120 [ 820.470685][T14880] kmem_cache_alloc_node_noprof+0x71/0x3b0 [ 820.470711][T14880] ? __alloc_skb+0x2b2/0x380 [ 820.470742][T14880] __alloc_skb+0x2b2/0x380 [ 820.470768][T14880] ? __pfx___alloc_skb+0x10/0x10 [ 820.470796][T14880] ? find_held_lock+0x2b/0x80 [ 820.470825][T14880] netlink_dump+0x192/0xd00 [ 820.470846][T14880] ? ip_set_dump_start+0x2e9/0x460 [ 820.470873][T14880] ? __pfx_netlink_dump+0x10/0x10 [ 820.470889][T14880] ? __pfx___mutex_lock+0x10/0x10 [ 820.470925][T14880] __netlink_dump_start+0x6d6/0x990 [ 820.470950][T14880] ip_set_dump+0x17f/0x210 [ 820.470974][T14880] ? __pfx_ip_set_dump+0x10/0x10 [ 820.470996][T14880] ? __pfx_ip_set_dump_start+0x10/0x10 [ 820.471020][T14880] ? __pfx_ip_set_dump_do+0x10/0x10 [ 820.471045][T14880] ? __pfx_ip_set_dump_done+0x10/0x10 [ 820.471080][T14880] nfnetlink_rcv_msg+0x9fc/0x1200 [ 820.471115][T14880] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 820.471142][T14880] ? __lock_acquire+0x622/0x1c90 [ 820.471183][T14880] ? avc_has_perm_noaudit+0x149/0x3b0 [ 820.471215][T14880] netlink_rcv_skb+0x155/0x420 [ 820.471235][T14880] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 820.471262][T14880] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 820.471295][T14880] ? ns_capable+0xd7/0x110 [ 820.471321][T14880] nfnetlink_rcv+0x1b3/0x430 [ 820.471345][T14880] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 820.471368][T14880] ? netlink_deliver_tap+0x1ae/0xd30 [ 820.471399][T14880] netlink_unicast+0x58d/0x850 [ 820.471424][T14880] ? __pfx_netlink_unicast+0x10/0x10 [ 820.471453][T14880] netlink_sendmsg+0x8d1/0xdd0 [ 820.471479][T14880] ? __pfx_netlink_sendmsg+0x10/0x10 [ 820.471511][T14880] ____sys_sendmsg+0xa95/0xc70 [ 820.471534][T14880] ? copy_msghdr_from_user+0x10a/0x160 [ 820.471562][T14880] ? __pfx_____sys_sendmsg+0x10/0x10 [ 820.471598][T14880] ___sys_sendmsg+0x134/0x1d0 [ 820.471628][T14880] ? __pfx____sys_sendmsg+0x10/0x10 [ 820.471653][T14880] ? __lock_acquire+0x622/0x1c90 [ 820.471704][T14880] __sys_sendmsg+0x16d/0x220 [ 820.471722][T14880] ? __pfx___sys_sendmsg+0x10/0x10 [ 820.471748][T14880] ? syscall_user_dispatch+0x78/0x140 [ 820.471777][T14880] do_syscall_64+0xcd/0x4c0 [ 820.471798][T14880] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 820.471816][T14880] RIP: 0033:0x7f6b54b8e9a9 [ 820.471832][T14880] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 820.471850][T14880] RSP: 002b:00007f6b55a17038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 820.471869][T14880] RAX: ffffffffffffffda RBX: 00007f6b54db6080 RCX: 00007f6b54b8e9a9 [ 820.471881][T14880] RDX: 0000000000000000 RSI: 0000200000000240 RDI: 0000000000000003 [ 820.471892][T14880] RBP: 00007f6b55a17090 R08: 0000000000000000 R09: 0000000000000000 [ 820.471902][T14880] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 820.471913][T14880] R13: 0000000000000000 R14: 00007f6b54db6080 R15: 00007fffd8831138 [ 820.471938][T14880] [ 820.856710][ T30] audit: type=1400 audit(1753286583.859:679): avc: denied { shutdown } for pid=14873 comm="syz.2.2486" scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=x25_socket permissive=1 [ 822.087282][ T30] audit: type=1326 audit(1753286585.629:680): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=14859 comm="syz.0.2482" exe="/root/syz-executor" sig=9 arch=c000003e syscall=231 compat=0 ip=0x7fa00558e9a9 code=0x0 [ 822.222136][ T10] usb 3-1: new high-speed USB device number 56 using dummy_hcd [ 822.390207][T14904] xt_TPROXY: Can be used only with -p tcp or -p udp [ 822.412313][ T10] usb 3-1: Using ep0 maxpacket: 8 [ 822.463176][ T10] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x3 has invalid wMaxPacketSize 0 [ 822.484190][ T10] usb 3-1: config 0 interface 0 altsetting 0 bulk endpoint 0x3 has invalid maxpacket 0 [ 822.502163][ T24] usb 4-1: new high-speed USB device number 62 using dummy_hcd [ 822.762204][ T24] usb 4-1: Using ep0 maxpacket: 16 [ 822.774910][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 822.929172][ T10] usb 3-1: New USB device found, idVendor=16d0, idProduct=10a9, bcdDevice=30.52 [ 822.938568][ T10] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 822.948574][ T10] usb 3-1: Product: syz [ 822.956812][ T10] usb 3-1: Manufacturer: syz [ 822.962989][ T10] usb 3-1: SerialNumber: syz [ 823.018529][ T10] usb 3-1: config 0 descriptor?? [ 823.023630][ T24] usb 4-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 823.079144][ T24] usb 4-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 823.088399][ T24] usb 4-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 823.099364][ T24] usb 4-1: Product: syz [ 823.103730][ T24] usb 4-1: Manufacturer: syz [ 823.108404][ T24] usb 4-1: SerialNumber: syz [ 823.137601][ T24] usb 4-1: config 0 descriptor?? [ 823.146353][T14900] raw-gadget.1 gadget.3: fail, usb_ep_enable returned -22 [ 823.163343][ T24] hub 4-1:0.0: bad descriptor, ignoring hub [ 823.169420][ T24] hub 4-1:0.0: probe with driver hub failed with error -5 [ 823.265192][ T24] input: syz syz as /devices/platform/dummy_hcd.3/usb4/4-1/4-1:0.0/input/input93 [ 823.377103][ T24] usb 4-1: USB disconnect, device number 62 [ 823.377140][ C0] usbtouchscreen 4-1:0.0: usbtouch_irq - usb_submit_urb failed with result: -19 [ 823.465315][T14912] ./file0: Can't open blockdev [ 823.490215][ T30] audit: type=1400 audit(1753286587.029:681): avc: denied { read write } for pid=14911 comm="syz.4.2496" name="nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 823.543496][T14914] /dev/nullb0: Can't open blockdev [ 823.555689][T14914] openvswitch: netlink: Message has 7 unknown bytes. [ 823.566944][ T30] audit: type=1400 audit(1753286587.029:682): avc: denied { open } for pid=14911 comm="syz.4.2496" path="/dev/nullb0" dev="devtmpfs" ino=696 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 823.618755][ T30] audit: type=1400 audit(1753286587.149:683): avc: denied { ioctl } for pid=14911 comm="syz.4.2496" path="/dev/nullb0" dev="devtmpfs" ino=696 ioctlcmd=0x125d scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:device_t tclass=blk_file permissive=1 [ 823.662334][T14912] Trying to write to read-only block-device nullb0 [ 823.872201][ T5890] usb 6-1: new high-speed USB device number 37 using dummy_hcd [ 824.022258][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 824.031833][ T5890] usb 6-1: config 0 has an invalid descriptor of length 0, skipping remainder of the config [ 825.289963][ T5890] usb 6-1: config 0 interface 0 has no altsetting 0 [ 825.333691][ T10] usb 3-1: USB disconnect, device number 56 [ 825.359741][T13094] udevd[13094]: setting mode of /dev/bus/usb/003/056 to 020664 failed: No such file or directory [ 825.381324][ T5890] usb 6-1: New USB device found, idVendor=13b1, idProduct=0042, bcdDevice=9d.3d [ 825.421047][T13094] udevd[13094]: setting owner of /dev/bus/usb/003/056 to uid=0, gid=0 failed: No such file or directory [ 825.500927][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 825.524950][ T5890] usb 6-1: Product: syz [ 825.529160][ T5890] usb 6-1: Manufacturer: syz [ 825.534216][ T5890] usb 6-1: SerialNumber: syz [ 825.541503][ T5890] usb 6-1: config 0 descriptor?? [ 825.584528][ T5890] hub 6-1:0.0: bad descriptor, ignoring hub [ 825.590660][ T5890] hub 6-1:0.0: probe with driver hub failed with error -5 [ 826.040613][ T5890] usb 6-1: Warning: ath10k USB support is incomplete, don't expect anything to work! [ 826.041713][ T12] usb 6-1: Failed to submit usb control message: -71 [ 826.065645][ T5890] usb 6-1: USB disconnect, device number 37 [ 826.066021][ T12] usb 6-1: unable to send the bmi data to the device: -71 [ 826.081569][ T12] usb 6-1: unable to get target info from device [ 826.088118][ T12] usb 6-1: could not get target info (-71) [ 826.094246][ T12] usb 6-1: could not probe fw (-71) [ 829.009866][T14954] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 829.321218][T14954] can0: slcan on ttyS3. [ 829.752578][T14970] overlayfs: failed to resolve './file0': -2 [ 829.996449][T14969] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551609) [ 830.050188][T14976] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2513'. [ 830.152841][ T30] audit: type=1400 audit(1753286593.609:684): avc: denied { name_connect } for pid=14966 comm="syz.5.2513" dest=3 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:reserved_port_t tclass=sctp_socket permissive=1 [ 830.386676][T14969] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 830.747641][T14974] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2512'. [ 830.756991][T14974] netlink: 14136 bytes leftover after parsing attributes in process `syz.0.2512'. [ 830.776380][ T30] audit: type=1400 audit(1753286594.289:685): avc: denied { read } for pid=14964 comm="syz.0.2512" name="usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 830.862156][ T30] audit: type=1400 audit(1753286594.289:686): avc: denied { open } for pid=14964 comm="syz.0.2512" path="/dev/usbmon7" dev="devtmpfs" ino=737 scontext=root:sysadm_r:sysadm_t tcontext=system_u:object_r:usbmon_device_t tclass=chr_file permissive=1 [ 830.904395][T14959] can0 (unregistered): slcan off ttyS3. [ 831.010366][T14986] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2516'. [ 831.887470][T15002] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 831.888814][T15004] tipc: Enabling of bearer rejected, already enabled [ 831.974117][T15007] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 831.988525][T15007] netlink: 'syz.5.2522': attribute type 39 has an invalid length. [ 832.552189][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 833.003339][T15002] SELinux: unrecognized netlink message: protocol=0 nlmsg_type=0 sclass=netlink_route_socket pid=15002 comm=syz.5.2522 [ 833.166506][T15009] Failed to initialize the IGMP autojoin socket (err -2) [ 834.705894][T15038] netlink: 56 bytes leftover after parsing attributes in process `syz.0.2530'. [ 834.738488][T15039] Failed to initialize the IGMP autojoin socket (err -2) [ 836.176082][T15058] xt_TPROXY: Can be used only with -p tcp or -p udp [ 836.710245][T15060] netlink: 'syz.5.2535': attribute type 10 has an invalid length. [ 838.270589][ T30] audit: type=1400 audit(1753286601.809:687): avc: denied { read } for pid=15070 comm="syz.4.2539" path="socket:[45650]" dev="sockfs" ino=45650 scontext=root:sysadm_r:sysadm_t tcontext=root:sysadm_r:sysadm_t tclass=netlink_rdma_socket permissive=1 [ 838.321386][T15077] netlink: 240 bytes leftover after parsing attributes in process `syz.4.2539'. [ 838.762181][ T5890] usb 6-1: new high-speed USB device number 38 using dummy_hcd [ 839.022236][ T5964] usb 1-1: new high-speed USB device number 63 using dummy_hcd [ 839.112320][ T5890] usb 6-1: Using ep0 maxpacket: 16 [ 839.118670][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 839.130780][ T5890] usb 6-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 839.145000][ T5890] usb 6-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 839.154147][ T5890] usb 6-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.162189][ T5890] usb 6-1: Product: syz [ 839.166364][ T5890] usb 6-1: Manufacturer: syz [ 839.170959][ T5890] usb 6-1: SerialNumber: syz [ 839.177689][ T5890] usb 6-1: config 0 descriptor?? [ 839.186799][T15084] raw-gadget.1 gadget.5: fail, usb_ep_enable returned -22 [ 839.195833][ T5964] usb 1-1: config 220 has an invalid interface number: 76 but max is 2 [ 839.199901][ T5890] hub 6-1:0.0: bad descriptor, ignoring hub [ 839.204726][ T5964] usb 1-1: config 220 contains an unexpected descriptor of type 0x2, skipping [ 839.210212][ T5890] hub 6-1:0.0: probe with driver hub failed with error -5 [ 839.224277][ T5964] usb 1-1: config 220 has an invalid descriptor of length 0, skipping remainder of the config [ 839.232462][ T5890] input: syz syz as /devices/platform/dummy_hcd.5/usb6/6-1/6-1:0.0/input/input94 [ 839.299527][ T5828] usb 3-1: new high-speed USB device number 57 using dummy_hcd [ 839.307551][ T5964] usb 1-1: config 220 has no interface number 2 [ 839.314531][ T5964] usb 1-1: config 220 interface 1 altsetting 5 has 0 endpoint descriptors, different from the interface descriptor's value: 12 [ 839.328325][ T5964] usb 1-1: config 220 interface 0 has no altsetting 0 [ 839.335203][ T5964] usb 1-1: config 220 interface 76 has no altsetting 0 [ 839.345561][ T5964] usb 1-1: config 220 interface 1 has no altsetting 0 [ 839.364195][ T5964] usb 1-1: New USB device found, idVendor=8086, idProduct=0b07, bcdDevice=6c.b9 [ 839.376088][ T5964] usb 1-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 839.391922][ T5964] usb 1-1: Product: syz [ 839.400015][ T5964] usb 1-1: Manufacturer: syz [ 839.433061][ T5890] usb 6-1: USB disconnect, device number 38 [ 839.512802][ T5964] usb 1-1: SerialNumber: syz [ 839.523350][ T5828] usb 3-1: Using ep0 maxpacket: 16 [ 840.149001][ T5828] usb 3-1: config 0 has an invalid interface number: 214 but max is 0 [ 840.173915][ T5828] usb 3-1: config 0 has no interface number 0 [ 840.183539][ T5828] usb 3-1: config 0 interface 214 altsetting 0 endpoint 0x83 has invalid maxpacket 1023, setting to 64 [ 840.547806][ T5828] usb 3-1: New USB device found, idVendor=0596, idProduct=0001, bcdDevice= 5.f5 [ 840.569071][ T5964] usb 1-1: selecting invalid altsetting 0 [ 840.580219][ T5828] usb 3-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 840.621331][ T5964] usb 1-1: Found UVC 7.01 device syz (8086:0b07) [ 840.629652][ T5828] usb 3-1: Product: syz [ 840.639419][ T5964] usb 1-1: No valid video chain found. [ 840.645126][ T5828] usb 3-1: Manufacturer: syz [ 840.652592][ T5828] usb 3-1: SerialNumber: syz [ 840.667313][ T5964] usb 1-1: selecting invalid altsetting 0 [ 840.685793][ T10] usb 5-1: new low-speed USB device number 53 using dummy_hcd [ 840.761026][ T5828] usb 3-1: config 0 descriptor?? [ 840.767674][ T5964] usbtest 1-1:220.1: probe with driver usbtest failed with error -22 [ 840.787708][ T5964] usb 1-1: USB disconnect, device number 63 [ 840.942868][ T10] usb 5-1: config 0 has an invalid interface number: 1 but max is 0 [ 840.950934][ T10] usb 5-1: config 0 has no interface number 0 [ 840.962074][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has an invalid bInterval 0, changing to 10 [ 840.991041][ T10] usb 5-1: config 0 interface 1 altsetting 0 endpoint 0x82 has invalid maxpacket 159, setting to 8 [ 841.022078][ T10] usb 5-1: New USB device found, idVendor=07c0, idProduct=1512, bcdDevice=30.22 [ 841.041710][ T10] usb 5-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 841.064511][ T10] usb 5-1: config 0 descriptor?? [ 841.073353][T15100] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 841.110091][ T10] iowarrior 5-1:0.1: IOWarrior product=0x1512, serial= interface=1 now attached to iowarrior0 [ 842.888358][T15118] SELinux: unrecognized netlink message: protocol=9 nlmsg_type=36 sclass=netlink_audit_socket pid=15118 comm=syz.3.2549 [ 843.209925][ T5828] usbtouchscreen 3-1:0.214: probe with driver usbtouchscreen failed with error -71 [ 843.225869][ T5828] usb 3-1: USB disconnect, device number 57 [ 844.571659][ T118] usb 5-1: USB disconnect, device number 53 [ 845.972373][ T5890] usb 6-1: new high-speed USB device number 39 using dummy_hcd [ 846.523144][ T5890] usb 6-1: config 27 has an invalid descriptor of length 0, skipping remainder of the config [ 846.533922][ T5890] usb 6-1: config 27 interface 0 altsetting 0 endpoint 0x8B has an invalid bInterval 0, changing to 7 [ 846.545159][ T5890] usb 6-1: config 27 interface 0 altsetting 0 has 1 endpoint descriptor, different from the interface descriptor's value: 2 [ 846.558376][ T5890] usb 6-1: New USB device found, idVendor=0582, idProduct=0014, bcdDevice=bb.9d [ 846.572187][ T10] usb 5-1: new high-speed USB device number 54 using dummy_hcd [ 846.703324][ T5890] usb 6-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 846.738381][ T5890] usb 6-1: Quirk or no altset; falling back to MIDI 1.0 [ 846.750516][ T5890] usb 6-1: invalid MIDI out EP 0 [ 846.852571][ T10] usb 5-1: Using ep0 maxpacket: 16 [ 846.862646][ T5890] snd-usb-audio 6-1:27.0: probe with driver snd-usb-audio failed with error -22 [ 846.872516][T15104] udevd[15104]: error opening ATTR{/sys/devices/platform/dummy_hcd.5/usb6/6-1/6-1:27.0/sound/card3/controlC3/../uevent} for writing: No such file or directory [ 846.895468][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has an invalid bInterval 255, changing to 11 [ 846.931263][ T10] usb 5-1: config 0 interface 0 altsetting 0 endpoint 0x83 has invalid maxpacket 59391, setting to 1024 [ 847.105312][ T10] usb 5-1: New USB device found, idVendor=134c, idProduct=0002, bcdDevice=ec.7e [ 847.123609][ T10] usb 5-1: New USB device strings: Mfr=1, Product=2, SerialNumber=3 [ 847.133579][ T10] usb 5-1: Product: syz [ 847.142751][ T10] usb 5-1: Manufacturer: syz [ 847.150214][ T10] usb 5-1: SerialNumber: syz [ 847.153727][T15160] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 847.268861][ T10] usb 5-1: config 0 descriptor?? [ 847.275986][T15150] raw-gadget.1 gadget.4: fail, usb_ep_enable returned -22 [ 847.288279][ T10] hub 5-1:0.0: bad descriptor, ignoring hub [ 847.294292][ T10] hub 5-1:0.0: probe with driver hub failed with error -5 [ 847.436524][ T10] input: syz syz as /devices/platform/dummy_hcd.4/usb5/5-1/5-1:0.0/input/input96 [ 848.881301][ T30] audit: type=1326 audit(1753286612.419:688): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15170 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c538e9a9 code=0x7ffc0000 [ 848.923731][ T30] audit: type=1326 audit(1753286612.459:689): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15170 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c538e9a9 code=0x7ffc0000 [ 848.957338][ T30] audit: type=1326 audit(1753286612.459:690): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15170 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=117 compat=0 ip=0x7f26c538e9a9 code=0x7ffc0000 [ 848.984356][ T30] audit: type=1326 audit(1753286612.459:691): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15170 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c538e9a9 code=0x7ffc0000 [ 849.047550][ T30] audit: type=1326 audit(1753286612.459:692): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15170 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c538e9a9 code=0x7ffc0000 [ 849.075344][ T30] audit: type=1326 audit(1753286612.459:693): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15170 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26c538e9a9 code=0x7ffc0000 [ 849.340158][ T30] audit: type=1326 audit(1753286612.459:694): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15170 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c538e9a9 code=0x7ffc0000 [ 849.491005][ T30] audit: type=1326 audit(1753286612.459:695): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15170 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c538e9a9 code=0x7ffc0000 [ 849.672621][ T30] audit: type=1326 audit(1753286612.459:696): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15170 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=321 compat=0 ip=0x7f26c538e9a9 code=0x7ffc0000 [ 850.192766][ T30] audit: type=1326 audit(1753286612.459:697): auid=4294967295 uid=0 gid=0 ses=4294967295 subj=root:sysadm_r:sysadm_t pid=15170 comm="syz.2.2563" exe="/root/syz-executor" sig=0 arch=c000003e syscall=202 compat=0 ip=0x7f26c538e9a9 code=0x7ffc0000 [ 851.517905][T15197] ALSA: mixer_oss: invalid OSS volume '' [ 851.800534][T15187] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2568'. [ 851.992196][ T5883] usb 6-1: USB disconnect, device number 39 [ 852.162694][ T5828] usb 3-1: new full-speed USB device number 58 using dummy_hcd [ 852.375765][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has an invalid bInterval 0, changing to 10 [ 852.388095][ T5828] usb 3-1: config 0 interface 0 altsetting 0 endpoint 0x81 has invalid wMaxPacketSize 0 [ 852.529543][T15210] 9pnet_fd: Insufficient options for proto=fd [ 852.561520][T15210] binder: BC_ACQUIRE_RESULT not supported [ 852.565375][ T5828] usb 3-1: New USB device found, idVendor=1b96, idProduct=0012, bcdDevice= 0.00 [ 852.571522][T15210] binder: 15209:15210 ioctl c0306201 200000000180 returned -22 [ 852.576775][ T5828] usb 3-1: New USB device strings: Mfr=0, Product=0, SerialNumber=0 [ 852.684306][ T5828] usb 3-1: config 0 descriptor?? [ 852.999865][ T10] usb 5-1: USB disconnect, device number 54 [ 853.037178][T15218] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2577'. [ 853.046381][T15218] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 853.259424][ T5828] ntrig 0003:1B96:0012.0021: item fetching failed at offset 2/5 [ 853.269431][ T5828] ntrig 0003:1B96:0012.0021: parse failed [ 853.290212][ T5828] ntrig 0003:1B96:0012.0021: probe with driver ntrig failed with error -22 [ 853.836360][T15202] genirq: Flags mismatch irq 7. 00200080 (ttyS3) vs. 00200000 (comedi_parport) [ 853.951409][ C0] Oops: divide error: 0000 [#1] SMP KASAN NOPTI [ 853.954954][ T5890] usb 3-1: USB disconnect, device number 58 [ 853.957653][ C0] CPU: 0 UID: 0 PID: 15224 Comm: syz.4.2578 Not tainted 6.16.0-rc7-syzkaller #0 PREEMPT(full) [ 853.973883][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 853.983923][ C0] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 853.990257][ C0] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 b6 be ce f8 48 8d 7b 34 48 b8 00 00 [ 854.009862][ C0] RSP: 0018:ffffc90000007da0 EFLAGS: 00010046 [ 854.015911][ C0] RAX: 0000000000000001 RBX: ffff88807ca12000 RCX: 1ffff1100f942410 [ 854.023863][ C0] RDX: 0000000000000000 RSI: ffffffff88ed2948 RDI: ffff88807ca12080 [ 854.031816][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 854.039767][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 854.047735][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 854.055685][ C0] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 854.064599][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 854.071165][ C0] CR2: 0000200000014000 CR3: 000000000e382000 CR4: 00000000003526f0 [ 854.079120][ C0] Call Trace: [ 854.082379][ C0] [ 854.085205][ C0] comedi_buf_write_samples+0x406/0x640 [ 854.090747][ C0] parport_interrupt+0xec/0x150 [ 854.095581][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 854.101044][ C0] ? __pfx_parport_interrupt+0x10/0x10 [ 854.106515][ C0] __handle_irq_event_percpu+0x229/0x7d0 [ 854.112146][ C0] handle_irq_event+0xab/0x1e0 [ 854.116899][ C0] handle_edge_irq+0x28e/0xab0 [ 854.121648][ C0] __common_interrupt+0xe2/0x250 [ 854.126572][ C0] common_interrupt+0xba/0xe0 [ 854.131235][ C0] [ 854.134149][ C0] [ 854.137066][ C0] asm_common_interrupt+0x26/0x40 [ 854.142087][ C0] RIP: 0010:_raw_spin_unlock_irq+0x29/0x50 [ 854.147881][ C0] Code: 90 f3 0f 1e fa 53 48 8b 74 24 08 48 89 fb 48 83 c7 18 e8 0a 5d 0f f6 48 89 df e8 f2 b0 0f f6 e8 fd 92 3a f6 fb bf 01 00 00 00 62 d3 ff f5 65 8b 05 fb d9 46 08 85 c0 74 06 5b c3 cc cc cc cc [ 854.167471][ C0] RSP: 0018:ffffc9000bbb73c8 EFLAGS: 00000206 [ 854.173521][ C0] RAX: 00000000000012e7 RBX: ffff88802597f938 RCX: 0000000000000006 [ 854.181474][ C0] RDX: 0000000000000000 RSI: ffffffff8de2ff26 RDI: 0000000000000001 [ 854.189427][ C0] RBP: ffff88802597f930 R08: 0000000000000001 R09: 0000000000000001 [ 854.197379][ C0] R10: ffffffff90a94057 R11: 0000000000000001 R12: ffff88802597f938 [ 854.205330][ C0] R13: ffff88802597f930 R14: ffffc9000bbb7678 R15: 000000000000000d [ 854.213288][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 854.218475][ C0] filemap_remove_folio+0x106/0x250 [ 854.223662][ C0] truncate_inode_folio+0x49/0x70 [ 854.228667][ C0] shmem_undo_range+0x376/0x1150 [ 854.233594][ C0] ? __pfx_shmem_undo_range+0x10/0x10 [ 854.238951][ C0] ? __lock_acquire+0x622/0x1c90 [ 854.243883][ C0] ? is_bpf_text_address+0x8a/0x1a0 [ 854.249064][ C0] ? bpf_ksym_find+0x127/0x1c0 [ 854.253814][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 854.259952][ C0] ? percpu_counter_add_batch+0xb8/0x1f0 [ 854.265572][ C0] shmem_evict_inode+0x3a1/0xbe0 [ 854.270497][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 854.275942][ C0] ? __pfx_inode_wait_for_writeback+0x10/0x10 [ 854.281993][ C0] ? find_held_lock+0x2b/0x80 [ 854.286671][ C0] ? evict+0x3a2/0x920 [ 854.290724][ C0] ? __pfx_shmem_evict_inode+0x10/0x10 [ 854.296208][ C0] evict+0x3e6/0x920 [ 854.300103][ C0] ? __pfx_evict+0x10/0x10 [ 854.304510][ C0] ? iput+0x519/0x880 [ 854.308480][ C0] iput+0x521/0x880 [ 854.312275][ C0] ? __pfx_generic_delete_inode+0x10/0x10 [ 854.317982][ C0] dentry_unlink_inode+0x29c/0x480 [ 854.323099][ C0] __dentry_kill+0x1d0/0x600 [ 854.327681][ C0] dput.part.0+0x4b1/0x9b0 [ 854.332084][ C0] dput+0x1f/0x30 [ 854.335702][ C0] __fput+0x51c/0xb70 [ 854.339669][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 854.344857][ C0] task_work_run+0x14d/0x240 [ 854.349434][ C0] ? __pfx_task_work_run+0x10/0x10 [ 854.354529][ C0] ? do_raw_spin_unlock+0x172/0x230 [ 854.359713][ C0] do_exit+0x86c/0x2bd0 [ 854.363873][ C0] ? __pfx_do_exit+0x10/0x10 [ 854.368447][ C0] ? do_raw_spin_lock+0x12c/0x2b0 [ 854.373455][ C0] ? find_held_lock+0x2b/0x80 [ 854.378116][ C0] do_group_exit+0xd3/0x2a0 [ 854.382608][ C0] get_signal+0x2673/0x26d0 [ 854.387098][ C0] ? __pfx_get_signal+0x10/0x10 [ 854.391933][ C0] ? do_futex+0x122/0x350 [ 854.396251][ C0] ? __pfx_do_futex+0x10/0x10 [ 854.400913][ C0] arch_do_signal_or_restart+0x8f/0x7d0 [ 854.406443][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 854.412586][ C0] exit_to_user_mode_loop+0x84/0x110 [ 854.417880][ C0] do_syscall_64+0x3f6/0x4c0 [ 854.422453][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 854.428327][ C0] RIP: 0033:0x7fea1a98e9a9 [ 854.432721][ C0] Code: Unable to access opcode bytes at 0x7fea1a98e97f. [ 854.439714][ C0] RSP: 002b:00007fea17fb00e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 854.448126][ C0] RAX: fffffffffffffe00 RBX: 00007fea1abb6328 RCX: 00007fea1a98e9a9 [ 854.456105][ C0] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fea1abb6328 [ 854.464065][ C0] RBP: 00007fea1abb6320 R08: 0000000000000000 R09: 0000000000000000 [ 854.472019][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fea1abb632c [ 854.479976][ C0] R13: 0000000000000000 R14: 00007ffd7d356350 R15: 00007ffd7d356438 [ 854.487934][ C0] [ 854.490935][ C0] Modules linked in: [ 854.494813][ C0] ---[ end trace 0000000000000000 ]--- [ 854.500340][ C0] RIP: 0010:comedi_inc_scan_progress+0x1cc/0x340 [ 854.506662][ C0] Code: 00 00 00 03 43 2c 48 ba 00 00 00 00 00 fc ff df 48 89 f9 48 c1 e9 03 0f b6 14 11 84 d2 74 09 80 fa 03 0f 8e 53 01 00 00 31 d2 b3 80 00 00 00 89 53 2c e8 b6 be ce f8 48 8d 7b 34 48 b8 00 00 [ 854.526253][ C0] RSP: 0018:ffffc90000007da0 EFLAGS: 00010046 [ 854.532299][ C0] RAX: 0000000000000001 RBX: ffff88807ca12000 RCX: 1ffff1100f942410 [ 854.540251][ C0] RDX: 0000000000000000 RSI: ffffffff88ed2948 RDI: ffff88807ca12080 [ 854.548203][ C0] RBP: 0000000000000000 R08: 0000000000000005 R09: 0000000000000000 [ 854.556156][ C0] R10: 0000000000000000 R11: 0000000000000001 R12: 0000000000000002 [ 854.564106][ C0] R13: 0000000000000000 R14: 0000000000000001 R15: 0000000000000000 [ 854.572057][ C0] FS: 0000000000000000(0000) GS:ffff888124720000(0000) knlGS:0000000000000000 [ 854.580971][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 854.587538][ C0] CR2: 0000200000014000 CR3: 000000000e382000 CR4: 00000000003526f0 [ 854.595495][ C0] Kernel panic - not syncing: Fatal exception in interrupt [ 854.602882][ C0] Kernel Offset: disabled [ 854.607181][ C0] Rebooting in 86400 seconds..